PRIVACY POLICY

// OVERVIEW

Cerna (“the App”) is developed and published by SHYGUY LLC (“we”, “us”). Cerna helps you find and organize the documents on your own device.

The short version: Cerna does not collect, store, or transmit any of your personal data. There is no account, no analytics, and no server that belongs to us. Your documents, and everything Cerna reads from them, never leave your device.

// DATA WE DO NOT COLLECT

• No personal information (name, email, phone, etc.)
• No device identifiers or fingerprints
• No location data
• No usage analytics or telemetry
• No crash reports
• No advertising identifiers
• No account — none is required, and none can be created

// YOUR DOCUMENTS STAY ON YOUR DEVICE

Cerna only reads the folders and files you explicitly grant it, using Apple's standard security-scoped access. It builds a local index of what it finds — the document's category, a short excerpt for search, and any dates or contacts it detects — and stores that index on your device using Apple's SwiftData. This index never leaves your device and is deleted when you uninstall the App.

Documents you share to Cerna through the iOS share sheet are copied into a private on-device container so the App and its Share Extension can read them. They are never uploaded.

// SORTING IS ON-DEVICE

Cerna recognizes and sorts your documents on your device:

• On every supported iPhone, sorting uses deterministic, on-device pattern detectors — no AI service involved.
• On iOS 26+ with Apple Intelligence, an on-device Foundation Model may refine the sort. This still runs entirely on your device.

Cerna does not send your documents, or anything about you, to any AI provider, cloud service, or server of ours. There is no external analysis API.

// SECRETS ARE HANDLED WITH CARE

When Cerna detects that a document contains a secret — an API key or password sitting in plaintext — it is never sent to any AI model, and its value is never stored. Cerna re-reads the secret from your file only at the moment you ask to reveal or copy it, and it is saved to Apple's Keychain only if you explicitly choose to stash it there.

// PERMISSIONS

• Files & folders — only the ones you grant, so Cerna can index them. Processed locally.
• Notifications — to remind you before a document expires. Reminders are scheduled and delivered locally.
• Contacts — only when you choose to add a business card Cerna found in your documents.

To make your documents findable from the iOS Home Screen, Cerna adds them to Spotlight using Apple's on-device CoreSpotlight index. This index is local to your device, and documents containing a secret are never added to it.

// NETWORK REQUESTS

Cerna makes no network requests to SHYGUY LLC — we have no backend — and no requests to any analytics, advertising, or third-party service. The App is designed to work fully offline.

// PAYMENT

Cerna is a one-time paid app, purchased through Apple's App Store. We never receive, process, or store any payment information — Apple handles the transaction. There are no subscriptions and no in-app purchases.

// ANDROID

Cerna is also available for Android on Google Play. Everything in this policy applies to it, with these differences:

• It has no internet permission: Android itself prevents it from connecting to anything. Help & Feedback links open in your mail app or browser.
• Folders are granted with Android's own folder picker; Cerna reads only the folders you pick, and you can remove one at any time in Settings, which also gives up its access.
• Photos of documents and scanned PDFs are read with on-device text recognition (the open-source Tesseract engine, built into the app). No AI model is used on Android, and nothing is sent to any service.
• Files you share to Cerna from another app are copied into the app's private storage on your phone so they can be indexed and opened. They are never uploaded.
• A secret you choose to stash is encrypted with a key held in your phone's secure hardware (the Android Keystore) and listed in Settings, where you can copy it back out or delete it. A copied secret is marked sensitive and cleared from the clipboard after a minute while Cerna is running.
• Adding a business card opens your contacts app with the details filled in; Cerna does not ask for access to your contacts.
• Expiry reminders are scheduled on the phone with Android's WorkManager and shown as local notifications.
• Android has no system-wide search for apps, so nothing is added to any search index outside Cerna.
• Android's cloud backup is turned off for the app, so your index is not copied to Google Drive. Uninstalling the app deletes everything it stored.
• Cerna for Android is a one-time purchase through Google Play; Google handles the payment and we never see payment details.

// CHILDREN'S PRIVACY

Cerna does not collect any data from anyone, including children under 13. The App is rated 4+ and is safe for all ages.

// CHANGES TO THIS POLICY

We may update this policy if the App's functionality changes. Material changes will be noted in the App Store and Google Play release notes. The effective date above reflects the latest revision.

// CONTACT

Questions about this policy? Contact us at privacy@shyguy.studio