Potentiometric Titration

1. Who we are

Potentiometric Titration is developed and published under the name XenVault Interactive, a trading name used by an independent software developer based in Ukraine. There is no company behind it and no staff; it is one person. For data-protection purposes that person is the data controller, reachable at the addresses in section 12.

This policy covers the Potentiometric Titration application on all platforms it is published for, and describes exactly what the application does. It does not describe the websites of Apple, Google or Microsoft, which distribute it under their own policies.

2. What the app sends to us

The app performs some of its chemistry calculations on a server rather than on your device. When you run such a calculation, it makes an HTTPS request to our calculation endpoints, which run as Microsoft Azure Functions hosted in the European Union (West Europe region).

The calculation request contains

• The values you entered for that calculation — concentrations, volumes, temperatures, pH values and similar numbers, plus which calculation method you chose. These are chemistry parameters. They say nothing about you and are not linked to any identifier.
• Technical context about the device, so that a fault can be reproduced on the platform it happened on: the operating system and its version, the device type and form factor, the manufacturer and the model, and the application build.

What our server records

Our calculation functions write diagnostic log entries: the calculation requested, the values received, the result returned, the technical context above, and whether the call succeeded or failed. These logs exist so that a wrong answer or a crash can be investigated. They may also include standard request telemetry generated automatically by Microsoft Azure under its default monitoring settings.

Any request over the internet necessarily reveals your device's IP address to the server that answers it, and Azure may process it as part of that standard telemetry. Our own code neither reads nor records IP addresses, we do not attempt to identify anyone from them, and we hold no other information that an IP address could be matched against.

What is never sent

• No name, e-mail address, account or user identifier — the app has none of these to send.
• No device name. (Earlier versions of the app included the device name in the technical context; it has been removed, because a device name can contain a person's name.)
• No advertising identifier, no persistent device identifier, no cookie.
• No location, contacts, photos, calendar, microphone or camera data. The app requests none of these permissions.

3. What stays on your device

Most of what the app holds never leaves the device it runs on:

• The data you enter and any work you save.
• Files you export — PDF, Excel or CSV reports are written where you choose to put them and are never transmitted to us.
• The app's own error log, written to the application's private storage so that you can read it or attach it to a support message if you choose to. Nothing sends it automatically.
• Your settings and preferences.

Uninstalling the app removes this data. We cannot recover it, because we never had it.

4. What we do not do at all

• No accounts. There is nothing to register for, no password and no profile.
• No analytics. No Google Analytics, no Firebase, no third-party crash-reporting or telemetry SDK is built into the app.
• No advertising. No ad networks, no advertising identifiers, no cross-app or cross-site tracking, and no data broker receives anything.
• No payments. The app is free, with no in-app purchases and no subscriptions, so no payment or billing data exists.
• No selling or sharing of personal information in the sense of the GDPR, the CCPA/CPRA or any comparable law.
• No profiling and no automated decision-making about people. The only automated decisions the app makes are about chemistry.

5. Why we process what we process

Under the GDPR we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to carry out the calculation you asked for and return the result. Without sending the values there is no result.
• Legitimate interests (Art. 6(1)(f)) — to keep the service working: diagnosing errors, understanding which platform a fault occurred on, and protecting the endpoints from abuse. Our interest is a functioning tool; the impact on you is minimal because the data concerned does not identify you.

We do not use your calculation data to train machine-learning models, and we do not use it for any purpose beyond returning your result and fixing faults.

6. Who else is involved

Microsoft Azure hosts the calculation endpoints and their diagnostic logging, acting as our processor on our instructions. The functions run in the European Union (West Europe). Microsoft operates globally and support or platform operations may involve access from outside the EEA; where that happens it is covered by Microsoft's own data-protection terms and the European Commission's Standard Contractual Clauses.

Apple, Google and Microsoft distribute the app through their stores. They may collect information about downloads, purchases, ratings and crashes under their own privacy policies, over which we have no control and to which this policy does not extend. We receive only aggregate, anonymous statistics from them.

We use no other processors. There are no affiliates, no business partners and no advertising or analytics vendors.

7. How long anything is kept

• Calculation inputs and results: not stored as records. They pass through the function to produce your answer and appear only in the diagnostic logs described above.
• Diagnostic logs and Azure telemetry: retained under Azure's default monitoring retention, which is up to 90 days, after which they are deleted automatically.
• Everything else: there is nothing else. No user records, no profiles, no backups of your data, because none is collected.

8. Your rights

If you are in the EU, the UK, or another jurisdiction with comparable law, you have the rights of access, rectification, erasure, restriction, objection and portability, and the right to lodge a complaint with a supervisory authority — in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

In practice these rights are unusually simple here, and it is only fair to explain why: we hold nothing that identifies you, so there is normally nothing to retrieve, correct or delete on request. If you contact us we will explain what, if anything, could relate to you — but with no account, no identifier and no name in our logs, we generally cannot connect any record to a particular person, and the GDPR does not require us to collect additional information merely to be able to do so.

California residents have the corresponding rights to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information and never have, so there is nothing to opt out of. Exercising any right will never result in worse treatment; the app is free and behaves identically for everyone.

9. Children

Potentiometric Titration carries no age restriction and is rated as suitable for all ages. It is a chemistry study tool used by school and university students as well as professionals, so younger users are expected and welcome.

The app is built so that this raises no privacy question: it collects no personal data from anyone, of any age. There is no account to create, no name or e-mail to enter, no advertising, no advertising identifier, no persistent identifier, no analytics, no tracking, no social or messaging feature, no user-to-user contact, and no way for anyone to publish or share anything through it. The only information leaving the device is the chemistry values a calculation needs and technical details of the device itself, used solely to return your result and to keep the app working — what the US Children’s Online Privacy Protection Act calls support for the internal operations of the service.

If you are a parent or guardian and have any question about this, or believe a child has somehow provided us with personal data, contact us at the address in section 12 and we will answer and remove anything found.

10. Security

All communication between the app and our calculation endpoints uses HTTPS. The endpoints accept requests only with a short-lived token issued by our token service. No credentials, keys or personal data are embedded in the app. Diagnostic logs are held within our Azure subscription under access controls managed by Microsoft.

No system can be guaranteed completely secure. Given that the data involved is chemistry values and device model strings, the consequences of a breach would be limited — but if one occurred and affected personal data, we would notify the relevant authority and affected users as the law requires.

11. Changes to this policy

If the app changes what it collects, this page changes first. The date at the top always reflects the current version, and material changes will be described in the app's release notes. Continuing to use the app after a change means you accept the revised policy.

12. Contact

Two addresses, so questions reach the right place:

• Privacy, data-protection and general enquiries: xenvault.interactive@gmail.com
• Technical and chemistry support: chem.calculas@gmail.com
• Or use the support pages.

See also our Terms and Conditions.