# Privacy Policy for DevToolKit
**Effective Date:** 2026-04-22
**Developer:** Muhammad Ilyas
**Contact:** muhammadilyas15@gmail.com
## 1. Introduction
DevToolKit ("we", "our", "the app") is an offline developer utility app that bundles 22 tools for formatting, encoding/decoding, generating, converting, and inspecting text. This Privacy Policy explains what information the app accesses, how it is used, and what third-party services are involved.
By using DevToolKit you agree to the practices described below. If you do not agree, please do not install or use the app.
## 2. Information We Collect
### 2.1 Information You Provide
DevToolKit does **not** ask for any personal information. There is **no account, no sign-in, and no user profile**.
Text you paste into a tool (for example, a JWT token, a JSON document, a URL, or plain text for hashing) is **processed entirely on your device** and is **not transmitted to us or to any third party**. Input disappears when you close the tool or clear the field.
If you use the in-app Contact Us form, the app launches your installed email client pre-filled with your message. The email is sent from your own account; the app never sees or stores its contents.
### 2.2 Information Collected Automatically
The app and its integrated third-party SDKs collect a small set of automatic technical data:
- **Crash reports** — stack traces, device model, Android version, and app state at the time of a crash. Used only to fix bugs (via Firebase Crashlytics).
- **Aggregated usage analytics** — screens opened, app version, Android version, approximate region. No identifying content from any tool is sent (via Firebase Analytics).
- **Advertising identifier (Android Ad ID)** — used by Google AdMob to serve ads. You can reset or delete this ID at any time in your device's Google settings.
- **Purchase status** — whether a one-time Premium purchase has been made (via Google Play Billing).
No location data, microphone data, camera data, contacts, or files outside the app's own sandbox are ever accessed.
### 2.3 Information from Third-Party Services
DevToolKit does **not** use Google Sign-In, Facebook Login, or any other identity provider. No third party provides user identity data to the app.
## 3. How We Use Information
The small amount of automatically-collected data is used only to:
- Run the tools you request (all processing happens on-device)
- Diagnose crashes and improve stability
- Understand which tools are used so we can prioritize improvements
- Show advertisements to free users
- Verify a Premium purchase so ads are removed and all tools are unlocked
We do **not** build advertising profiles from the text you paste into tools, because that text never leaves your device.
## 4. Data Storage and Security
### 4.1 On-Device Storage
DevToolKit stores only two things locally:
- A **SharedPreferences** file containing app settings (theme preference, Premium flag, last update check)
- Temporary cache files for features such as QR image sharing
There is **no database**. There is **no user content persistence** — if you clear a tool's input, it is gone.
### 4.2 Cloud Storage
DevToolKit has **no cloud storage, no cloud backup, and no sync**. Nothing you enter into a tool is uploaded anywhere.
### 4.3 Security Measures
- Network requests by Google SDKs use HTTPS/TLS.
- Purchase tokens are validated by Google Play Billing; we do not process or store payment information.
- The app requests only the minimal permissions it needs (`INTERNET`, `ACCESS_NETWORK_STATE`, `VIBRATE`, `AD_ID`).
## 5. Data Sharing
### 5.1 We Do Not Sell Your Data
We do not sell, trade, rent, or share personal information with marketing partners.
### 5.2 Third-Party Services We Use
| Service | Purpose | Data Accessed | Privacy Policy |
|---------|---------|---------------|----------------|
| Google AdMob | Show banner and opt-in rewarded ads to free users | Advertising ID, approximate region, ad interaction events | [policies.google.com/privacy](https://policies.google.com/privacy) |
| Google User Messaging Platform (UMP) | Capture your ad consent choices in EEA/UK | Consent preferences | [policies.google.com/privacy](https://policies.google.com/privacy) |
| Firebase Crashlytics | Diagnose crashes | Stack traces, device state at crash time | [firebase.google.com/support/privacy](https://firebase.google.com/support/privacy) |
| Firebase Analytics | Aggregated usage reporting | Screen views, session info, device/locale | [firebase.google.com/support/privacy](https://firebase.google.com/support/privacy) |
| Google Play Billing | Process the one-time Premium purchase | Purchase token, order ID | [policies.google.com/privacy](https://policies.google.com/privacy) |
| Google Play In-App Update | Prompt when a newer version is available on Play Store | App version, Play Store responses | [policies.google.com/privacy](https://policies.google.com/privacy) |
Local-only libraries that do **not** transmit any data: Markwon (Markdown rendering), ZXing (QR code generation), SDP/SSP (screen sizing), and all AndroidX/Material components.
### 5.3 Advertising
- Free users see a single banner ad per screen. Free users may also optionally watch a rewarded video ad to unlock a Premium tool for that session.
- AdMob may use the advertising identifier and approximate region to select which ad to show. It does not see the content of any tool.
- Premium users (one-time purchase) see no ads at all.
- You can reset or delete your advertising identifier at any time via **Android Settings → Google → Ads**.
- You can opt out of personalized ads (still see ads, but non-personalized) through the same menu.
### 5.4 Legal Disclosure
We may disclose data only when required by applicable law, a court order, or a government request, or when necessary to protect the rights, property, or safety of our users or others.
## 6. Children's Privacy
DevToolKit is designed for developers and technical users. It is not directed at children under the age of 13 and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us at the email below and we will take appropriate steps.
## 7. Your Rights and Choices
### 7.1 Access and Control
Because the app stores no personal data on its servers, there is no profile to access, correct, or download.
### 7.2 Uninstall to Delete Local Data
Uninstalling DevToolKit removes all local SharedPreferences and cache. No further action is needed.
### 7.3 Ad Preferences
- Buy the one-time Premium upgrade in the app to remove all advertisements permanently.
- Or opt out of personalized ads via **Android Settings → Google → Ads**.
### 7.4 Analytics and Crash Opt-Out
Firebase Analytics and Crashlytics data collection are industry-standard and comparable to most Android apps. If you wish to stop crash/analytics reporting for this app, uninstall it.
## 8. GDPR and UK Data Rights (EEA / UK users)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR / UK GDPR:
- **Right of access** — request information about what data is associated with you
- **Right to rectification** — correct inaccurate data
- **Right to erasure** — ask us to delete crash/analytics data linked to your device
- **Right to restrict processing**
- **Right to data portability**
- **Right to object** — to processing for direct marketing
To exercise any of these rights, email **muhammadilyas15@gmail.com** with your request and the approximate date/time of app use. Because the app does not use accounts, data linked to a specific user can only be located by Advertising ID or Firebase Installation ID; please include as much context as you can.
The app uses Google's User Messaging Platform (UMP) to collect your ad consent before showing personalized advertisements, in compliance with GDPR.
## 9. California Privacy Rights (CCPA / CPRA)
California residents have the right to know what personal information is collected, the right to delete it, and the right to opt out of sale. **We do not sell personal information.** To exercise any California-specific right, email us at the address above.
## 10. Data Retention
- **Local data** (SharedPreferences, cache): retained until you clear app data or uninstall.
- **Crash reports**: retained per Google's default (90 days).
- **Analytics data**: retained per Google's default Firebase Analytics retention (up to 14 months, configurable by the developer).
- **Purchase records**: retained by Google Play under Google's policies.
## 11. Changes to This Policy
We may update this Privacy Policy to reflect new features, legal requirements, or operational changes. Material changes will be reflected by updating the **Effective Date** at the top. Continued use of the app after an update constitutes acceptance of the revised policy.
## 12. Contact Us
Questions, concerns, or data-rights requests:
**Email:** muhammadilyas15@gmail.com
**Developer:** Muhammad Ilyas
**App package:** `com.ilyas.ilyasapps.devtoolkit`