Privacy Policy – Dropify

1 Interpretation & Definitions

"App" refers to Dropify (application ID: com.HaldarAi.Dropify), an Android application designed for high-speed, local peer-to-peer file sharing between nearby physical devices.

"We / Us / Our / Developer" refers to Subhojit Haldar, independent software engineer and publisher of Dropify, residing in West Bengal, India.

"You / User" refers to any individual who downloads, installs, or interacts with the Dropify application.

"Peer-to-Peer (P2P)" means direct wireless communication between two nearby Android devices without passing through external intermediate servers, clouds, or web gateways.

"Payload" refers to the local files (photos, videos, music, documents, archives, or applications) selected by the user to be sent directly to another paired nearby device.

2 Zero-Cloud P2P Transfer Architecture

The core privacy philosophy of Dropify is simple: your personal files belong exclusively on your hardware. Dropify does not own, operate, or connect to any remote server or cloud database to relay or store your files.

3 Device Permissions & Why We Need Them

To establish peer-to-peer wireless connections and transfer files, Android requires specific system permissions. Dropify requests only permissions that are strictly necessary to perform core sharing operations, in compliance with the Android Least-Privilege model.

• NEARBY_WIFI_DEVICES (Android 13+) Nearby Discovery
  Allows Dropify to discover and connect to nearby Wi-Fi Direct devices without requesting or accessing your device's geographical location (declared with neverForLocation).
• BLUETOOTH_ADVERTISE, CONNECT & SCAN (Android 12+) P2P Handshake
  Enables local device discovery and Bluetooth handshakes to negotiate peer connections. Declared with usesPermissionFlags="neverForLocation" so Dropify never uses Bluetooth to determine geographical coordinates.
• ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION Legacy OS Only
  Required strictly by the Android operating system on Android 11 and older devices to scan for Wi-Fi and Bluetooth signals. Dropify never collects, logs, tracks, or transmits your actual physical coordinates.
• ACCESS_WIFI_STATE & CHANGE_WIFI_STATE Network Link
  Allows the app to check Wi-Fi status and establish local peer-to-peer Wi-Fi Direct connections to achieve gigabit-level file transfer speeds.
• FOREGROUND_SERVICE & FOREGROUND_SERVICE_DATA_SYNC Background Transfer
  Ensures large file transfers continue smoothly even if you minimize the app or lock the screen. A persistent notification shows real-time transfer progress, speed, and status.
• POST_NOTIFICATIONS (Android 13+) User Awareness
  Used to notify you of incoming transfer requests from nearby senders and show completion notices when transfers finish.
• CAMERA QR Code Scanner
  Used exclusively when you tap "Scan QR" to read the receiver's pairing code using Google ML Kit. Camera frames are processed entirely on-device; no photos or video streams are ever stored or uploaded.
• VIBRATE Haptic Feedback
  Provides tactile confirmation when a transfer completes or when an incoming connection request is received.
• Zero Broad Storage Permissions Modern Storage
  Dropify does NOT request unrestricted storage permissions like READ_EXTERNAL_STORAGE on modern Android. Instead, it uses the official zero-permission Android Photo Picker and system document picker so you only share files you explicitly select.

4 Data Collection & Processing

Dropify does not collect, harvest, monetize, or sell personal data. The minimal data processed by the app is limited to:

• Display Name and Avatar: When you first launch Dropify, you choose a friendly nickname and avatar icon. This information is broadcast locally over Bluetooth/Wi-Fi only to nearby peers so they can identify your device on the discovery radar. It is never transmitted outside your local environment.
• Selected File Metadata: Filenames, file sizes, and MIME types of files you select for transfer are shared strictly with the paired receiver so they can view the transfer preview and accept the files.
• Device Visibility Preference: You can toggle your visibility off at any time in Settings. When turned off, nearby devices cannot discover or send files to your phone.

5 Local Storage & Data Retention

All application state is kept locally on your physical device using Android's private internal storage and Room SQLite database:

• Transfer History Log: Records of sent and received sessions (filenames, timestamps, sizes, peer names) are stored in your device's local database.
• One-Tap History Clear: You can clear your transfer history log at any time in Settings > Clear History. Clearing the log does not delete the actual files from your device.
• Received Files Location: Received files are saved in your device's public Downloads/Dropify folder (or your designated folder). You retain full ownership and control over these files and can delete, move, or modify them using any file manager.
• Application Uninstall: If you uninstall Dropify, all internal configuration, database logs, and user preferences are automatically erased from your device by the Android OS.

6 Third-Party Libraries & SDKs

Dropify utilizes a minimal, privacy-centric set of open-source and Google system platform libraries:

• Google Play Services Nearby Connections: The official Google Android API used to establish encrypted peer-to-peer Wi-Fi and Bluetooth communication channels. See Google Privacy Policy.
• Google ML Kit Barcode Scanning / ZXing: Used to render and scan offline QR codes for device pairing. Processing is performed 100% on-device.
• Jetpack Compose & AndroidX: Modern Android UI framework and system lifecycle components developed by Google and the Android Open Source Project (AOSP).
• NO Advertising SDKs: Dropify does not integrate Google AdMob, Unity Ads, AppLovin, Facebook Audience Network, or any other ad networks.
• NO Analytics SDKs: Dropify contains no Firebase Analytics, Google Analytics, Adjust, AppsFlyer, or Flurry tracking code.

7 User Rights & Data Controls

You have complete control over your privacy and interactions in Dropify:

• Permission Revocation: You can grant or revoke any Android permission (Camera, Nearby Devices, Notifications, Location) at any time through Android System Settings > Apps > Dropify > Permissions.
• Discovery Control: You can turn off "Device Visibility" in Settings to prevent nearby senders from discovering your device.
• Consent per Session: When another device attempts to send files, Dropify displays a confirmation dialog with the sender's name and file summary. You have the right to Accept or Decline the transfer.
• History Deletion: You can clear your transfer logs at will without needing developer approval.
• Right to Inquire: Under GDPR, CCPA, and the Indian Digital Personal Data Protection Act, you have the right to inquire about data handling by contacting our Grievance Officer.

8 Data Security & Encryption

We prioritize the security of your direct peer-to-peer transfers:

• End-to-End Handshake Encryption: Google Nearby Connections uses cryptographic key exchange protocols (Diffie-Hellman / AES-256) during the handshake to protect data in transit between the two paired devices.
• Mutual Verification: Senders and receivers verify matching 4-digit pairing authentication codes or QR checksums before transferring sensitive payload bytes.
• Local Sandbox: Application preferences and transfer logs are stored in Android's sandboxed private storage, inaccessible to other unauthorized third-party apps on your phone.

9 Children's Privacy Protection

Dropify is a general-utility productivity tool for local file transfer. We do not knowingly solicit, collect, or store personal information from children under the age of 13 (or 16 in applicable jurisdictions), nor is the app designed to attract children.

Because Dropify operates without account registration and without remote servers, no children's profiles or identities are gathered. Parents or guardians with questions may contact us at business.tizongaming@gmail.com.

10 International Privacy Compliance

Dropify complies with major global data protection frameworks:

• Google Play Developer Policy: Full adherence to Google Play's User Data Policy, Permissions and APIs that Access Sensitive Information policy, and Prominent Disclosure requirements.
• India Digital Personal Data Protection Act (DPDP) & IT Rules: Adheres to data minimization principles and maintains an active Grievance Redressal mechanism.
• GDPR (European Economic Area): Processing is lawful under Article 6 (contractual necessity to perform requested transfers). No international data transfers occur because data remains on the user's hardware.
• California Consumer Privacy Act (CCPA / CPRA): We do not sell or share personal consumer information as defined under California law.

11 Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect modifications in application functionality, Android OS system requirements, or legal standards. When changes occur, we will update the "Effective Date" at the top of this document.

We encourage users to review this page periodically. Continued use of Dropify following the posting of changes constitutes acceptance of the revised terms.

12 Statutory Grievance Officer (India)

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer for Dropify is:

13 Contact Us & Developer Information

If you have any questions, feedback, or requests regarding this Privacy Policy or Dropify's privacy practices, please contact: