Privacy Policy

This policy combines the general Mobile Safe Apps privacy policy with the specifics of eMRTD Lab (“the app”), an educational and development testing tool that emulates and reads electronic identity documents (eMRTD / CIE) over NFC.

1. Nature of the app

The app works with synthetic test data and its own test signing keys. It cannot create genuine, government-signed credentials and is not affiliated with any issuing authority. It is intended only for lawful testing, debugging and learning.

2. Data collection

The app does not directly collect personally identifiable information and does not send your profiles to the developer or to any server. Certain information you enter or load is retained only on your device. Third-party services integrated in the app (see §4) may collect identifying and diagnostic information according to their own policies.

3. Data processed on your device

• Test identity profiles (names, document number, dates, etc.) you create or load — stored locally in the app’s private storage (Android SharedPreferences).
• Facial image (DG2) you choose for a profile — stored locally with that profile.
• Data read from a physical document via NFC (e.g. DG1/DG2/SOD) — loaded into the current session only and not written to disk unless you explicitly save it as a profile.
• APDU logs of the emulated session — held in memory and shown in the app; not persisted.

The app uses the NFC permission to emulate a card (HCE) and to read a card you hold against the device, and Internet/Network access for the third-party services below. It does not request contacts, location, files, or camera-roll access beyond the single image you explicitly pick.

4. Third-party services

Depending on the build, the app may include:

• Google Play Services
• Google AdMob (advertising) — where required, the app shows a consent form (Google UMP); you can review your choice from the in-app menu (“Privacy”). policies.google.com/technologies/ads
• Google Analytics and Firebase Crashlytics (usage statistics and crash reporting) to help improve stability. firebase.google.com/support/privacy

These services may process identifiers (such as the advertising ID) and technical/diagnostic data (device IP, device name, OS version, app configuration, usage timestamps) according to their own privacy policies.

5. Log data

Through the third-party products above, log data such as device IP address, device name, operating system version, app configuration and the time/date of use may be collected.

6. Cookies

The app does not use cookies directly, but third-party code and libraries it relies on may employ them.

7. Service providers

Third parties may assist with delivering the service and are obligated not to disclose or use the information for any other purpose.

8. Data sharing and retention

• The app itself does not sell or share your identity profiles. They remain on your device until you delete them or uninstall the app.
• Data handled by the third-party services above is retained according to their respective policies.

9. Security

No method of transmission over the internet or electronic storage is 100% secure and reliable, so absolute security cannot be guaranteed.

10. Your choices

• Delete all data in the app removes all saved profiles, photos and imported card data.
• Uninstalling the app removes all locally stored data.
• Adjust ads consent from the in-app Privacy option, and advertising identifiers from your Android settings.

11. Children’s privacy

The app is a developer/testing tool and is not directed to children and does not knowingly collect data from children under 13; any such data would be immediately deleted.

12. Changes

This policy may be updated; the latest version is available at the online address above.

13. Contact

For any questions about this policy, contact mobilesafeapps@gmail.com.