FileVia Android Privacy Policy

1. Local tools and bundled recognition

FileVia scans, edits, recognizes and manages documents locally. It has no FileVia account, advertising, subscription, in-app purchase, developer cloud file library or file relay. Google Play handles paid downloads under its own policies. Android, Google Play and other apps operate independently.

Selected files, captures, recognized text, thumbnails, editing drafts and preferences normally stay on your device. Temporary originals and edited images support re-cropping and save recovery; temporary storage is not a backup and Android may clear it.

Version 0.2 replaces ML Kit with Tesseract4Android and bundled Chinese/English models, and uses ZXing for QR decoding. Recognition needs no image, text or QR-content upload or model download. No advertising or analytics service is configured. Open-source notices are available in adult settings.

2. Children and adult management

The default view offers local capture and pictures saved through the child workflow. Existing adult documents and received network files do not automatically appear there. External imports, advanced tools, exports, clipboard actions and sharing require adult management. Sharing starts disabled; an adult can enable or disable it and must confirm individual external actions.

A salted, derived adult PIN credential and settings are stored locally. No birthday or child profile is collected. The PIN controls this device; it is not proof of age, verified guardianship or legal parental consent. Adult tools lock after inactivity or when the app leaves the foreground. Explicit locking or disabling sharing stops active app-managed transfers. Copies already passed to another app or recipient cannot be recalled.

Adults should supervise capture and transfer, inspect incoming material and avoid sharing a child’s name, face, address, school or other personal information. There is no public chat, stranger discovery or public user-content feed. Do not send children’s personal information to support.

3. Transfers you choose

Selected content, file names, types, sizes, hashes and connection information reach your paired peer. Pairing codes contain a temporary session identifier, connection addresses and certificate information. Protect codes and pair only intended devices. A recipient can keep copies.

Version 0.2 uses WebRTC data channels protected by DTLS/SCTP. Offer and answer codes bind peer certificates and expire. No external STUN/TURN service is configured and there is no fallback to old HTTP transfers. Private-address host candidates are checked before files are sent; a private address does not establish that a device or network is trustworthy. Isolated networks, VPNs, hidden browser addresses or unsupported WebRTC features may prevent a connection. Old FileVia transfer protocols are incompatible.

Incoming files are held in private temporary storage, checked for size and SHA-256 integrity, and saved only after adult confirmation. A matching hash detects transfer corruption, not malware or unsafe content. Files do not open automatically. Interrupted temporary transfers are discarded.

4. Computer transfer page

Your browser downloads the HTTPS page from this website. Hosting and network providers may process ordinary request information, such as IP address, headers and request time, to serve and secure the site. FileVia does not control their infrastructure-log retention.

Pairing codes and file contents are processed in your browser and sent directly to the paired device, not uploaded to the website. The transfer page loads no third-party analytics, advertising, fonts or scripts. Camera access starts only when you choose scanning and stops when scanning ends or the page is hidden. You can paste a code instead.

Where supported, files are saved to a destination you choose. Other browsers may request a download for smaller files, then ask you to confirm it was saved. A download request is not proof of disk storage. Hiding or closing the page stops the session. Completed downloads remain under browser and operating-system controls.

5. Permissions and deletion

Camera access supports capture and QR scanning. Network and nearby-device permissions support user-initiated transfers, depending on Android version. System pickers grant access to selected photos or documents. FileVia does not request broad all-files storage, microphone, location, contacts or phone-number access.

Delete library items in adult tools. Uninstalling normally removes app-private data and credentials. Gallery exports, browser downloads and recipient copies are separate and are not removed with the library copy. Hidden files and the PIN provide app-level access control, not a system-wide encrypted vault. There is no FileVia account to delete.

6. Support and policy changes

If you email support, your email provider and ours handle your address and message. Send only information needed for the request, without private documents or sensitive child information. Contact 15871731171shuao@gmail.com for privacy questions or local-deletion help. We may update this policy as the app changes; its date and version identify its scope.

中文摘要（Android 0.2 及以后）

0.2 版正在准备测试，本文不表示已上线或审核通过。扫描、编辑及捆绑的中英文 OCR、二维码识别在本机处理，已替换 ML Kit；无应用账号、广告、订阅或应用内购买，付费下载由 Google Play 处理。

默认儿童界面提供本地拍摄和作品，成人及网络文件不会自动进入作品集。独立成人 PIN、默认关闭的分享和逐次确认管理外部导入、导出、剪贴板及传输。PIN 是本机访问控制，不是年龄或法定监护身份认证。请监督操作，勿分享儿童个人信息。

新传输使用二维码绑定的加密 WebRTC 私网直连，无外部 STUN/TURN 或文件中转，不兼容旧 HTTP 码。私网地址不等于可信设备；请保护配对码。文件先隔离、校验，再由成人确认保存；完整性校验不是病毒或内容检测。电脑网页在浏览器处理文件，托管方仍可能处理普通访问连接信息；下载请求不等于文件已落盘。

相机、网络及系统选择器按需使用，不请求全文件、录音、定位、联系人或手机号权限。本地删除不撤回已导出或发出的副本；隐藏与 PIN 不是加密保险箱。隐私与支持：15871731171shuao@gmail.com。