Privacy Policy & Security Overview

01. Introduction & Core Philosophy

JSON Lens ("the App", "we", "our") is developed by Jinomial as a privacy-respecting, high-performance developer tool for exploring, inspecting, and transforming JSON structures using an embedded jq engine on Android devices.

We believe that developer tools should operate with complete transparency. You routinely work with proprietary payloads, staging APIs, configuration files, and sensitive records. JSON Lens is architected from the ground up so that your data never leaves your device unless you explicitly export or send it yourself.

02. Information We Do Not Collect

JSON Lens does not collect, harvest, aggregate, sell, or share personal or sensitive data. Specifically:

• No Personal Identifiers: We do not ask for or collect names, email addresses, telephone numbers, or physical addresses.
• No Account Registration: You do not need to create an account, log in, or provide credentials to use the application.
• No Location Tracking: The app does not access GPS, Wi-Fi location, coarse location, or cell-tower data.
• No Device Fingerprinting: We do not track unique hardware identifiers, advertising IDs (GAID), IMEI, or MAC addresses.
• No Usage Analytics / Telemetry: There is no Google Analytics, Firebase Analytics, Mixpanel, or telemetry library embedded in JSON Lens. We do not track which features or screens you use.
• No Third-Party Advertising: There are no advertisements, ad networks, or behavioral tracking SDKs in the app.

03. How Your Data Is Processed

JSON Lens operates as a local workstation on your Android device:

A. Pasted & Imported JSON Payloads

When you paste text into JSON Lens, open a local file, or receive data via the Android Share sheet, that data is loaded directly into volatile device memory (RAM). The embedded native C jq engine processes the payload locally via an asynchronous Java Native Interface (JNI) bridge. Your data is never transmitted to any external server owned or operated by Jinomial.

B. Local File Storage Access

When opening local .json or .txt files, JSON Lens utilizes Android's official Storage Access Framework (SAF). The app does not request broad file system permissions. It receives scoped, read-only access strictly to the individual file you choose in the system picker. When exporting results to storage, the file is saved exclusively to the destination folder you confirm in the system file picker.

C. Local Settings & Query History

To provide a productive user experience, JSON Lens stores limited app configuration data locally on your device using Android Jetpack DataStore:

• Recent jq query strings and saved recipes
• Favorite queries marked by you
• Recent URLs fetched (stored strictly on-device for convenience)
• User interface preferences (theme selection, active tab mode)

This information is stored in the app's private, sandboxed internal storage and is never synchronized to external servers. You can clear this data at any time (see Section 6).

04. Network Access & Permissions

JSON Lens declares the standard Android android.permission.INTERNET permission in its manifest. Here is exactly how and when network access is used:

• User-Entered URLs: If you use the "Fetch from URL" feature, the app sends an HTTP or HTTPS request directly from your device to the endpoint URL you specified. Custom headers, basic authentication, or bearer tokens entered by you are sent solely to that endpoint and are not logged or intercepted by Jinomial.
• Curated Live Sample Feeds: The app offers optional public demonstration feeds (such as USGS Earthquake Data, Spaceflight Launches, and HTTPBin). Fetching these feeds connects your device directly to those public APIs. If you are offline, JSON Lens falls back to bundled static sample assets without sending any network request.

05. Security Architecture

We treat data security with the utmost seriousness:

• Transport Layer Security (TLS): All user-initiated network requests leverage modern OkHttp with TLS 1.2+ and TLS 1.3 encryption, honoring Android's strict Network Security Config.
• Native Memory Safety: The native jq engine operates with isolated memory buffers, query cancellation handlers, and recursion timeout protections to guard against infinite loops or denial-of-service payloads.
• No External Cloud Dependencies: Because there are no backend servers or databases associated with JSON Lens, there is zero risk of your data being exposed in a third-party server breach.

06. Data Retention & Deletion

Because we do not collect or store any of your data on external servers, there is no server-side retention of any personal data.

To delete all on-device data:

• Open Android Settings > Apps > JSON Lens.
• Select Storage & Cache.
• Tap Clear Storage / Clear Data.

Uninstalling JSON Lens from your device automatically purges all locally stored preferences, history, and cached assets from your device.

07. Children's Privacy

JSON Lens is a developer utility not aimed at or marketed toward children under 13 years of age (or under the applicable age threshold in your jurisdiction). Because the application does not collect personal information from any user, it does not knowingly collect personal data from children.

08. Changes to This Privacy Policy

We may update this Privacy & Security Policy from time to time to reflect changes in legal requirements, Android operating system updates, or new application features. When changes are made, the "Last Updated" date at the top of this document will be updated. We encourage you to review this page periodically.

09. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the security of JSON Lens, please contact us: