Privacy Policy for CalmAlert
Last Updated: March 17, 2025
Effective Date: March 17, 2025
Introduction
XIF Technologies ("we", "our", or "us") operates the CalmAlert mobile application (the "Service"). This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your information when you use our Service and the choices you have associated with that data.
Information Collection and Use
2.1 Types of Data Collected
We collect the following types of data to provide and improve our Service:
File Metadata: File names, sizes, types, and modification dates for the purpose of identifying duplicate files and analyzing storage usage.
Usage Data: Information about how you interact with the Service, such as scan frequency and features used.
Device Information: Device model, operating system version, and storage capacity to optimize performance.
2.2 Data Processing
All data processing occurs locally on your device. We do not:
Access or store the content of your files (e.g., photos, videos, documents).
Upload your files to external servers.
Legal Basis for Processing (GDPR Compliance)
For users in the European Economic Area (EEA), we process your data based on:
Contractual Necessity: To provide the core functionality of the Service.
Legitimate Interest: To improve the Service and prevent fraud.
Consent: For optional features like crash reporting.
Data Sharing and Disclosure
4.1 Third-Party Services
We may share anonymized, aggregated data with the following third parties:
Google Firebase: For crash reporting and analytics (anonymous usage statistics).
Amazon Web Services (AWS): For encrypted backup of app settings (no file content).
4.2 Legal Requirements
We may disclose your data if required by law or in response to valid requests by public authorities (e.g., court orders).
Data Retention
File Metadata: Deleted immediately after scanning unless you manually save results.
Usage Data: Retained for 12 months in anonymized form for analytics.
Your Rights
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of your data.
Rectification: Correct inaccurate data.
Erasure: Request deletion of your data.
Restriction: Limit how we use your data.
Portability: Receive your data in a structured format.
Object: Opt-out of certain data processing.
To exercise these rights, contact us at teknolojigcom@gmail.com
International Data Transfers
Your data is processed locally on your device. Any anonymized data shared with third parties is stored in GDPR-compliant regions (e.g., AWS EU servers).
Children's Privacy
Our Service is not intended for users under the age of 16. We do not knowingly collect personal data from children.
Security Measures
We implement industry-standard security practices, including:
On-Device Encryption: All scans use SHA-256 hashing.
Regular Audits: Annual penetration testing by independent security firms.
Access Controls: Strict internal policies to limit data access.
Policy Updates
We will notify users of material changes via:
In-app notifications (for minor updates).
Email (for significant changes affecting privacy).
Contact Us
For questions or requests regarding this Privacy Policy:
📧 Email: teknolojigcom@gmail.com