Privacy

Diwan, Mizan and Athar have no account, no server and no analytics. Seraf Inc. never receives anything from your copy of any of them. This page says what that means precisely, and what does leave the phone.

Last updated 8 September 2026

What we collect

Nothing. There is no sign-up, no identifier, no crash reporting and no telemetry. Each app is bought once on Google Play and then belongs to the phone it is installed on. We have no way to tell whether you have opened it.

Your model key

You supply an API key for a model provider. It is stored in the Android keystore — not in app preferences — and Android backup is switched off for these apps, so the key is never copied into a cloud backup.

It is sent to one host: your model provider's API endpoint (api.anthropic.com). It is not sent anywhere else, because there is no server of ours in the path. You are billed by your provider, directly, and we never see your usage or your bill.

What is sent to the model

To do the work you asked for, a run sends the provider: the playbook's instructions, the task you typed, the hosts you put in scope, and the results of the tools it ran. For Mizan that includes the parts of the document the model asked to read. Do not paste something into an app that you are not willing to send to your model provider. Their retention and training policy governs it from that point, not ours.

What the apps touch on the network

• Your model provider, for every step of a run.
• Hosts you listed in scope, read-only: an HTTPS GET, a TLS handshake to read a certificate. No credentials are sent and no form is submitted.
• Cloudflare DNS-over-HTTPS (cloudflare-dns.com) for DNS lookups, which sees the name being looked up.
• RDAP (rdap.org) for registry records, which sees the domain being looked up.

Mizan touches none of these except the model provider: it has no network scope at all.

What stays on your phone

Your host list, your settings, and the last 50 runs — each with its report and the full record of the tool calls that produced it. All of it is in the app's private storage and none of it is uploaded. Uninstalling deletes it, and Settings has a button that clears the run history without uninstalling.

Those runs are notes about your own infrastructure. Clear them before the phone leaves your hands.

Permissions

One: internet access. No location, no Bluetooth, no storage, no contacts, no camera.

Children

These are tools for people who administer systems. They are not directed at children and collect nothing from anyone.

Payment

The purchase is handled entirely by Google Play. Seraf Inc. never sees your card, your address or your name — only anonymous sales totals in the Play Console.

Changes and contact

If this policy ever changes, the date above changes with it. Questions: hello@seraf.dev, Seraf Inc., Canada.