Edmilia App Privacy Policy

1. Who is responsible

The Edmilia Android app ("Edmilia", "the app") is published by Loopmerce LLC, Wyoming, United States ("we"). Contact: hello@edmilia.com.

This policy covers the app. The edmilia.com website and the free Edmilia web tools have their own privacy notices.

2. Information you enter, stored only on your phone

• Student profile: name, nationality, country of residence, education history and grades, language certificates, admission tests (test, date, score), study preferences and destination.
• Planning records: saved universities and programmes, eligibility results and history, document-checklist progress, applications and the updates you record, offer conditions, visa-preparation records and appointments you booked, arrival and enrolment records, reviews you write, guide bookmarks, reminder settings, your main programme and the scholarships or fee reductions you mark as planned.
• Financial screening: the amounts and funding sources you choose to enter for the proof-of-funds check.
• Documents: files you add (for example passport scans, certificates, bank or blocked-account confirmations) and the text read from them on your phone.

We cannot see, access or recover any of this information. It is never sent to us.

3. How it is protected on your phone

• Documents are encrypted with AES-256-GCM. The key is protected by the Android Keystore and never leaves the phone.
• Document screens are protected from screenshots and from the recent-apps preview.
• Text recognition (OCR) runs on the phone, with Google ML Kit's on-device model. Your documents and the recognised text are not sent to Google.
• The optional backup file is encrypted with a password you choose (PBKDF2-SHA-256 with 210,000 iterations, AES-256-GCM). It contains your records and your documents, never a key. It is saved only where you choose and restored only when you choose, after a preview. We cannot recover a forgotten password.
• An unencrypted copy of a document is shared or saved only when you choose it, after a warning.

4. When information leaves your phone

1. Edmilia account (optional): if you choose Settings → Edmilia account → Sign in with Google, Google shows its account picker and gives the app a sign-in token. The app sends that token, your 18+ confirmation and, if you link a website registration, that registration's email address and the code we email to it, to edmilia.com. Our server keeps an account ID, your Google account ID and email, the time and terms version of your 18+ confirmation, which registration is linked, and your founding pass or waitlist place. Sessions are random tokens that the server stores only in scrambled (hashed) form; they end after 30 days without use. On your phone, the session and a signed copy of your pass are kept in Android secure storage, which is not included in backups. Your profile, documents and application records are never sent. Google handles the sign-in under Google's privacy policy.
2. Study guides: the app downloads public articles and images from euinfohub.com. These requests contain no profile or document data. Like any website, the server receives your IP address and basic device information. The hosting provider keeps such server logs only for a limited time, for security and operation.
3. Google ML Kit (text recognition): Google's ML Kit software may send Google limited technical data to operate and improve it: device model, Android version, app name and version, a per-installation identifier, and performance and error metrics. It does not receive your documents or the recognised text. See Google's ML Kit data disclosure and Google's privacy policy.
4. Android backup (Google): if Android backup is on for your phone, Android may include the app's records in your Google backup, which Google encrypts. Your document vault and its key are never included. You control this in your phone's settings.
5. Things you choose to do: opening an official website in your browser, sharing a guide or a review through Android's share sheet, or saving a backup file where you choose. If the app shows a link to a free Edmilia web tool, it opens in your browser, nothing from the app is sent to it, and that website's privacy notice applies.
6. Reminders are notifications created on your phone. No server is involved.

The app has no advertising, no analytics service and no crash-reporting service. It does not use your location, contacts, camera or microphone.

5. Purposes and legal bases (GDPR)

• Providing the app's features on your phone, including the study guides: the service you ask for (Art. 6(1)(b)).
• Google ML Kit's technical data: our legitimate interest in a working, secure text-recognition feature (Art. 6(1)(f)).
• The optional Edmilia account and your founding pass: the service you ask for (Art. 6(1)(b)). Checking that users are 18 or older, and keeping a record of how the 200 places were given without names or email addresses: our legitimate interest in a fair, lawful offer (Art. 6(1)(f)).

6. Keeping and deleting your information

• Edmilia account: delete it in Settings → Edmilia account → Delete my Edmilia account, or at edmilia.com/account-delete.php. We remove the Google account link, your email, your 18+ record and your sessions straight away. You choose whether your founding pass is kept with your website registration email or passed to the next student. A record of changes to places, without your name or email, is kept for as long as the Founding 200 offer runs. Signing out only ends the session on that phone.
• Everything stays on your phone until you delete it.
• In the app you can delete single records and documents, or use Settings → Delete all data on this phone. That removes your profile and records and cancels reminders. Documents in the encrypted vault are deleted in My documents; the confirmation screen lists what is deleted and what is kept.
• Uninstalling the app removes all its data from the phone. Backup files you saved elsewhere are yours to delete.
• If Android backup is on, Google may keep an earlier copy of your records until your phone next backs up.

7. Adults only (18+)

Edmilia is for adults aged 18 and over. Please do not use the app if you are under 18. The app does not ask for your date of birth, and Google Play limits installs by accounts it identifies as belonging to under-18s; neither is a full check of age. If we learn that someone under 18 has an Edmilia account, we will close the account; a founding place is held as described in the Early Access Terms.

8. Your rights

The information is on your phone, so you can access, correct, export (backup file) and delete it yourself in the app. We hold no copy of it. Your optional Edmilia account is shown in the app, where you can also delete it (section 6). For questions or GDPR requests, contact hello@edmilia.com. You can also complain to your data-protection authority (in Italy: the Garante per la protezione dei dati personali).

9. Changes and contact

If the app's handling of information changes, for example if we open purchases or add a help-request service, we will update this policy before that change reaches your phone, and change the date above. Questions: hello@edmilia.com. See also the Edmilia app support page.