Privacy Policy — Smart Converter

Package: com.technologia.smartconverter
Developer: Technologia
Contact: support@technologia.com
Effective Date: August 28, 2026 | Last Updated: August 28, 2026

Summary: Smart Converter is an offline-first utility app. Most conversions and calculations are performed locally on your device. We do not create accounts, do not sell your personal data, and do not store your conversion inputs on our servers. Some features require device permissions and use Google services (e.g., Ads, ML Kit) that may process data on-device or as described in their own policies.

1. Overview & Scope

This policy covers the Android application Smart Converter distributed via Google Play. It explains what information the app accesses, how it is used, and your choices. It applies to all features including: Unit Converters, Currency Converter (Live & Offline), Date & Time tools (AD↔BS, calendars, age, world clock), Financial calculators, Digital tools (QR/Barcode, Hash, Base64, etc.), Smart Tools (Compass, Level, Ruler, Stopwatch, etc.), Utilities, Favorites, Recent History, and Search.

2. Data We Do NOT Collect (Directly)

No account registration or login is required.
We do not operate our own servers to collect your conversion inputs (e.g., length, temperature, currency amounts, dates).
We do not collect your name, email, phone, or precise contact details unless you voluntarily provide them in a feedback email.
We do not upload your scanned QR/barcode content, Wi-Fi credentials, or payment QR data to our servers. Scanning and classification are performed on-device.

3. Information Processed On-Device

Many features work fully offline:

Conversions & Calculations: Inputs (numbers, units, dates, amounts) are processed in RAM to produce results and are not transmitted to our servers.
Favorites & Recent History: Tool route, name and last-used timestamp are stored locally in an on-device Room database (smartconverter.db). You can clear them in Settings → History.
Saved Passwords: If you use the password generator, generated passwords can be optionally saved locally in encrypted DataStore (saved_passwords). They never leave the device via our code.
App Preferences: Theme (System/Light/Dark), language, haptics, voice input/output, and app-lock PIN (stored as SHA-256 hash, not plaintext) are kept in local DataStore.
Currency Rates Cache: Last successful exchange rates are cached locally (currency_rate_cache) to enable offline conversion. No account is linked.
Scan History (Universal Scanner): Scan type, format and a truncated, sanitized preview (max 4000 chars, control characters stripped, Wi-Fi passwords masked as ****) are stored locally. You can delete single items or clear all in Scanner History.

4. Permissions — Why We Request Them

Permission	When Requested	Purpose	Required?
CAMERA	Only when you tap a camera-based feature (QR/Barcode scanner, Universal Scanner, Image Translation via camera)	To show preview and detect QR/barcode or extract text from an image you capture.	Optional — other converters work without it. You can also pick an image from gallery (no camera permission needed for gallery via system picker).
RECORD_AUDIO	Only when you tap the microphone/voice input button	To convert your speech to text for hands-free input (via Android `SpeechRecognizer`). Audio is sent to Google's speech service as per device settings; we do not retain it.	Optional
ACCESS_FINE_LOCATION (maxSdk 32) / ACCESS_COARSE_LOCATION	Only for Wi-Fi QR “Connect” on Android 12 and below, if you choose to connect to a scanned Wi-Fi network	Android 12- requires location permission to add a `WifiNetworkSuggestion`. Not used for tracking.	Optional
NEARBY_WIFI_DEVICES (Android 13+)	Only for Wi-Fi QR “Connect”	To add a Wi-Fi network suggestion without location. Flag `neverForLocation`.	Optional
ACCESS_WIFI_STATE / CHANGE_WIFI_STATE	Only when you tap “Connect” on a Wi-Fi QR	To check Wi-Fi state and add the suggestion; we do not scan other devices, capture traffic, or modify unrelated networks.	Optional
POST_NOTIFICATIONS (Android 13+)	Only if you enable reminders/notifications in Settings	To show daily reminder and alarm notifications you requested.	Optional — deny and reminders remain disabled.
SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM / RECEIVE_BOOT_COMPLETED	Only if you set an alarm	To fire the alarm at the exact time, even after reboot.	Optional
VIBRATE	Always declared	For haptic feedback (if enabled) and alarm vibration. No personal data.	—
INTERNET / ACCESS_NETWORK_STATE	Always declared	To fetch live exchange rates, ads, and (if you use them) translation/text-recognition models (ML Kit may download language packs). Converters themselves work offline.	—

We never request a permission in the background. Each is requested contextually with a rationale and you may deny it; the related feature will simply be unavailable.

5. Third-Party Services

5.1 Google AdMob (Advertising)

We monetize with Google AdMob. AdMob may collect device advertising ID, IP address, device model, OS version, coarse location (if permitted), and ad interaction data to serve personalized or non-personalized ads, limit frequency, and prevent fraud, per Google’s policies. You can reset or delete your advertising ID in Android Settings → Privacy → Ads. See Google Privacy Policy and AdMob Data Usage.

5.2 Google Play Services & ML Kit (On-Device)

ML Kit Barcode Scanning (com.google.mlkit:barcode-scanning) and Text Recognition (including Devanagari) run on-device for Universal Scanner / Image Translation. Images are not uploaded to our servers for scanning. ML Kit may download language models via Google Play Services.
ML Kit Translate (if you download offline language packs) also runs on-device after download.
Speech Recognition (SpeechRecognizer) when you use voice input may send audio to Google’s speech-to-text service under your device’s Google settings.

5.3 Other Google Play Services

Biometric (androidx.biometric) — For App Lock biometric unlock. Biometric templates never leave the device’s secure hardware; we only receive a success/failure callback.
CameraX, Room, DataStore, Koin — local libraries, no network data transfer by themselves.

No other third-party analytics SDK is injected by us (e.g., no Firebase Analytics/Crashlytics custom events for QR content).

6. Currency Converter — Online & Offline

Online: When you open Currency, the app fetches the latest rates from public exchange-rate providers (e.g., Frankfurter, JSDelivr currency-api, Open ER) via HTTPS. No personal data is sent except the base currency code (e.g., “USD”).
Cached Offline: The last successful response (base, date, rates map, timestamp) is cached via DataStore and Room. Offline, conversion uses amount × rate (same formula as online, with cross-rate `toRate/fromRate` when base differs). If no cache exists (first launch offline), a built-in fallback table for ~180 currencies is used so conversion still works.
Manual Refresh: Pull-to-refresh triggers a new fetch; auto-retry is limited and never loops indefinitely.

7. Scanner & Camera Data Handling

Camera frames for live scanning are processed in-memory via ML Kit and are not saved, uploaded, or shared. ImageProxy is always closed; no large bitmaps are retained.
Gallery: Only the single image you select via the system picker (GetContent "image/*") is decoded (max ~4000 chars). The original image is not copied or modified.
QR content is treated as untrusted. Before any external action, it is sanitized, length-capped, control-character stripped, and checked against blocklists (javascript:, intent:, file:, data: etc.).
Wi-Fi QR: SSID/security/password are parsed with proper escaping (\; etc.). Password is masked by default (••••) with an eye toggle, never logged, never sent to analytics, and stored in history only as P:****.
Payment/Wallet QR: Detected via provider registry (eSewa, Khalti, PayPal, UPI, bKash, etc.). No PIN/OTP/password/balance is requested or stored. Handoff is generic — we build a minimal ACTION_VIEW intent for the original URI and let Android resolve installed handlers (shown in an app picker). If no handler exists, we show Copy / Share fallback, not a fake deep link.
Emojis, URLs, contacts, etc. are handled with minimal data; only the action you explicitly tap is executed.

8. Location & Sensor Data (Compass / Level / Tools)

Compass uses TYPE_ROTATION_VECTOR (or accelerometer + magnetometer fallback) and remaps for display rotation. No location is collected. Sensor accuracy is shown; if unavailable, the screen shows “Compass not available”.
Level/Bubble Level/Ruler use accelerometer only. No data leaves the device.

9. Data Retention & Deletion

Favorites: Stored until you remove them (toggle favorite or clear).
Recent History: Tool route + name + timestamp, up to ~20 entries, cleared via Settings → History → Clear.
Scan History: Type, format, sanitized value (4000 char cap, password masked), timestamp. Delete single or Clear All in Scanner History.
Currency Cache: Overwritten on each successful online fetch; clear by clearing app data.
App-Lock PIN: Stored as SHA-256 hash, not plaintext. Clear by disabling App Lock (requires current PIN).

Uninstalling the app removes all local DataStore and Room data via the system.

10. Data Sharing

We do not sell, rent, or trade your personal data. We do not share your conversion inputs, scanned QR content, or Wi-Fi passwords with third parties, except as necessary for:

Ad serving via Google AdMob (as described above),
On-device ML Kit / Speech services provided by Google Play Services,
Exchange-rate providers for currency (only base currency code),
System handoffs you explicitly approve (e.g., opening a URL in your browser, dialing a phone number, adding a calendar event, connecting to Wi-Fi via system suggestion).

11. Security

All network requests use HTTPS.
HTTP URLs in QR codes are flagged as Potentially risky (not HTTPS) and require confirmation.
Blocked schemes (javascript: etc.) show “Blocked — do not open”.
Wi-Fi WEP is flagged as insecure; Open networks show a clear unencrypted warning.
We never claim a QR is “100% safe” — assessment is Safe-looking / Unknown / Potentially risky / Blocked.
PINs, Wi-Fi passwords, and payment data are never logged to Logcat, crash reports, or analytics.

12. Children’s Privacy

Smart Converter is a general-utility app, not directed to children under 13. We do not knowingly collect personal data from children. If you are a parent/guardian and believe a child has provided personal data via feedback email, contact us to delete it.

13. Your Choices & Controls

Deny any optional permission — the related feature gracefully degrades (e.g., scanner shows “Camera permission required”).
Disable ads personalization via Android Settings → Privacy → Ads → Delete/Reset Advertising ID (AdMob will then show non-personalized ads).
Clear local data anytime: Settings → History → Clear / Scanner History → Clear All / App Settings → Clear Data.
Disable notifications/alarms in Settings and Android system settings.

14. Data Deletion Request

As the app functions offline and we hold no server-side account data for you, deletion is local. To delete all app data, uninstall or use Android Settings → Apps → Smart Converter → Storage → Clear Data. For AdMob-related identifiers, follow Google’s advertising ID controls. To request deletion of any feedback email you sent, email support@technologia.com with subject “Data Deletion Request”.

15. International Data Transfers

If you use online features, exchange-rate requests and AdMob requests may be routed through Google’s global infrastructure. This is governed by Google’s privacy policies. On-device conversions do not transfer data internationally via our servers.

16. Changes to This Policy

We may update this policy to reflect new features or legal requirements. The “Last Updated” date at the top will change, and the updated policy will be published at this URL and inside the app’s Play Store listing. Continued use after an update constitutes acceptance.

17. Contact Us

Questions about this policy or a privacy concern?

Technologia
Email: support@technologia.com
Package: com.technologia.smartconverter
Play Console → Smart Converter → Privacy Policy (this page)

This policy was generated for Google Play Developer Console submission and should be hosted at a publicly accessible HTTPS URL. Replace placeholder URLs/emails if you publish under a different domain. This document does not constitute legal advice.