ZOiOT Privacy Policy

Effective date: 2026-03-30
Package name: com.zoiot.app

This policy explains how ZOiOT (the “App”) handles information on Android devices. We do not create accounts, do not upload your data to any server, and do not integrate advertising, analytics, or push SDKs. The App is designed for general users: you select or take photos locally → crop → cast to an EPAD device via USB. You may optionally keep local cast history or save images to the system gallery.

1. What we collect and process

User-provided images/files: Photos you take or pick, used for cropping and casting; optionally saved to the system gallery Pictures/EPAD.
Cast history (local Room database): Compressed base64 thumbnails, timestamps, and display time for record and re-casting.
Device identifiers: USB vendor ID, product ID, and device name, used only to recognize EPAD and establish communication.
Preferences & settings: Language choice and flags such as whether an EPAD card was added, stored in local SharedPreferences.
Cache files: Temporary images generated by camera, cropping, or cast history, stored in the app cache directory.

We do not collect names, email, phone numbers, location, contacts, SMS, sensor data, advertising identifiers, or device serial numbers.

2. How we use the information

Core functionality: image cropping, USB casting, and history management.
Device and permission checks: ensure casting only to authorized EPAD devices and avoid unrelated device access.
Local retention for reuse: let you view or re-cast past images; optionally save to the system gallery.

3. Storage and transfer

Where stored: Only on the device (app private directory, Room database, cache; gallery files live in the system Photos/Gallery).
Transfer path: USB cable directly to EPAD; no Internet transmission; nothing is uploaded or shared with any server.
Security & access control: Android sandbox protects private directories; FileProvider controls cross-app file URIs; USB communication requires system-granted permission.

4. Retention and deletion

Cast history: kept locally; you can delete single or all items in “Cast Records”. Clearing app data or uninstalling also removes it.
Cache files: removed when you clear cache or uninstall.
Gallery files: created only when you tap “Save”; delete them in the gallery if you no longer need them.

5. Permissions

CAMERA: capture photos for casting.
READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE (≤Android 12): pick images from gallery or file manager.
USB host/accessory: detect and communicate with the EPAD device, transfer image data.
WRITE_EXTERNAL_STORAGE (legacy systems only): write to the system gallery when you choose “Save”.

6. Third-party sharing and SDKs

No sharing: we do not sell, rent, or share your data with any third party.
No third-party SDKs: no ads, analytics, push, login, or other SDKs are integrated.

7. Children’s privacy

The App is not directed to children under 13 and does not knowingly collect children’s personal information. If you are a guardian and believe a child is using the App, please contact us to remove local data as feasible.

8. Security measures

Processing is local only; no network transmission, reducing interception risk.
USB communication requires system authorization; FileProvider restricts file URI access.
We advise against using on rooted or compromised devices to reduce third-party access risk.

9. Your rights and choices

Deletion: delete cast records in-app; clear app data or uninstall in system settings; delete saved images in the gallery.
Permission control: revoke camera, storage, or USB permissions in system settings at any time (core casting may stop working).

10. Updates to this policy

If we add accounts, network uploads, or third-party SDKs in the future, we will update this policy before release and notify you in-app. Continued use means you accept the updated terms.

11. Contact

For privacy or data requests, please contact: +86 137-9850-4450. We will assist within the limits of local-only data (e.g., guiding you to delete on-device records).