Privacy Policy
Last Updated: December 12, 2025
Privacy Summary: ThreatMatrix is designed with privacy in mind. We collect minimal, non-identifying telemetry data to improve the app experience. We do not collect, store, or transmit any personal information, user content, or identifying data.
1. Introduction
This Privacy Policy describes how ThreatMatrix ("we," "our," or "us") handles information when you use our mobile application (the "App"). ThreatMatrix is a native iOS application for browsing and referencing the MITRE ATT&CK cybersecurity framework, with macOS support coming soon.
2. Information We Do NOT Collect
We want to be clear about what we do not collect:
- Personal Information: We do not collect names, email addresses, phone numbers, or any other personally identifiable information
- User Content: We do not access, collect, or store your bookmarks, notes, search queries, or any content you create within the app
- Device Identifiers: We do not collect device IDs, advertising identifiers, or any unique device information
- Location Data: We do not access or collect any location information
- Contacts or Photos: We do not access your contacts, photos, or any other personal data on your device
- Biometric Data: We do not collect fingerprints, Face ID data, or any biometric information
3. Information We May Collect
We may collect limited, non-identifying telemetry data to improve the app experience:
3.1 Anonymous Usage Analytics
- App launch and session duration (anonymized)
- Feature usage statistics (which sections of the app are used most)
- Performance metrics (app crashes, loading times)
- General device information (iOS version, device model - but not device identifiers)
3.2 Technical Information
- App version and build information
- Operating system version
- General device capabilities (screen size category, available memory)
- Network connectivity type (WiFi vs cellular - but not network details)
Important: All telemetry data is collected anonymously and cannot be linked back to you or your device. We use Apple's built-in privacy-preserving analytics frameworks that automatically anonymize data before transmission.
4. How We Use Information
The limited anonymous data we collect is used solely to:
- Improve app performance and stability
- Understand which features are most valuable to users
- Identify and fix bugs or crashes
- Optimize the user experience
- Plan future app improvements
5. Data Storage and Security
- Local Storage: Your bookmarks, preferences, and app data are stored locally on your device using Apple's secure frameworks
- iCloud Sync: If you enable iCloud sync, your bookmarks and preferences are synced through Apple's iCloud service using end-to-end encryption
- No External Servers: We do not operate servers that store your personal data
- Apple's Infrastructure: Any anonymous telemetry is processed through Apple's privacy-preserving analytics infrastructure
6. Third-Party Services
ThreatMatrix may use the following Apple-provided services:
- Apple Analytics: For anonymous usage statistics (you can opt out in iOS Settings)
- iCloud: For syncing your bookmarks across devices (optional, requires your explicit consent)
- App Store: For app updates and distribution
We do not integrate any third-party analytics, advertising, or tracking services.
7. Your Privacy Controls
- Analytics Opt-Out: You can disable analytics sharing in iOS Settings > Privacy & Security > Analytics & Improvements
- iCloud Sync: You can enable or disable iCloud sync for ThreatMatrix in the app settings
- Data Deletion: You can delete all app data by deleting the app from your device
8. Children's Privacy
ThreatMatrix does not knowingly collect any information from children under 13 years of age. The app is designed for cybersecurity professionals, students, and researchers.
9. International Users
ThreatMatrix is available worldwide. Any anonymous telemetry data is processed in accordance with Apple's global privacy standards and applicable privacy laws including GDPR, CCPA, and other regional privacy regulations.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes through the App Store update notes or within the app. Your continued use of the app after any changes constitutes acceptance of the updated Privacy Policy.
11. MITRE ATT&CK Framework Data
ThreatMatrix displays information from the MITRE ATT&CK framework, which is publicly available cybersecurity knowledge. This data is:
- Downloaded from MITRE's public repositories
- Stored locally on your device for offline access
- Not modified or transmitted by us
- Subject to MITRE's terms of use
12. Contact Information
ThreatMatrix Privacy Policy
Effective Date: December 12, 2025
ThreatMatrix Official Website