Privacy
Protocol
ScreenCache is a personal image knowledge utility with social features. This document describes how we collect, process, store, and protect your data.
Privacy by Design
Account identity is never exposed publicly. On-device processing keeps your data local.
Safety
Automated scanning protects the community. EXIF metadata is stripped from every image.
Transparency
Every processing step, third-party service, and retention period is documented here.
- 01. ELIGIBILITY
- 02. IDENTITY MODEL
- 03. DATA COLLECTION
- 04. ON-DEVICE PROCESSING
- 05. SERVER PIPELINE
- 06. CONTENT MODERATION
- 07. THIRD-PARTY SERVICES
- 08. DATA RETENTION
- 09. MESSAGING
- 10. PAYMENTS
- 11. YOUR RIGHTS
- 12. POLICY CHANGES
Eligibility
ScreenCache requires users to be at least 13 years of age. Users between 13 and 17 must have parental or guardian consent to use the platform. In the European Economic Area and United Kingdom, the minimum age is 16 years in accordance with GDPR.
Child Safety:We do not knowingly collect data from children below the applicable minimum age. If we discover an underage account, it will be terminated and all associated data purged immediately.
Two-Tier Identity
ScreenCache uses a two-tier identity model designed to separate your private identity from your public presence.
Account
Your private human identity. Tied to your email, manages privacy settings, owns all content. Has Connections (up to 2,000). Account details (email, real identity) are never exposed in public contexts.
Avatar
A public persona with an @handle. Publishes Posts, builds audience, receives messages. An Account can own multiple Avatars (3 on Free, 10 on Premium). Avatars are the only identity visible to the public.
Data Collection
We collect the following categories of data.
Signup Data
Images
Activity Data
App & Device Info
Topic Engagement
Subscription Data
On-Device Processing
The following processing happens entirely on your Android device. No image data is sent to Google or any third party for these operations.
Text Recognition (OCR)
Extracts readable text from your images so they become searchable. Runs in the background after app launch (30-second delay). Results stored locally in your device's Room database.
Image Labeling
Generates descriptive labels for your images to improve search. Processed entirely on-device. Labels remain local unless you publish a Post.
Server-Side Processing
When you back up an image or create a Post, it passes through the following pipeline on our AWS infrastructure.
Malware Scan
Service: AWS GuardDuty S3 Malware Protection
Every uploaded file is scanned. Infected files are quarantined and never served.
Content Moderation
Service: Amazon Rekognition
Checks for policy-violating content (explicit material, violence, child exploitation). Rekognition reads directly from S3 — images are not downloaded to a separate system. Moderation labels and confidence scores are logged to an audit bucket.
Image Transcoding
Service: Scrimage (server-side)
EXIF metadata is stripped (GPS location, camera info, timestamps removed). Images are auto-oriented and transcoded to display.webp (2048px) and thumb.webp (400px). The original is preserved.
AI Metadata Extraction
Service: Amazon Nova Lite (via AWS Bedrock)
Extracts text (OCR), assigns topic categories from a predefined set (food, travel, nature, etc.), and generates up to 30 descriptive labels. Powers search and interest-based discovery. Non-fatal — the pipeline continues if this step fails.
Storage
Service: AWS S3 + CloudFront
Processed image variants are stored in permanent S3 storage. CDN URLs are written to the asset record. Your storage quota is incremented.
EXIF StrippingAll image metadata (GPS coordinates, camera model, timestamps, etc.) is permanently removed during Stage 3. This data is never stored or logged by ScreenCache.
Content Moderation
Automated + Human Review
Every uploaded image is scanned automatically via Amazon Rekognition moderation labels and AWS GuardDuty malware detection.
Child exploitation content is auto-rejected at any confidence level. Reported to NCMEC (18 U.S.C. § 2258A) with IP, email, and content metadata.
Explicit nudity, sexual activity, violence, and visually disturbing content rejected at ≥90% confidence. Content moved to quarantine.
Borderline content (suggestive, gambling, drugs, tobacco, alcohol) is queued for human review before a decision is made.
Quarantined content is retained for 90 days for legal and appeals purposes, then auto-deleted. All moderation decisions are logged with labels and confidence scores (90-day retention). Contact safety@screencache.com to appeal a moderation decision.
Third-Party Services
We do not sell personal data. We do not use any third-party analytics, crash reporting, or advertising services. Data is shared only with the following service providers.
NO THIRD-PARTY ANALYTICS // NO AD NETWORKS // NO CRASH REPORTING SERVICES
Data Retention
All cloud data is stored on AWS infrastructure in the US-East (N. Virginia) region. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Account & Profile Data
Soft-deleted upon account deletion. Retained indefinitely while account is active.
Image Files (display/thumb)
Permanent storage. Intelligent Tiering applied after 30 days.
Original Images
Permanent storage. Transitioned to Glacier Deep Archive after 90 days.
Staging Uploads
Temporary files during processing pipeline. Auto-deleted.
Quarantined Content
Rejected or infected uploads held for legal/appeals purposes.
Moderation Audit Logs
Labels, confidence scores, and decisions. Gzipped JSON.
Push Notification Tokens
FCM device tokens with TTL. Stale tokens auto-cleaned on UNREGISTERED.
Messages
Soft-deleted (placeholder shown). Not hard-deleted from storage.
Subscription Records
Tier, status, and expiration. Retained for billing reconciliation.
Interest Analytics
Aggregate counters only (not per-user). No individual behavior logs exist to delete.
Local Storage (Your Device)
Room database (cached account data, assets, posts, messages, notifications, bookmarks, search presets), DataStore (user preferences), EncryptedSharedPreferences (auth tokens), Android Keystore (Cognito refresh tokens). All local data is cleared when you uninstall the app or log out.
Messaging
ScreenCache supports Account-to-Account and Avatar-to-Avatar direct messaging. Messages can include text (up to 5,000 characters) and up to 4 image attachments.
Messages are delivered in real-time via WebSocket with Firebase Cloud Messaging fallback when offline. Messages are not end-to-end encrypted — they are stored server-side to enable content moderation and safety auditing.
Deleted messages are soft-deleted (a placeholder is shown to recipients). Blocked accounts cannot send messages. DM permissions are controlled per-account (Connections only, or Anyone).
Subscription & Payments
10 GB storage, 3 Avatars
250 GB storage, 10 Avatars
Payments are processed entirely by Stripe Checkout (hosted by Stripe). ScreenCache never sees, processes, or stores your card number or payment method details. Subscription status (tier, active/past due/cancelled/expired, expiration date) is stored in our database via Stripe webhook events.
Your Rights
- Access and obtain a copy of your data
- Rectify inaccurate personal data
- Request erasure (“right to be forgotten”)
- Data portability (export your data)
- Object to or restrict processing
- Contest automated decision-making (Art. 22)
- Lodge a complaint with your supervisory authority
Legal basis: contract performance (account operation, content hosting), legitimate interest (security, fraud prevention, content moderation), legal obligation (CSAM reporting).
- Know what personal information is collected
- Request deletion of personal information
- Opt out of the sale of personal information
- Non-discrimination for exercising your rights
We do not sell personal information. We do not share personal information with third parties for advertising purposes.
To exercise any right, contact privacy@screencache.com. We will respond within 30 days. Account deletion can be initiated directly within the app under Settings.
Policy Changes
We may update this policy to reflect changes in our practices or legal requirements. For material changes, we will notify you via email and/or a prominent notice within the app at least 30 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy. The version number and effective date at the top of this page will always reflect the current revision.
Questions or Concerns?Privacy: privacy@screencache.comSafety: safety@screencache.com
This policy is governed by the laws of the United States (Delaware). International users are subject to data transfer to the US under applicable legal mechanisms.