Welcome to Potopopi CamSync. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, and protect your data when you use our mobile application (the "App") and our website.

1. Privacy-First & Local-Only Design

Potopopi CamSync is designed from the ground up as a direct, client-side synchronization utility. **We do not host any backend servers, track analytics, or collect user data.** All file synchronization workflows run purely on your local device, and your media files, authentication tokens, and server addresses are transmitted directly to your chosen endpoints without any intermediary server.

2. High-Privilege Permissions and Rationale

To function as a direct digital camera backup client, Potopopi CamSync requires specific hardware and file access permissions on your device. We only request permissions necessary to execute the actions you explicitly trigger:

• All Files Access (MANAGE_EXTERNAL_STORAGE / READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE): Required to inspect, manage, and back up media from user-selected local folders, external storage volumes, and physical MicroSD cards. Since the App serves as a robust file backup and restore client, broad file access is necessary to copy large RAW files, catalog assets, and perform automated local file pruning safely.
• Media Access (READ_MEDIA_IMAGES / READ_MEDIA_VIDEO): Requested on Android 13+ to selectively read photos and videos from the system gallery for background backup routing.
• USB Host Communication (android.hardware.usb.host / USB_PERMISSION): Required to establish direct physical OTG/MTP links with digital cameras and external SD card readers.
• Network & Internet Access (INTERNET / ACCESS_NETWORK_STATE): Required to establish direct, encrypted HTTPS connections with your Google Drive, Nextcloud, and Immich endpoints.
• Foreground Sync Services (FOREGROUND_SERVICE / FOREGROUND_SERVICE_DATA_SYNC): Required to perform active file transfers in the background without the operating system interrupting or terminating the synchronization process.

3. Secure Credential Storage

Your authentication credentials never leave your device, except to authenticate directly with your selected providers:

• Encrypted Storage: All Google OAuth2 tokens, Nextcloud WebDAV passwords, and Immich API keys are stored securely using Android's native EncryptedSharedPreferences framework. This secures them against unauthorized reads by other applications or physical extractions.
• No Third-Party Transmission: We never collect or transmit your credentials. Communication with your storage providers occurs strictly over secure HTTPS connections.

4. Google Drive Data Scope Compliance

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Requested Scope: https://www.googleapis.com/auth/drive.file
• Limited Scope Access: The App only reads, writes, and manages files and folders that were explicitly created by Potopopi CamSync. We cannot see or modify other files in your Google Drive.

5. Data Retention

Potopopi CamSync maintains a local database on your device (a ledger) to remember which files have already been synchronized. This prevents duplicate uploads. This database never leaves your device and can be cleared at any time by uninstalling the app or clearing the app data.

6. Sharing of Information

We do not sell, rent, trade, or otherwise share your personal information or media files with any third parties.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.

8. Contact Us

If you have any questions or suggestions about our Privacy Policy, please contact us by emailing purnadika@proton.me.