Privacy Policy

Our Commitment: Zero Data Collection

Citadel AI is designed to collect zero personal data. We do not build profiles on you, we do not sell your information, and we do not run third-party advertising or tracking SDKs inside the app.

WiFi & Network Scanning

The network scanner performs passive analysis using standard iOS and Android networking APIs. It identifies devices, open ports, and potential threats on the network you are connected to.

All scan results stay on your device. The app does not intercept, read, store, or transmit the contents of your network traffic, and scan data is never uploaded to our servers.

VPN & No-Logs Policy

The VPN uses the WireGuard protocol secured with ChaCha20-Poly1305 — the same cipher used by Signal. We operate a strict no-logs policy.

We do not log your browsing history, the websites you visit, your DNS queries, your real IP address, or the timestamps and duration of your sessions. Because we do not keep these records, we have nothing to hand over and nothing to sell.

Subscriptions & Payments

Citadel AI Pro subscriptions (Monthly, Yearly, and Lifetime) are purchased and billed through the Apple App Store and Google Play. We never see or store your payment card details — those are handled entirely by Apple and Google under their own privacy policies.

Diagnostics & Crash Data

If you opt in through your device settings, Apple or Google may share anonymous, aggregated crash and performance diagnostics with us to help fix bugs. This data is not tied to your identity and you can disable it at any time in your device settings.

This Website: Analytics & Advertising Technologies

The commitments above describe the Citadel AI app. Our website, citadelcyber.ai, is separate. Like most websites, it uses cookies, pixels, and similar technologies to measure traffic and the performance of our advertising. None of these technologies run inside the app, and they never have access to your scan results or VPN activity.

When you visit the website, these technologies may collect your IP address, device and browser details, the pages you view, the links and buttons you click, the page that referred you, and identifiers stored in cookies. We use the following providers:

• ▹Google Analytics and Google Ads, loaded through Google Tag Manager (Google LLC): measure how visitors find and use the website and the results of our ads on Google.
• ▹Meta Pixel (Meta Platforms, Inc.): measures the results of our ads on Facebook and Instagram and may be used to show our ads to people who have visited the website.
• ▹TikTok Pixel (TikTok Inc.): measures the results of our ads on TikTok and may be used to show our ads to people who have visited the website.
• ▹Microsoft Clarity (Microsoft Corporation): shows us how visitors move through and interact with pages, including recordings of visits and heatmaps.
• ▹PostHog: product analytics that shows us which pages and download buttons are used. PostHog may record how a visit unfolds on the page (session replay), with text typed into form fields masked.

How Advertising Partners Use This Information

Google, Meta, TikTok, and Microsoft receive this information directly from your browser and may combine it with other information they hold about you, under their own privacy policies. We do not sell your personal information for money. Some US state privacy laws, including California law, treat sharing identifiers with advertising partners for targeted advertising as a "sale" or "sharing" of personal information.

When you first visit, a cookie banner lets you accept or decline these technologies, and you can change your choice at any time with the "Cookie preferences" link at the bottom of any page. If your device is set to a European timezone, they stay off unless you accept. If you decline, Google Tag Manager, the Meta and TikTok pixels, Microsoft Clarity, and PostHog do not run.

You can also limit these technologies by blocking or deleting cookies in your browser, by using the Google Analytics opt-out browser add-on, and by adjusting your ad preferences in your Google, Meta, and TikTok account settings. The website works normally with them blocked.

Children's Privacy

Citadel AI is not directed to children under 13, and we do not knowingly collect information from children.

Your Rights

Because the app does not collect personal data, there is no app profile to access, correct, or delete. For information collected through the website technologies described above, or for any other privacy question or request, contact us at privacy@citadelcyber.ai.

Changes to This Policy

We may update this policy as the app and website evolve. Material changes will be reflected by the "Last updated" date above. Continued use of the app after an update constitutes acceptance of the revised policy.

Contact

GRYHAT Cybersecurity LLC — Orange County, California, USA.

Email: privacy@citadelcyber.ai · Phone: (714) 794-2803 · Web: gryhat.com