Privacy Policy — PrivyMermaid (Android)

Last updated: July 26, 2026

PrivyMermaid is an offline-first Mermaid diagram editor for Android. This policy explains how the Android developer preview handles data. The app does not operate a PrivyMermaid account service or cloud backend.

1. Data collection

PrivyMermaid does not collect, sell, or send personal data, diagram content, usage analytics, telemetry, crash reports, device identifiers, or location data to us.

The app does not require an account or sign-in.

2. Local rendering and documents

• Rendering: Mermaid rendering uses a copy of Mermaid bundled inside the application. The rendering WebView is restricted to local application assets and has network and file access disabled.
• Documents: Diagram names, Mermaid source, and update times are stored in a private Room database on your device.
• Settings: Theme, preview background, selected document, and provider preferences are stored locally in Android DataStore.
• Optional tokens: If you enter a provider token, it is encrypted with an AES-GCM key held in Android Keystore. The token is not included in the normal settings store, exported files, or Android backups.

Android backup is disabled for the app. You can remove your local content by deleting documents in the app, clearing the app's storage, or uninstalling it.

3. Files you choose to import, export, or share

PrivyMermaid uses Android's system document picker for imports and the system create-document flow for exports. It accesses only files you explicitly choose. The app does not request broad storage or media-library permissions.

When you export or share a Mermaid, SVG, PNG, or PDF file, the selected destination or receiving app handles that file under its own privacy policy. Shared temporary files are created in PrivyMermaid's private cache for the Android share flow.

4. Optional provider connections

The preview offers settings for Ollama, LM Studio, and OpenAI-compatible endpoints. PrivyMermaid has no built-in AI service or relay. The app can make a direct request only after you enter an endpoint and actively use a provider action, such as refreshing its model list.

• Your choice: The endpoint address, model, and optional token are configured by you. Data sent to that endpoint is governed by the provider or server operator you select.
• Local-network caution: An http:// endpoint on a LAN is not encrypted in transit and may expose request data to others on that network. Use a trusted network or an HTTPS endpoint.
• Current preview status: Pro purchases and the Generate, Ask, and Fix workflows are not available in the Android developer preview.

5. Contact

For privacy questions or feedback, contact us at:

• Email: [email protected]
• Feedback: Submit feedback or report a problem

PrivyMermaid — private, offline-first Mermaid diagram editing for Android.