MilAccess Privacy Policy

MilAccess is an Android app by Rodmonster LLC that lets you sign in to CAC-protected websites on your phone with your Common Access Card and a USB smart card reader. This page explains exactly what leaves your device and why. In short: your PIN and your card's private keys never leave your phone or your card, and your browsing, certificates and DoD ID stay on your device.

Your CAC and PIN

Your PIN is used only to unlock your card. It is kept in memory only while the card is connected, and is never written to storage, logged or sent anywhere. It is wiped, and the card is locked again, when you remove the card or the reader, when the screen turns off, after 15 minutes without use, or when you tap Lock CAC. A PIN you enter for your Digital Signature certificate is used for one signature only and then wiped.

Your private keys never leave the card. When a website asks you to sign in, the card itself signs the request; MilAccess only passes the request to the card and the signature back.

To show you the CAC Inspector and pick the right certificate, MilAccess reads your card's certificates and identifiers (such as your name and DoD ID number as they appear in those certificates) into memory. They are not stored or sent anywhere by MilAccess.

Signing in to websites

When you sign in to a site, MilAccess sends that site your card's public certificate and the card's signature, the same as any CAC-enabled browser does. What that site does with it is covered by the site's own privacy policy.

Like any browser, MilAccess keeps the cookies and cached pages that websites set, on your device only. "Reset TLS session" in the menu clears them.

If you type something into the address bar that isn't a web address, it is sent to DuckDuckGo (duckduckgo.com) as a search.

To show which sites are up, the home dashboard briefly contacts each site on it, including sites you added yourself, without signing in or sending anything about you. Those sites see an ordinary connection from your device. You can turn this off in Settings (Check .mil site status).

Purchases

MilAccess Pro subscriptions are handled entirely by Google Play. The app asks Google Play on your device whether you're subscribed, and remembers on your device when Google Play last said yes, so that a short Google Play outage doesn't lock you out of sign-in. Rodmonster LLC has no server and never receives your payment details, name, email address or purchase records from the app. Google's privacy policy covers what Google Play collects. You can cancel any time in Google Play.

Crash reports

Crash reporting is on when you install MilAccess. When the app crashes or hits an error, it sends a report to a crash reporting server operated by Rodmonster LLC. A report holds the error, the app's own recent log lines, how the app last closed, the app version and the device model. To help fix reader problems it also holds the smart card reader's model and USB ID, which protocol the card uses, which certificates the card holds (by slot, such as "PIV Authentication"), whether the card is inserted, and whether the PIN is verified, still needed or locked. It never holds the PIN itself. Reports carry no account, install or device identifier. Web addresses, email addresses, certificate names, DoD ID numbers and keys are removed from the log lines before they're sent, and reports never contain your PIN, certificates, cookies or browsing history. To catch certificate problems early, a report can name the public DoD certificate authority behind a site's certificate (for example "DOD SW CA-82"), and whether your CAC's certificate has expired or expires within 30 days, but never its date or contents. You can turn crash reporting off in Settings. If you use Report a problem in Settings, your note is sent the same way, even with crash reporting off.

No ads, no tracking

MilAccess shows no ads and contains no advertising or analytics SDKs. We don't sell or share data. Android backup and device-to-device transfer are turned off for the app, so nothing is copied to your Google account or to a new phone.

Not affiliated with DoD

MilAccess is an independent app. It is not affiliated with, endorsed by or sponsored by the U.S. Department of Defense or any government agency.

Deleting your data

Uninstalling MilAccess removes everything it stored on your device, including website cookies. To stop paying, cancel MilAccess Pro in Google Play.

Children

MilAccess is meant for adults who hold a CAC and is not directed to children.

Google Play Data safety summary

• Data collected: crash logs and diagnostics, including the reader model and card status described above (on by default; can be turned off in Settings).
• Data shared with third parties: none.
• Encrypted in transit: yes. The app allows HTTPS connections only.
• Data deletion: uninstalling removes everything on the device; you can turn crash reporting off at any time in Settings.

Changes

If this policy changes, we'll update this page and the date at the top.

Using MilAccess is also covered by the MilAccess Terms of Use.

Questions? Email [email protected].