How it stays private
Four things you can check, instead of promises.
A privacy promise is only as good as the company that makes it. Reticenda is built so that its most important property does not depend on trusting us at all.
-
It has no network access
On Android, the app does not hold the internet permission. Without it, Android does not place the app in the group of processes allowed to open network connections, and the kernel refuses every attempt — from our code or from any library inside the app. Network permissions that libraries would bring with them are removed when the app is built, the build fails if the internet permission ever appears, and a test on a real device checks the installed app.
-
Everything at rest is encrypted
Documents, the text read from them, search indexes, notes and settings are stored encrypted on the device with AES-GCM, under a key protected by the phone's secure hardware. Your PIN is a second factor in that key and is never stored, so nobody — including us — can recover the vault without it.
-
Answers are traced, never invented
A citation is taken from the search that found the passage, never from generated text. That is why every answer can point to its page, and why the app says so when the answer is not in your documents.
-
It makes no absolute claims
No system is perfectly secure, and we do not say otherwise. Reticenda makes specific statements that you can verify — such as the absence of the internet permission — and none that you could not.
Check it yourself
You do not have to take our word for it.
The internet permission is either in the app's manifest or it is not. Here are three ways to look, from the simplest.
This app does not hold the internet permission. Android will not give this process a network socket, so it cannot send your documents anywhere.
Permissions, read from Android- android.permission.CAMERA
- android.permission.USE_BIOMETRIC
- android.permission.USE_FINGERPRINT
- com.android.vending.BILLING
- android.permission.FOREGROUND_SERVICE
- android.permission.FOREGROUND_SERVICE_DATA_SYNC
- android.permission.WAKE_LOCK
- android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNETNot requested
- 01
In the app
Open Settings, then "What this app can do". The app lists the permissions it holds as Android reports them — read from the operating system, not from a list we wrote. If the internet permission were ever present, this screen would say so in the same words.
- 02
In your phone's settings
Open your phone's Settings, find Reticenda, tap Permissions, then the menu in the corner and choose to show all permissions. Android lists every permission the app has, including the ones it has not asked for.
- 03
On Google Play, or with a computer
The Play Store page lists the app's permissions under About this app. If you prefer tools, any APK analyser — or Android's own aapt2 dump permissions — prints the manifest, where android.permission.INTERNET does not appear.
What we do not claim
The limits, stated plainly.
- Your phone's security matters most. Keep it updated, protected by a screen lock, and in your control.
- If you forget your PIN, or your phone's secure hardware is reset, the vault cannot be opened again — by you or by anyone. Keep your own backups.
- Anything you export, back up or share leaves the vault's encryption and is protected only by where you put it.
- Google Play delivers the app and its AI model, and handles subscriptions, under Google's own terms.
What leaves your phone, and when
Nothing, unless you decide. Content leaves the app only when you export it, save a Seal, write a backup, or share a file yourself, to a place you choose. Android's cloud backup and device-to-device transfer are switched off for Reticenda, so your vault is never copied into your Google account.