Privacy Policy
Hull Cell does not collect, transmit or share any personal or business data. Every tank, part, rack, run, chemical addition, Hull cell panel, job, thickness reading and setting you enter is written to your own device and stays there. There is no account, no sign-in, no cloud sync, no analytics and no advertising.
1. Who publishes this app
Hull Cell is published on Google Play by the organisation named below, which is the data controller for the purposes of this policy — although, as section 2 explains, there is in practice no data for it to control.
- Organisation
- COZYMOST ACCOMMODATIONS LTD
- Registered address
- 2 Frederick Street, London, England, WC1X 0ND, United Kingdom
- Privacy contact
- contact@cozymostaccommodationsltd.store
2. What data we collect
None. Specifically, Hull Cell does not collect:
- Personal identifiers — no name, e-mail address, phone number or account of any kind. The app never asks you to register.
- Device or advertising identifiers. Hull Cell does not read the Android advertising ID, the device ID, the IMEI or the MAC address.
- Location. The app requests no location permission and cannot determine where you are.
- Contacts, photos, camera, microphone, files outside its own folder, or any other permission-gated source. None of these permissions is declared.
- Usage analytics, crash telemetry, heat maps or session recordings. No analytics SDK is present in the build.
Your shop records are yours and never leave the device. Every tank and its chemistry, every part and rack, every run with its amps and minutes, every chemical addition, every Hull cell panel, every customer job and specification, every measured thickness and every preference you set is written to app-private storage on your own phone or tablet.
3. How your data is used
Entirely on the device, and only to give you back what the app is for. Hull Cell reads your own records to work out the answers it exists to provide: the dwell time and rectifier current a rack needs for a target thickness, the plated area of a load including its jig, the cumulative ampere-hours a bath has passed, how much of an addition it is therefore owed, the bright range a Hull cell panel showed, and each bath's real efficiency once you have measured what actually came out.
All of that arithmetic runs locally. Nothing is uploaded to be processed elsewhere, and no part of it is used for advertising, profiling, scoring or training any model.
4. Data sharing
We share nothing, because we receive nothing. There is no server to share from. No data is sold, rented, disclosed to advertisers, brokers, affiliates or any third party.
You can share data deliberately: the Export screen writes JSON backups and CSV run registers, panel logs, addition records and per-job certificates of conformity into the app's own folder, and offers them to Android's share sheet. That is an action you take, to a destination you choose, with content you can inspect first. Any of the tank, rack, run, panel, job or reading records you export are handled from then on by whatever app or service you send them to, under that provider's terms rather than ours.
5. Data security
Your records live in Hull Cell's private storage area, which Android isolates from other applications at the operating-system level.
- The commercially sensitive records are encrypted at rest. The customer jobs, their specifications and the measured thickness readings are stored in database boxes encrypted with AES-256. Your customer list is the part of a shop's book that matters commercially, so it is the part that is encrypted.
- The encryption key never leaves the device. It is
generated on first launch and held in the Android Keystore through
flutter_secure_storage, hardware-backed where the device supports it. - Because nothing is transmitted, there is no transport to intercept and no server-side breach that could expose your records.
No system is perfect, and a device that is unlocked, rooted or physically surrendered is outside any app's control. Keep a screen lock on, and use the export function to keep your own backups.
6. Data retention and deletion
We retain nothing, because we hold nothing. Retention is entirely in your hands:
- Archive individual tanks, parts, racks, runs, panels or jobs in the app; they move to Archived items and can be restored from there.
- Settings → Clear all data removes every record from the device immediately and irreversibly.
- Uninstalling Hull Cell deletes its private storage, and with it every record, as part of the normal Android uninstall.
Export a backup before you do any of these if you might want the records again — there is no copy anywhere else for us to restore from.
7. No user accounts
Hull Cell has no registration, no login, no password and no profile. Every feature is available the moment the app opens. Because there is no account, there is no account to compromise, no credential to leak and no identity to correlate your records with.
8. Children’s privacy
Hull Cell is a work tool for metal-finishing shops and is intended for adults of working age. It is not directed at children, it is not attractive to children, and it collects no data from anyone regardless of age — so there is nothing to delete under COPPA, the GDPR’s provisions on children, or any comparable rule.
9. Your rights
Data-protection law gives you rights of access, rectification, erasure, restriction, portability and objection. Because your records never leave your device, you exercise all of them directly and immediately, without asking us and without waiting:
- Access and portability — Settings → Export writes your complete data as JSON, or as CSV for a spreadsheet.
- Rectification — edit any record in the app.
- Erasure — archive a record, clear all data, or uninstall.
- Restriction and objection — there is no processing beyond the device to restrict or object to.
We cannot action a data-subject request on your behalf for the simple reason that we have never had a copy of your data.
10. Third-party services
Hull Cell integrates no third-party analytics, advertising, attribution, crash-reporting or social SDK. The open-source libraries it is built from — the Flutter framework, its local database and secure-storage packages, its charting package and the system WebView — run entirely on the device and make no network calls of their own.
Google Play itself handles the download, update and (if you use it) the Play Store’s own crash reporting, under Google’s privacy policy. That relationship is between you and Google; we receive nothing from it beyond aggregate, anonymous install counts in Play Console.
11. Permissions
Hull Cell declares exactly one Android permission:
- android.permission.INTERNET
- Used for one screen only: Settings → Privacy policy, which opens this document in a WebView so you always read the current version. No other part of the app makes a network request, and the app is fully functional with the network switched off.
It follows that Hull Cell cannot access your location, camera, microphone, contacts, calendar, call log, SMS, photos, or files belonging to other apps — the permissions that would allow any of that are not declared, so Android would refuse the attempt.
12. Google Play Data safety declaration
The Data safety section of the Play listing states, consistently with this policy:
- No data collected.
- No data shared with third parties.
- Data is not transferred off the device, so questions about encryption in transit and deletion requests do not arise.
- Records are encrypted at rest where they are commercially sensitive.
13. Changes to this policy
If this policy changes we will update this page and move the “Last updated” date at the top. Because the app loads this page live rather than shipping a bundled copy, you always see the current text. A change that materially affected how data is handled would also be described in the release notes of the version that introduced it.
14. Contact us
Questions about this policy, or about how Hull Cell handles data: contact@cozymostaccommodationsltd.store, or write to COZYMOST ACCOMMODATIONS LTD at 2 Frederick Street, London, England, WC1X 0ND, United Kingdom.
15. Legal basis and jurisdiction
GDPR (EU/EEA and UK). No personal data is collected, so no lawful basis for processing is engaged. There is no international transfer, no profiling and no automated decision-making.
CCPA/CPRA (California). No personal information is collected, sold or shared, so there is nothing to opt out of and no “Do Not Sell or Share” request to make.
Other jurisdictions. The same facts apply wherever you are: an app that transmits nothing cannot process, disclose or transfer your data.