1. Information We Do NOT Collect

LocalShare operates without accounts, logins, telemetry, or remote servers. Specifically:

• No Personal Identifiable Information (PII): We do not collect names, email addresses, phone numbers, or account credentials.
• No File Contents or Metadata: The files you transfer (photos, videos, documents, folders) are never transmitted to us or any third party.
• No Analytics or Covert Telemetry: LocalShare does not include background behavioral analytics or user-profiling trackers (e.g., no Google Analytics, Firebase Analytics, or Facebook SDKs). Any advertising delivery is strictly governed as disclosed in Section 7 below.
• No Location Tracking: We never record, process, or transmit your geographical coordinates (GPS location).

2. How Local Transfers & Encryption Work

All communication in LocalShare occurs exclusively within your local area network (Wi-Fi or Direct Hotspot):

• Device Discovery: The app uses standard Local Area Network (LAN) UDP multicast/broadcast and TCP pings to find other LocalShare nodes connected to the same Wi-Fi subnet.
• End-to-End Encryption (E2EE): Transfers are secured with X25519 Elliptic Curve Diffie-Hellman (ECDH) session key exchange and AES-256-GCM authenticated encryption. Only the intended sender and receiver hold the ephemeral cryptographic keys.
• Ambient PIN Authentication: To prevent unauthorized incoming connections, device pairing requires matching a 6-digit Short Authentication String (SAS) security code on both screens.

3. Android System Permissions & Usage

LocalShare requests only the minimum runtime permissions required to facilitate local offline file transfers:

Permission	Purpose & Scope
Nearby Devices (API 33+) NEARBY_WIFI_DEVICES	Used to discover nearby LocalShare peers on local Wi-Fi and host offline Wi-Fi Direct hotspots. Configured with usesPermissionFlags="neverForLocation" so physical location is never derived.
Location (Legacy API ≤ 32) ACCESS_FINE_LOCATION	Only requested on legacy Android 8–12 devices where the Android OS mandates location permission for local Wi-Fi hardware scanning. LocalShare never reads or records GPS coordinates.
Camera (Optional) CAMERA	Used exclusively for optical scanning of QR codes (to connect to Web Share portals and Wi-Fi Direct Hotspots). No photos or video frames are ever saved, stored, or transmitted.
Storage & Media READ_MEDIA_* / SAF	Used to read the specific files or folders you explicitly choose to send, and to save incoming received files into your device's Download/LocalShare directory.
Notifications POST_NOTIFICATIONS	Used to display active file transfer progress, streaming velocity, remaining time (ETA), and incoming transfer approval alerts.
Foreground Service FOREGROUND_SERVICE	Ensures uninterrupted file streaming when the app is minimized or the phone screen turns off during large multi-gigabyte transfers.

4. Data Storage and Retention

LocalShare stores minimal operational data strictly on your local device:

• Transfer History & Vault: A local SQLite database keeps a log of your sent and received files, file sizes, and timestamps. This data remains on your physical storage and is never uploaded anywhere.
• User Control: You can clear your transfer history or delete received files at any time through the app's Received Vault screen or via your device's file manager. Uninstalling the app removes its private database.

5. Zero-Install Web Share Portal

When you use the "Share via Web Browser" feature, LocalShare spins up an ephemeral HTTP server on your local Wi-Fi IP (port 53317). Only devices connected to your exact same Wi-Fi router who possess the session PIN or scan the QR code can access the shared files. The web portal terminates immediately when closed.

6. Children's Privacy

LocalShare does not collect personal information from any individuals, including children under the age of 13. The application is completely safe for all audiences and complies with the Children's Online Privacy Protection Act (COPPA) and General Data Protection Regulation (GDPR).

7. Advertising & Third-Party Services

LocalShare is currently 100% ad-free and does not collect or request the Google Advertising Identifier (GAID). There are no third-party advertising tracking SDKs active in the current version of the application.

If future updates introduce optional advertising to support ongoing maintenance, this policy will be updated with full disclosure of any partner networks, and users will retain complete control to reset or delete advertising identifiers via their Android system settings.

8. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect app enhancements or statutory requirements. Any changes will be posted to this page with an updated effective date.

9. Contact Us

If you have any questions, concerns, or inquiries regarding this Privacy Policy or your data privacy while using LocalShare, please contact us directly:

• Developer: Naveen Labs
• Contact Email: naveengupta3080@gmail.com
• Website: https://expertprogramming.github.io/naveenlabs.github.io/