Privacy Policy
You are the data controller for any personal data you type into the app yourself — SendMasked and Valueroom Sweden AB do not collect, store or get access to your documents or personal data. Below is exactly what happens with your data in the app, step by step.
Manual mode (default)
In manual mode, no data leaves the device. Text or documents you paste or share in are masked locally by the app's engine. You copy the masked text yourself and paste it into another app — ChatGPT, Claude, Gemini, or anything else. That app is then the recipient, under its own terms — SendMasked doesn't send anything on your behalf in this mode. You can verify this by switching the device to airplane mode: masking and review still work.
Direct mode (optional)
If you choose to connect your own API key for OpenAI, Anthropic or Google, you can send the masked text straight from the app instead. The text then goes, encrypted, directly from your device to the provider you chose — never through any SendMasked servers, because none exist. What the provider does with the request is governed by their own terms, not SendMasked's. Direct mode is always off until you add a key yourself.
Data stored on the device
So that an AI answer can still be restored if the app is closed while you are in another app, SendMasked stores the link between the codes and the original details, together with the document, on the device. The Recent list is stored the same way. Everything is encrypted with AES-256-GCM. The encryption key is kept in the device keychain, on this device only, and is not included in backups.
The data is deleted automatically after 24 hours. In Settings › General › Stored data you can choose another time (1 hour, 7 days, 30 days, until you delete them, or only while the app is open), see and delete saved keys one by one, turn Recent off and delete everything at once with Clear everything now. That also deletes the encryption key, so nothing that was stored can be read again. Text shared to the app from another app is also stored encrypted until the app has opened it.
The Safari extension
The Safari extension (from version 1.2) only runs on chatgpt.com, claude.ai and gemini.google.com, and only if you turn it on and allow those sites. Masking happens on the device, with the same engine as the app. The key is kept encrypted in the app, in the same way and for as long as above.
When you show an answer with the real details, they appear in a panel the extension draws in a closed part of the page. The website cannot read it, and the real details are never written into the page. If you copy the answer, they only go to your clipboard. The extension sends nothing to us or to anyone else.
API keys
An API key you add is stored in the device's keychain, and shared, where technically possible, between the app and its share extension through a protected keychain group. The key never leaves the device except in the request to the provider you chose, and SendMasked keeps no copy of it.
Apple Intelligence and recognition layers
On supported devices, the app uses Apple's built-in language models (Apple Intelligence and the NaturalLanguage framework) locally on the device to find names and organisations more reliably. That means no network traffic to Apple for this purpose — the analysis happens on device, and no third party is contacted for recognition.
Subscription
The Pro subscription is handled by Apple through the App Store and StoreKit. SendMasked can see whether you have an active subscription, but never handles payment card details or other payment information — Apple does. How many maskings you've made this month (for the 10-per-month free limit) is counted and stored locally on the device only.
Crashes
If the app crashes, a small local text file with the error and stack trace is saved, on the device only, so you can see what happened next time you open the app. The file never contains document text, and is never sent anywhere automatically.
What SendMasked doesn't do
- No analytics or telemetry about how you use the app.
- No cookies — this website sets none.
- This website counts visits anonymously with Cloudflare Web Analytics, without cookies and without identifying you. The app is not affected.
- No accounts or sign-in. The app doesn't need an email address to work.
- No SendMasked servers that your documents pass through.
Contact
Questions about this policy or the app: support@sendmasked.com. Data controller organisation: Valueroom Sweden AB.
This text is written to match the code as it stands today. If you find a difference between what's written here and what the app actually does, please let us know.