Master Privacy Policy & Data Safety
Effective Date: November 6, 2026 | Last Updated: November 7, 2026
Our Commitment: At Cenote Softworks, our mission is to build safe, secure, private, and trustworthy software. We reject surveillance capitalism: we do not sell your personal data, we do not track you across other applications, and we do not clutter our tools with commercial advertising networks. When data is stored or synchronized, it is used strictly and exclusively to deliver the utility you rely on.
1. Universal Scope & Data Controller
This Master Privacy Policy governs all mobile, desktop, and web applications published by Cenote Softworks ("we," "our," or "us"), collectively referred to as the "Software," as well as our official developer web services at cenotesoftworks.com.
Data Controller Contact: For any privacy inquiries, data rights requests, or compliance communications, reach our team directly at support@cenotesoftworks.com or cenotesoftworks@gmail.com.
2. Core Principles of Trust & Privacy
- No Commercial Tracking: We never embed third-party advertising SDKs, behavioral analytics trackers, or data-broker profiling tools.
- No Data Monetization: We do not sell, rent, trade, or monetize your personal content or usage habits.
- Purpose-Bound Utility: Data requested or processed by our applications is utilized strictly to provide functional utility (e.g., parsing a recipe, logging caregiver notes, or syncing a user's library across devices).
- User Sovereignty: You retain ownership of your content, with absolute rights to export or permanently erase your data at any time.
3. How We Handle Data Across Our Applications
To deliver real-world utility while preserving complete transparency, Cenote Softworks organizes its software into two distinct delivery models:
🛡️ Model A: Sovereign Local-First Applications (e.g., CareSync Companion)
For applications designed for personal privacy or sensitive documentation:
• 100% On-Device Storage: All user content (voice journals, transcripts, notes, settings) resides exclusively on your device's local filesystem in isolated application sandboxes.
• Hardware Encryption: Sensitive on-device databases are encrypted at rest using platform-native hardware keystores (e.g., Android Keystore, SQLCipher, AES-256).
• Zero Server Transmission: The application functions completely offline, with zero data transmitted to remote servers.
☁️ Model B: Secure Cloud-Synchronized Applications (e.g., MiseEnPlace)
For applications engineered for seamless multi-device continuity (e.g., accessing recipe libraries on both phone and tablet):
• Account Authentication: We utilize Firebase Authentication (such as Google Sign-In) to verify your account identity, collecting your email address, display name, and unique user identifier (UID) solely for account management and access control.
• Cloud Synchronization: User content (recipes, custom tags, scaling preferences) is stored and synchronized using Google Cloud Firestore (hosted in the nam5 multi-region). Firestore provides instant local offline caching, allowing full reading and editing when disconnected.
• Encryption Standards: All data in transit is encrypted using modern Transport Layer Security (TLS 1.3), and all data at rest on cloud servers is encrypted using AES-256 standard encryption.
• Account & Data Deletion: In accordance with Google Play Developer Policy, users can delete their entire content library in-app, or permanently delete their cloud account and all synchronized records at any time by contacting support@cenotesoftworks.com.
4. Hardware Permissions & System Calls
All device hardware permissions requested by Cenote Softworks applications adhere strictly to our Permission Minimization Standard:
- Camera Access (e.g., in MiseEnPlace): Invoked solely when you explicitly initiate an optical scan (such as scanning physical recipe cards via Optical Character Recognition — OCR). Camera frames are processed locally in-memory; video streams and raw images are never sent to external servers.
- Microphone Access (e.g., in CareSync Companion): Invoked solely for user-initiated speech transcription or audio logs. Audio streams are transcribed locally on-device and are never uploaded to remote speech APIs.
- Storage / Media Files: Invoked solely to save user-initiated exports (PDFs, JSON, CSV) or to import user-selected document files.
5. Authorized Third-Party Infrastructure Providers
Cenote Softworks does not partner with commercial data brokers or ad networks. The only third-party infrastructure providers utilized are:
- Google Play Services: Core application distribution, official updates, and licensing verification under Google's standard Privacy Policy.
- Google Cloud Platform & Firebase: Industry-standard cloud infrastructure utilized strictly for authentication (Firebase Auth) and database synchronization (Cloud Firestore) for cloud-enabled apps.
- Cloudflare: Secure Edge hosting and SSL encryption for our official developer web presence (
cenotesoftworks.com).
6. European Economic Area (EEA) & UK Disclosures (GDPR Compliance)
Under the General Data Protection Regulation (GDPR) and UK Data Protection Act:
- Legal Basis: For local-first apps, our processing is based on Performance of a Contract (delivering requested on-device software utility). For cloud-synced applications (*MiseEnPlace*), processing is based on Performance of a Contract (maintaining your account and synchronizing requested files across your devices) and Consent.
- User Rights: You have the right to access, rectify, port, or erase your personal information. For on-device data, clearing application data or uninstalling the app permanently purges all records. For cloud accounts, you may request account erasure at support@cenotesoftworks.com.
7. California Consumer Privacy Disclosures (CCPA / CPRA)
For California residents under the California Consumer Privacy Act:
- No Sale or Sharing of Personal Information: Cenote Softworks has never sold, rented, or shared personal information with commercial third parties in the preceding 12 months, and will never do so.
- Non-Discrimination: You will receive identical software quality, pricing, and responsiveness regardless of exercising your legal privacy rights.
8. Children's Privacy (COPPA Compliance)
Our applications are designed for general audiences and professional productivity. We do not design software to target children under the age of 13, nor do we knowingly collect or solicit personal information from children. If you believe a child has provided us with personal contact information, please notify us at support@cenotesoftworks.com, and we will promptly purge the information.
9. Developer Verification & Official Contact
For developer verification bodies, platform reviewers, and user inquiries:
| Developer Entity: | Cenote Softworks (Independent Software Studio) |
| Primary Support: | support@cenotesoftworks.com |
| Direct Developer Intake: | cenotesoftworks@gmail.com |
| Official Website: | https://cenotesoftworks.com |
| Physical Address: | [Registered Business Address / P.O. Box – Available Upon Official Verification Request] [City, State/Province, Postal Code, Country] |
| Telephone: | [Verification Support Line: +1 (XXX) XXX-XXXX] |