Privacy policy
BadgeBinder stores your work locally. This policy describes the content-neutral offline Android edition, not a separate private-family pilot service.
Operator and contact
CPW Studio Co. operates BadgeBinder. Contact support@badgebinder.com. The app has no account system, server connection, advertising, behavioral analytics, crash-reporting SDK, or Internet permission.
On-device records
Binder titles, optional learner nicknames, questions, answers and preparation-progress values are encrypted with AES-GCM using Android Keystore. SQLite identifiers, relationships, resume IDs and timestamps are metadata and are not fully encrypted. App settings and the last successful backup date are stored locally. No records are automatically sent to CPW.
Speech input
Microphone access occurs only after you start dictation and permit it. BadgeBinder does not retain audio. Android's selected speech-recognition provider may process audio online under its own terms. The app requests an offline preference, not a guarantee. Only the transcript is placed in your local answer. You may edit it and always type instead.
Imports, PDFs and printing
You select a text file to import, a PDF or backup destination, and a printer using Android interfaces. Imported questions stay in the local library. Generated PDFs and print previews are readable, unencrypted files. Selected file providers and printers may retain copies under their own terms. App-private PDF previews older than one day are cleaned on launch and can be cleared in the support guide; inactive app caches may remain until that cleanup, storage clearing or uninstall.
Backups and retention
Automatic Android app backup is disabled. You can export an AES-GCM whole-library backup protected by a 12-character-or-longer passphrase using PBKDF2-HMAC-SHA256. It includes binders, nicknames, prompts, answers, preparation statuses and resume positions; it excludes device settings and external files. PDFs can be regenerated. CPW does not receive or recover the passphrase. Copy backups off the phone and verify restoration before replacing it.
Local data remains until you remove a binder, clear app storage or uninstall. Externally exported files must be removed separately. No BadgeBinder cloud retention applies to this edition.
Families and support
An authorized adult should supervise use, imports, backups and exports for a minor. Avoid unnecessary personal details and never put account passwords or highly sensitive information into answers. Support correspondence is optional: provide your version and a description, not children's records, tokens or passphrases. Mail providers process correspondence under their terms; support messages are retained only for handling the request and legitimate security/legal needs. We do not sell personal information.
Website and changes
Visiting this website uses your browser and hosting-provider access/security logs, separately from the offline app. Material changes will be dated here and described before introducing new app collection. No absolute-security promise is made. Deletion instructions.