ZMatrix Network Intelligence Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how ZMatrix Network Intelligence ("ZMatrix," "the App," "we," "us," or "our") collects, uses, and protects information when you use our iOS application, available on the Apple App Store. ZMatrix Network Intelligence is developed and operated by Halonex.

ZMatrix is a personal cybersecurity toolkit that provides Email Breach Monitoring, local network scanning, IP Intelligence, and a personalized Security Score — all designed with a privacy-first architecture.

By downloading, installing, or using ZMatrix, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the App immediately.

2. Information We Collect

ZMatrix adheres to a strict data minimization philosophy. We categorize the information involved in the App's operation as follows:

• Email Addresses (Hashed): When you add email addresses for breach monitoring (up to 5), your email is converted into a SHA-1 hash on-device before any external API request is made. Your raw email address is never transmitted to any third-party server.
• Local Network Data: The Network Scanner discovers devices on your local Wi-Fi subnet, identifying IP addresses, open ports, and running services. This data is processed entirely on-device and is never transmitted externally.
• Public IP Metadata: The IP Intelligence feature retrieves publicly available metadata about your current IP address, including WHOIS data, DNS records, reverse DNS, hosting provider, ASN, and RDAP information. This is queried from public registries and is not personally identifiable.
• Security Score: Your Security Score is computed locally on your device based on breach results and resolution status. It is not transmitted to or stored on any external server.
• Search History: Past scan results and queries are stored locally on your device to allow you to review previous findings. This data remains on-device at all times.
• Widget Data: Home Screen Widgets display Security Score, Email Monitoring status, Network Status, and IP Intelligence summaries. All widget data is sourced from locally stored information and does not involve additional network requests beyond the App's standard operations.

3. Information We Do Not Collect

We want to be explicit about the data we do not collect, access, or store:

• Personal Identity Data: We do not collect your name, physical address, phone number, or any government-issued identifiers.
• Account Credentials: We never request, store, or transmit passwords or authentication tokens for any of your accounts.
• Contacts or Calendar Data: ZMatrix does not access your contacts, calendar, photos, or any other personal data stored on your device.
• Location Data: We do not access GPS, Bluetooth-based location, or any other precise or coarse location data.
• Tracking or Advertising Data: We do not use advertising identifiers (IDFA), fingerprinting, or any cross-app/cross-site tracking technologies.
• Usage Analytics: We do not employ third-party analytics SDKs or collect behavioral usage metrics.

4. How Your Information Is Used

All information processed by ZMatrix serves a single purpose: delivering the cybersecurity features you explicitly initiate. Specifically:

• Breach Detection: Hashed email prefixes are sent to breach-monitoring APIs to check whether your credentials appear in known data breaches. Results are displayed in-app and cached locally for your review.
• Network Analysis: Local network scan data is used exclusively to render device information on-screen. It is processed in real-time and stored only in your local scan history.
• IP Enrichment: Your public IP address is queried against public registries to retrieve metadata. This is a standard, publicly available lookup and does not expose any private data.
• Security Score Computation: Your score is derived algorithmically on-device from the number of unresolved breaches associated with your monitored emails.

We do not use your information for marketing, profiling, selling to third parties, or any purpose beyond the functionality described above.

5. Third-Party Services

ZMatrix interacts with external services solely to deliver its core features. These interactions are limited and privacy-preserving:

• Breach Database APIs: Hashed email data (specifically, partial k-anonymity hash prefixes) are sent to breach-monitoring services to check for credential exposure. The full hash is never transmitted — only a prefix — ensuring the service cannot determine your email address.
• Public IP Registries: Standard lookups against WHOIS, DNS, and RDAP registries are performed to enrich your IP intelligence view. These are publicly accessible databases and the queries do not expose personal information.
• Apple Services: ZMatrix uses Apple's standard frameworks for App Store transactions (if applicable), WidgetKit for Home Screen Widgets, and local networking APIs. These are governed by Apple's Privacy Policy.

We do not integrate any third-party advertising networks, social media SDKs, or analytics platforms.

6. Data Storage & Security

ZMatrix is architected so that the vast majority of data never leaves your device:

• On-Device Storage: Email addresses (in their original form), scan results, breach reports, security score, and search history are all stored locally on your device using iOS-native secure storage mechanisms.
• Network Transmissions: All external API requests are encrypted via TLS 1.3. Only the minimum data required (hash prefixes for breach checks, IP address for intelligence lookups) is transmitted.
• No Server-Side Storage: Halonex does not operate backend servers that store your personal data. We have no user database, no account system, and no cloud storage of your information.
• iCloud & Backups: Data stored by ZMatrix on your device may be included in your iCloud or iTunes backups, subject to your device's backup settings and Apple's encryption policies.

7. Your Rights & Controls

You have full control over all data within ZMatrix. The following actions are available to you at any time:

Because ZMatrix does not maintain any server-side user data, deleting the App constitutes a complete and irreversible erasure of all information associated with your use of the service.

Under applicable data protection regulations including the GDPR and the CCPA, you have the right to access, correct, delete, and port your personal data. Given our architecture, these rights are inherently satisfied — you hold all data locally and can delete it at will.

8. Children's Privacy

ZMatrix Network Intelligence is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. Since ZMatrix does not collect personal data, create user accounts, or require registration, there is no mechanism through which a child's data would be stored or processed.

If you believe a child has provided personal information through the App, please contact us and we will take immediate steps to investigate and address the concern.

9. Device Permissions

ZMatrix requests only the permissions strictly necessary for its core functionality:

• Local Network Access: Required for the Network Scanner feature to discover devices on your Wi-Fi network. This permission is requested by iOS when you first use the scanner and can be revoked at any time in Settings.
• Internet Access: Required to perform breach lookups against external APIs and to retrieve IP intelligence data from public registries.

ZMatrix does not request access to your camera, microphone, contacts, photos, location, Bluetooth, health data, or any other sensitive device capabilities.

10. Data Retention

All data generated by ZMatrix is stored locally on your device for as long as you choose to retain it. You may clear scan history and remove monitored emails at any time from within the App.

Upon uninstallation of ZMatrix, all locally stored data is permanently deleted in accordance with standard iOS data management behavior. Because we operate no backend infrastructure that stores user data, there is no residual data on our end to retain or delete.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App's functionality, legal requirements, or our operational practices. When we make material changes, we will:

• Update the "Effective Date" and "Last Updated" dates at the top of this document.
• Provide notice through the App or the App Store update notes, where appropriate.
• Archive previous versions of this policy for your reference.

Your continued use of ZMatrix after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or ZMatrix's data practices, please contact us:

• Developer: Halonex
• Email: [email protected]

We are committed to resolving any privacy-related inquiries promptly and transparently.