flashSEC Privacy Policy

Effective October 7, 2026. Publisher: ICITIFY TECH. This policy covers the flashSEC Windows desktop app and its pages on app.icitifytech.com. For PaprFlo and BiteVirus, use the separate product policy pages linked in the app collection.

Data on your computer

flashSEC processes files, removable-drive details, image metadata (which can include GPS coordinates), and recordings selected or started by you. Settings, app-lock selections, vault records, quarantine files, incident packages, and activity logs are stored on your computer, generally under your Windows local application data folder or a location you select. Activity records may include filenames, paths, times, and actions.

Passwords and recovery keys saved by the current release are protected for the current Windows user with Windows Data Protection API. Audio recording and screenshot capture start only from visible controls. Incident Workspace includes only material you explicitly add and does not send a package automatically. Keep recordings and exports secure; anyone with access to your Windows account or exported files may be able to read unencrypted data.

Optional local counters

Private feature counters are off by default. If you enable them in Trust Centre, they stay on your computer and store only feature identifiers and counts. They do not contain commands, output, paths, filenames, assessment evidence, vault contents, quarantine contents, or recordings.

Image location

The Image Location Lab reads location only when GPS metadata is already embedded in the image, or writes coordinates that you explicitly enter to a new copy. The original image is not changed. flashSEC does not infer an exact real-world location from image pixels. Opening a map sends the selected coordinates and normal request information to OpenStreetMap.

Network connections

Direct-download installations check our HTTPS release endpoint at startup and when you open Update Center. This sends normal request information, including your public IP address, to our host. Downloads start only when you choose to update. Microsoft Store installations use Microsoft Store for updates.

If you use public IP or domain lookup, the app sends the lookup target to HTTPS providers including ipify, ipwho.is, or ipapi.co. Domain lookups may also use your configured DNS service. Map previews request tiles from OpenStreetMap. Those providers receive your IP address and request information. Avoid entering confidential targets.

Public IP locations are approximate and do not identify a person's exact position or home. The tool requires you to confirm ownership or authorization before a lookup. These external services apply their own privacy policies.

Terminal and external tools

Terminal commands run locally under your signed-in Windows account. Live Terminal does not create an automatic transcript. flashSEC does not upload command output or silently elevate commands. Commands you type can access files, devices, and networks according to your account permissions and the behavior of the selected shell or external tool. WSL and Kali WSL profiles use your locally installed WSL distributions.

Diagnostics and deletion

Trust Centre can export a diagnostic report designed to exclude secrets, terminal commands and results, selected paths, vault contents, quarantine contents, and recordings. Its clear and delete actions require confirmation. Export important information first because deletion cannot be undone.

This website and support

This app hub does not include advertising, analytics scripts, contact forms, or tracking cookies. It requests release information from our own host. Our hosting provider may keep ordinary access and security logs, including IP addresses, request times, and requested URLs. Retention of hosting logs depends on the host configuration.

If you email support, we receive your email address and the information you send. We use it to respond and troubleshoot. Do not send passwords, encryption keys, private recordings, or sensitive files. Support correspondence remains in our support mailbox until deleted; contact us to request deletion.

Sharing and control

The desktop features do not upload your vault files, recordings, image files, terminal sessions, incident packages, or quarantine contents to an ICITIFY TECH cloud vault. You control exports, external lookups, map opening, tool installation, and files you share. Professional tool installation opens an explicit interactive package-manager flow; it is never silent.

You can remove local records through Trust Centre and remove the app through Windows Settings. Uninstalling may leave user data and files you created. Back up important files before deleting anything. We cannot restore a lost encryption password or delete copies already sent to someone else.

Requests and contact

For questions or requests to access, correct, or delete information held in support correspondence, email [email protected]. Rights available under applicable privacy law are not limited by this policy.

Policy changes

Updates to this policy will appear on this page with a revised effective date. Review it when installing a new version or using a new feature.