Technical Deep Dive: How We Enforce Privacy

Feb 10, 2026 | Documentation | Privacy, Data, FAQ

For the users who check the traffic logs and inspect the manifest, here is exactly how Mako List operates under the hood.

1. Data Persistence & Encryption

  • The Database: We utilize Room Persistence, providing an abstraction layer over a local SQLite database.
  • Zero Remote Sync: There is no Firebase, no AWS, and no proprietary backend. Your data is never serialized for transport to a remote server because there is no destination for it to go.
  • Device-Level Security: By keeping data local, Mako List leverages the hardware-backed encryption provided by the Android Keystore System and File-Based Encryption (FBE).

2. Zero External SDKs (The "Clean Binary" Promise)

  • No Analytics: We do not use Google Analytics, Mixpanel, or any "behavioral" tracking. We have zero visibility into how many lists you make or what is on them.
  • No Crash Reporting: We have omitted third-party crash reporters (like Crashlytics) to ensure no device logs or PII (Personally Identifiable Information) are transmitted during an error.
  • Minimal Permissions:Mako List requests the absolute bare minimum permissions required for local operation. We don’t ask for your contacts, your microphone, or your location.

3. Network Independence

  • Offline-First: The app’s logic is entirely self-contained within the APK.
  • Traffic Logs: We encourage security researchers to proxy the app’s traffic. You will find that Mako List does not "phone home." The only network calls made are those handled by the Google Play Store for version updates.

4. Data Portability

Sovereignty means the right to leave. We provide simple JSON/CSV export functionality. You own your data in a human-readable format, ensuring you are never "vendor-locked" into our ecosystem.

The "Mako" Security FAQ

Q: If I lose my phone, can you recover my lists? 
A: No. And that’s a feature. We do not have a "backdoor" to your data because we don’t have a front door. We recommend using your OS-level device backups (like Google encrypted backups) if you need redundancy. When you first start up the app, you're given the choice to keep your data strictly local, or whether you want to enable Google Encrypted Backups. 

Q: How do you make money if you don't sell data? 
A: Through simple, honest utility. We believe users will pay for tools that respect them. No hidden agendas, no "data-washing," and no ads. At launch, Mako List  v1 is free to beta testers and early adopters.  With v2, we will restrict the Smart Paste function and add other features in to a reasonably priced one-time fee (no subscription). Beta testers and early adopters will be grandfathered in and will get continue to get all of the Pro features. That's why you should download it today!