Privacy Policy

The short version

Aranmi is a security tool. Your scan data never leaves your machine. We collect the minimum needed to run the product and nothing more.

What we collect

Free scanner (no account required)

• Nothing. Scan results are stored locally on your PC. No telemetry, no analytics from the app itself.

Early access signup

• Email address and signup date, stored to notify you when Aranmi launches.

Account (paid plans)

• Email and password (password is hashed, never stored in plaintext)
• Device name, OS version, and a hardware-derived machine ID (SHA-256 hash)
• Scan score summaries (numeric score and category breakdown, not raw findings)
• Raw scan findings are encrypted client-side before upload. We cannot read them.

Monitoring subscription

• Browsing history (Chrome and Edge), DNS queries, screen time, and app installs from monitored devices
• Sensitive monitoring data is encrypted end-to-end. Only the family account holder can decrypt it.

What we do not collect

• Keystroke data, screenshots, or camera/microphone input
• File contents or documents
• Credentials, passwords, or authentication tokens from other applications
• Data from applications other than Chrome and Edge (monitoring tier only)

How we store data

• Backend hosted on Hetzner Cloud (Ashburn, VA) under German data protection law (BDSG/GDPR)
• Database encrypted at rest with a server-side encryption key
• Backups encrypted and stored in Backblaze B2, retained for 7 days
• Device credentials stored locally using Windows DPAPI (hardware-bound encryption)
• All connections use TLS 1.3

Data retention

• Scan summaries, alerts, metrics, and commands older than 90 days are automatically deleted
• Early access emails are deleted after launch notification is sent
• Account deletion removes all associated data (families, devices, scans, subscriptions)

Third parties

• We do not sell, share, or provide your data to third parties
• Cloudflare provides DNS and bot protection for our website (Turnstile, not reCAPTCHA)
• Payment processing via Stripe (we never see or store your card number)

Children's privacy

The free scanner does not collect any data and has no age restrictions. The monitoring subscription is designed for parents to monitor their children's devices. Monitoring data is controlled by the parent account holder, not by Aranmi. We are committed to COPPA compliance and will update this section with specific provisions before the monitoring feature launches.

Your rights

• Access: view all data associated with your account via the app
• Deletion: delete your account and all associated data from Settings
• Portability: export your scan history from the app
• Questions: privacy@aranmi.com

Changes

We will update this policy as the product evolves. Significant changes will be communicated via email to registered users.