# Politica de confidentialitate — Fotoro
Fotoro este o rama foto digitala pentru Android, dezvoltata de BFX Developer Romania.
Aceasta politica explica exact ce face aplicatia cu datele tale. Este scrisa ca sa fie
citita, nu ca sa fie bifata.
## Pe scurt
Fotoro nu are conturi, nu are servere si nu are reclame.
**Pozele si clipurile tale nu ajung niciodata la noi.** Stau pe tableta si, daca vrei, in
Dropbox-ul tau — nimic nu trece prin vreun server al nostru, pentru ca nu avem niciunul.
Setarile si parolele tale raman tot pe dispozitiv.
## Ce ramane pe dispozitiv
Aplicatia salveaza local, in memoria interna a dispozitivului:
- setarile ramei (durata unei poze, tranzitia, ordinea, luminozitatea, limba, unitatea de
temperatura, formatul orei);
- lista folderelor si a albumelor pe care le-ai ales;
- numele si parola folderului din reteaua locala (NAS), daca ai configurat unul;
- codul PIN al blocajului pentru copii, daca l-ai activat;
- cheia de acces la Dropbox, daca ti-ai legat contul.
Aceste date nu parasesc dispozitivul. Se sterg complet cand dezinstalezi aplicatia sau
cand alegi „Sterge datele" din setarile Android.
## Permisiunile cerute si motivul fiecareia
**Fotografii si video** (`READ_MEDIA_IMAGES`, `READ_MEDIA_VIDEO`, iar pe Android 12 sau mai
vechi `READ_EXTERNAL_STORAGE`) — ca sa poata afisa pozele din galeria dispozitivului.
Pozele sunt doar citite si afisate. Nu sunt copiate, modificate, trimise nicaieri sau
analizate. Aplicatia nu are cod de recunoastere faciala si nu identifica persoane.
**Internet** (`INTERNET`) — pentru trei lucruri, toate optionale: vremea, folderul din
reteaua locala si folderul din Dropbox. Daca nu folosesti niciunul, aplicatia nu face
nicio conexiune.
**Locatie aproximativa** (`ACCESS_COARSE_LOCATION`) — numai daca pornesti afisarea vremii.
Aplicatia foloseste ultima pozitie cunoscuta pe care sistemul o are deja; nu porneste
niciodata GPS-ul si nu urmareste deplasari. Coordonatele sunt rotunjite la aproximativ
110 metri inainte de a fi trimise si nu sunt salvate niciodata. Fara aceasta permisiune,
restul aplicatiei functioneaza normal — doar vremea nu apare.
**Calendar** (`READ_CALENDAR`) — numai daca pornesti afisarea evenimentelor pe ecran.
Evenimentele sunt citite pentru a fi afisate si atat: nu sunt salvate, copiate sau trimise.
**Anunturi** (`POST_NOTIFICATIONS`) — numai ca sa te instiintam cand cineva din familie
pune o inimioara pe o poza trimisa de pe tableta asta. Nu trimitem nimic altceva: nicio
reclama, nicio instiintare de tipul „revino in aplicatie". Daca refuzi, restul merge la fel.
**Mentinerea ecranului aprins** (`WAKE_LOCK`) — o rama foto care se stinge nu este o rama
foto.
## Servicii din afara aplicatiei
Aplicatia vorbeste cu patru destinatii. Primele trei le pornesti tu si sunt optionale;
a patra, masurarea, merge de la sine si nu atinge nimic din ce e al tau.
**Open-Meteo** (serviciul de vreme). Primeste coordonatele rotunjite si intoarce
temperatura. Nu se trimite nimic altceva: nici identificatorul dispozitivului, nici vreun
cont, nici vreo poza. Open-Meteo nu cere cont si nu cere cheie de acces.
Termenii lor: https://open-meteo.com/en/terms
**Dropbox** (optional). Daca iti legi contul, Dropbox creeaza un folder al aplicatiei,
numit „Fotoro”, si ii da acces **numai la el**. Restul fisierelor tale din Dropbox raman
invizibile pentru aplicatie — nu e o promisiune a noastra, ci o limitare impusa de Dropbox
prin tipul de acces „App folder” pe care l-am ales.
Cerem trei drepturi, toate marginite la folderul acela: sa citim numele fisierelor, sa le
citim continutul si sa punem fisiere noi. Ultimul e pentru trimiterea pozelor de pe telefon
catre rama si pentru inimioara trimisa inapoi. Nu cerem datele contului tau si nu putem sterge
sau modifica ce era deja acolo.
Cheia de acces se pastreaza pe dispozitiv, ca sa nu trebuiasca sa te autentifici din nou la
fiecare pornire. Nu ajunge la noi si nu paraseste tableta. Poti dezlega contul oricand din
aplicatie, sau de la https://www.dropbox.com/account/connected_apps
Folderele de aplicatie Dropbox nu pot fi partajate cu alte persoane. Pozele le pui tu, de pe
oricare dintre dispozitivele tale.
**Folderul tau din reteaua locala (NAS)** (optional). Aplicatia se conecteaza direct la
dispozitivul tau, in reteaua ta. Numele si parola sunt trimise doar catre acel dispozitiv
si sunt pastrate pe tableta pentru reconectare automata. Nu ajung la noi si nu ajung la
nimeni altcineva.
**Google Analytics pentru Firebase** (masurarea). Numara ce se apasa in aplicatie, ca sa stim
ce merge si ce nu: de cate ori s-a deschis ecranul de cumparare, la ce pas s-a inchis ghidul,
cate minute a mers rama, care surse de poze cad.
Ce **nu** trimite, niciodata: nicio fotografie si niciun videoclip, niciun nume de fisier sau
de folder, nicio adresa de NAS, niciun eveniment din calendar, nicio adresa de e-mail si nicio
coordonata. Cand ne trebuie un numar — cate poze ai, cat a durat cautarea — se trimite treapta,
nu cifra: „intre 201 si 1000 de poze", nu numarul exact.
Firebase pune pe fiecare instalare un numar de identificare al aplicatiei, ca sa deosebeasca o
tableta de alta. Numarul nu spune cine esti si nu se leaga de niciun cont. Se sterge odata cu
aplicatia.
Tot aici se foloseste **identificatorul de publicitate** al dispozitivului, un numar pe care
Android il pune la dispozitia aplicatiilor. Noua ne trebuie pentru un singur lucru: daca platim
o reclama pentru Fotoro, sa stim din ce reclama a venit instalarea. Nu aratam reclame in
aplicatie, niciodata. Numarul il poti sterge sau reseta oricand din Setarile Android → Google →
Anunturi, si tot de acolo poti opri cu totul personalizarea reclamelor.
Acelasi numar ajunge si la **Meta** (Facebook si Instagram), tot pentru atat: ca o reclama
platita acolo sa stie ca instalarea a venit din ea. Catre Meta pleaca patru lucruri si nimic
mai mult: aplicatia s-a deschis, s-a ajuns la ecranul de Premium, s-au pus primele poze, s-a
cumparat. Nicio fotografie, niciun clip, niciun nume de fisier si nicio adresa nu pleaca
acolo, fiindca partea aceea de cod nici nu le vede.
Google e prelucrator pentru datele astea si le tine cel mult 14 luni.
Politica lor: https://policies.google.com/privacy
## Ce NU face aplicatia
- Nu urmareste ce poze te uiti, cat timp sau cand.
- Nu arata nicio reclama, niciodata, nicaieri in aplicatie. Are in schimb biblioteca de
masurare a celor de la Meta, care nu afiseaza nimic: serveste doar ca o reclama platita
de noi pe Facebook sau Instagram sa stie ca instalarea a venit din ea.
- Nu creeaza cont si nu cere adresa de e-mail.
- Nu vinde si nu da mai departe datele tale, nimanui si pentru niciun ban.
- Nu incarca pozele nicaieri, in afara de folderul tau din Dropbox, si numai daca ii ceri.
## Plata
Aplicatia are o singura cumparare, facuta prin Google Play. Plata si datele cardului tau trec
doar prin Google — noi nu le vedem si nu le pastram. Aplicatia tine minte pe dispozitiv un
singur lucru: daca s-a platit sau nu.
## Copiii
Aplicatia este facuta pentru intreaga familie si nu colecteaza date personale de la nimeni,
indiferent de varsta. Blocajul cu PIN exista tocmai ca un copil sa nu poata modifica
setarile ramei din greseala.
## Stergerea datelor
Toate datele stau pe dispozitiv. Le poti sterge in doua feluri:
- dezinstalezi aplicatia; sau
- Setari Android → Aplicatii → Fotoro → Spatiu de stocare → Sterge datele.
Accesul la Dropbox se retrage separat, din aplicatie (butonul „Deconecteaza contul")
sau de la https://www.dropbox.com/account/connected_apps
**Pozele trimise catre rama prin Dropbox** stau in contul tau de Dropbox, in folderul
Aplicatii/Fotoro. Le stergi de acolo oricand, ca pe orice alt fisier al tau. Nu exista o copie
a lor la noi, pentru ca aplicatia nu are servere.
**Cum ceri stergerea datelor.** Scrie la unagentai@gmail.com si raspundem in cel mult 30 de
zile. Trebuie spus insa dinainte, ca sa nu astepti degeaba: noi nu tinem nimic despre tine pe
niciun server, deci nu exista ceva ce am putea sterge in locul tau. Pozele, folderele,
calendarul si alegerile tale sunt pe tableta si in contul tau de Dropbox, si numai tu ajungi la
ele. Cererea are rost daca vrei o confirmare scrisa sau daca ai o intrebare despre datele tale.
## Modificari
Daca schimbam ceva important, actualizam data de sus si descriem modificarea aici.
## Contact
BFX Developer Romania
unagentai@gmail.com
---
# Privacy Policy — Fotoro
Fotoro is a digital photo frame for Android, developed by BFX Developer Romania. This
policy explains exactly what the app does with your data. It is written to be read, not to
be ticked off a list.
## In short
Fotoro has no accounts, no servers and no ads.
**Your photos and videos never reach us.** They stay on the tablet and, if you choose, in your
own Dropbox — nothing passes through a server of ours, because we have none.
Your settings and your passwords stay on the device too.
## What stays on the device
The app stores locally, in the device internal storage:
- frame settings (photo duration, transition, order, brightness, language, temperature
unit, time format);
- the list of folders and albums you selected;
- the username and password of your local network folder (NAS), if you configured one;
- the child-lock PIN, if you enabled it;
- the Dropbox access key, if you linked your account.
This data never leaves the device. It is erased completely when you uninstall the app or
clear its data from Android settings.
## Permissions and why each is needed
**Photos and video** (`READ_MEDIA_IMAGES`, `READ_MEDIA_VIDEO`, and on Android 12 or older
`READ_EXTERNAL_STORAGE`) — to display photos from the device gallery. Photos are only read
and displayed. They are not copied, modified, uploaded or analysed. The app contains no
face recognition code and does not identify people.
**Internet** (`INTERNET`) — for three optional things: weather, the local network folder and
the Dropbox folder. If you use none of them, the app makes no connections at all.
**Approximate location** (`ACCESS_COARSE_LOCATION`) — only if you enable the weather
display. The app uses the last known position the system already holds; it never turns on
GPS and never tracks movement. Coordinates are rounded to roughly 110 metres before being
sent, and are never stored. Without this permission the rest of the app works normally —
only the weather is missing.
**Calendar** (`READ_CALENDAR`) — only if you enable events on screen. Events are read to be
displayed and nothing more: they are not stored, copied or transmitted.
**Notifications** (`POST_NOTIFICATIONS`) — only to tell you when someone in the family puts
a heart on a photo sent from this tablet. Nothing else is sent: no ads, no "come back to the
app" reminders. If you refuse, everything else works the same.
**Keeping the screen on** (`WAKE_LOCK`) — a photo frame that switches itself off is not a
photo frame.
## Third-party services
The app talks to four destinations. The first three are started by you and are optional;
the fourth, measurement, runs on its own and touches nothing of yours.
**Open-Meteo** (weather service). Receives the rounded coordinates and returns the
temperature. Nothing else is sent: no device identifier, no account, no photo. Open-Meteo
requires no account and no API key. Their terms: https://open-meteo.com/en/terms
**Dropbox** (optional). If you link your account, Dropbox creates a folder for the app,
named "Fotoro", and grants it access **to that folder only**. Everything else in your Dropbox
stays invisible to the app — this is not our promise, it is a limit enforced by Dropbox
through the "App folder" access type we chose.
We request three rights, all confined to that folder: to read file names, to read their
contents, and to add new files. The last one is for sending photos from your phone to the frame
and for the heart sent back. We do not request your account details, and we cannot delete or
modify anything that was already there.
The access key is kept on the device so that you do not have to sign in again at every start.
It never reaches us and never leaves the tablet. You can unlink the account at any time from
within the app, or at https://www.dropbox.com/account/connected_apps
Dropbox app folders cannot be shared with other people. You add the photos yourself, from any
of your devices.
**Your local network folder (NAS)** (optional). The app connects directly to your own
device, on your own network. The username and password are sent only to that device and are
kept on the tablet for automatic reconnection. They never reach us and never reach anyone
else.
**Google Analytics for Firebase** (measurement). It counts what gets tapped in the app, so we
know what works and what does not: how often the purchase screen was opened, at which step the
guide was closed, how many minutes the frame ran, which photo sources fail.
What it never sends: no photo and no video, no file or folder name, no NAS address, no calendar
event, no e-mail address and no coordinates. When we need a number — how many photos you have,
how long the scan took — we send the band, not the figure: "between 201 and 1000 photos", not
the exact count.
Firebase puts an app instance identifier on each installation, to tell one tablet from another.
It says nothing about who you are and is not tied to any account. It disappears with the app.
The device **advertising identifier** is used here too — a number Android makes available to
apps. We need it for one thing only: if we pay for an advert for Fotoro, to know which advert an
installation came from. We never show adverts inside the app. You can reset or delete that
number at any time from Android Settings → Google → Ads, and turn off ad personalisation
entirely from the same place.
The same number also reaches **Meta** (Facebook and Instagram), for the same single purpose:
so that an advert we paid for there knows an installation came from it. Four things go to
Meta and nothing else: the app was opened, the Premium screen was reached, the first photos
were added, a purchase was made. No photograph, no video, no file name and no address ever
goes there — that part of the code cannot see them.
Google is a processor for this data and keeps it for at most 14 months.
Their policy: https://policies.google.com/privacy
## What the app does NOT do
- It does not track which photos you look at, for how long, or when.
- It shows no adverts, ever, anywhere in the app. It does include Meta's measurement
library, which displays nothing: it only lets an advert we paid for on Facebook or
Instagram know that an installation came from it.
- No account creation, no e-mail address requested.
- We never sell your data and never pass it on to anyone, for any money.
- No uploading of your photos anywhere, except to your own Dropbox folder, and only when
you ask for it.
## Payment
The app has a single purchase, made through Google Play. The payment and your card details go
through Google only — we never see them and never keep them. The app remembers one thing on the
device: whether it was paid for or not.
## Children
The app is made for the whole family and collects no personal data from anyone, at any age.
The PIN lock exists precisely so that a child cannot change the frame settings by accident.
## Deleting your data
All data lives on the device. You can erase it in two ways:
- uninstall the app; or
- Android Settings → Apps → Fotoro → Storage → Clear data.
Dropbox access is revoked separately, from within the app ("Disconnect the account")
or at https://www.dropbox.com/account/connected_apps
**Photos sent to the frame through Dropbox** live in your own Dropbox account, in the
Apps/Fotoro folder. Delete them there whenever you like, like any other file of yours. There is
no copy of them on our side, because the app has no servers.
**How to request deletion.** Write to unagentai@gmail.com and we answer within 30 days. One
thing should be said up front, so you don't wait for nothing: we hold nothing about you on any
server, so there is nothing we could delete on your behalf. Your photos, folders, calendar and
choices are on the tablet and in your own Dropbox account, and only you can reach them. The
request makes sense if you want written confirmation or have a question about your data.
## Changes
If we change anything material, we update the date above and describe the change here.
## Contact
BFX Developer Romania
unagentai@gmail.com