Privacy Policy
You are the data controller for any personal data you type into the app yourself — SendMasked and Valueroom Sweden AB do not collect, store or get access to your documents or personal data. Below is exactly what happens with your data in the app, step by step.
Manual mode (default)
In manual mode, no data leaves the device. Text or documents you paste or share in are masked locally by the app's engine. You copy the masked text yourself and paste it into another app — ChatGPT, Claude, Gemini, or anything else. That app is then the recipient, under its own terms — SendMasked doesn't send anything on your behalf in this mode. You can verify this by switching the device to airplane mode: masking and review still work.
Direct mode (optional)
If you choose to connect your own API key for OpenAI, Anthropic or Google, you can send the masked text straight from the app instead. The text then goes, encrypted, directly from your device to the provider you chose — never through any SendMasked servers, because none exist. What the provider does with the request is governed by their own terms, not SendMasked's. Direct mode is always off until you add a key yourself.
API keys
An API key you add is stored in the device's keychain, and shared, where technically possible, between the app and its share extension through a protected keychain group. The key never leaves the device except in the request to the provider you chose, and SendMasked keeps no copy of it.
Apple Intelligence and recognition layers
On supported devices, the app uses Apple's built-in language models (Apple Intelligence and the NaturalLanguage framework) locally on the device to find names and organisations more reliably. That means no network traffic to Apple for this purpose — the analysis happens on device. A third, optional recognition layer (Desert Ant "Redact") can be turned on in Settings for further name detection; it is off by default. If you turn it on, a small model file (about 12 MB) is fetched from the provider's servers the first time, and the provider then receives anonymous usage statistics about how often the feature runs — never any document content. This layer is the only thing in the app that talks to a third party without you first sending or copying text yourself, and it stays off until you actively turn it on.
Subscription
The Pro subscription is handled by Apple through the App Store and StoreKit. SendMasked can see whether you have an active subscription, but never handles payment card details or other payment information — Apple does. How many maskings you've made this month (for the 10-per-month free limit) is counted and stored locally on the device only.
Crashes
If the app crashes, a small local text file with the error and stack trace is saved, on the device only, so you can see what happened next time you open the app. The file never contains document text, and is never sent anywhere automatically.
What SendMasked doesn't do
- No analytics or telemetry about how you use the app.
- No cookies — this website sets none.
- No accounts or sign-in. The app doesn't need an email address to work.
- No SendMasked servers that your documents pass through.
Contact
Questions about this policy or the app: support@sendmasked.com. Data controller organisation: Valueroom Sweden AB.
This text is written to match the code as it stands today. If you find a difference between what's written here and what the app actually does, please let us know.