GOOGLE PLAY DATA SAFETY & USER COMPLIANCE DECLARATION
This Data Safety Declaration outlines Butify's data collection, processing, sharing, and protection practices in direct alignment with Google Play Developer Policy and user safety expectations.
1. ARCHITECTURAL SUMMARY & LOCAL-FIRST COMMITMENT
Butify operates on a privacy-preserving, local-first computing model. All core creative media operations—including video trimming, timeline multi-track editing, video compression, animated GIF encoding, audio extraction, OCR text recognition, PDF generation, and document format conversions—are executed entirely on your physical device hardware. User photos, videos, audio recordings, and documents are NEVER uploaded to external servers, never transmitted across networks, and never shared with third parties.
2. COMPREHENSIVE DATA COLLECTION DISCLOSURE
A. Personal Information (Optional Collection)
- Name and Email Address: Collected only when you voluntarily register an optional account profile or contact support. Used for user authentication, cloud synchronization of credit balances, leaderboard display, and customer assistance. Guest users can use the app without providing any personal data.
- Phone Number (Optional): Voluntarily provided by the user for account recovery or contest verification.
- Handling: Encrypted in transit (TLS 1.3), stored securely in cloud databases, and never sold to third parties.
B. App Activity and Usage Telemetry
- In-App Interactions and Feature Metrics: Anonymous logs tracking feature utilization (such as video conversions performed, Academy modules completed, and reward claims redeemed) to optimize app stability, balance credit economics, and improve performance.
- Referral and Contest Telemetry: Non-personal referral counters, timestamp logs, and contest score calculations used to manage the 22-tier community referral leaderboard and reward winners.
C. Device or Other Identifiers
- Google Advertising ID (AdID): Collected and processed by the Google Mobile Ads SDK (AdMob) for frequency capping, anti-fraud verification, and serving contextual and rewarded video ads.
- App Instance Token / Installation ID: A pseudo-random identifier generated locally to prevent referral abuse, avoid duplicate credit claims, and manage local database state. This token is not linked to persistent hardware identifiers like IMEI or MAC addresses.
D. Photos, Videos, Audio, and Document Files
- Selected Media Files: Picked voluntarily by the user via the system Photo Picker or file explorer for editing, conversion, or compression.
- Collection Status: NOT COLLECTED. All media processing occurs strictly on-device in local sandbox memory. Media files are neither stored on remote servers nor transmitted over the internet.
3. PURPOSES OF DATA PROCESSING
Every piece of data collected by Butify serves a specific, lawful, and necessary operational purpose:
- App Functionality: Authenticating registered accounts, maintaining user credit balances, saving educational academy progress, and exporting rendered media files.
- Advertising and Rewarded Monetization: Displaying non-intrusive banner ads and fulfilling rewarded video ad credits via Google AdMob.
- Security and Fraud Prevention: Protecting community referral contests from automated bot scripts, fake account creation, and duplicate reward exploits.
- Analytics and Diagnostics: Monitoring crash reports, memory allocations, and performance bottlenecks to guarantee smooth operation across all supported Android devices.
- Account Management & Support: Fulfilling user customer service requests, password resets, and formal data deletion inquiries.
4. DATA STORAGE, ENCRYPTION, AND SECURITY STANDARDS
- Local Storage Protection: Rendered media outputs, temporary processing frames, and local task logs are stored in private app-specific storage or designated user-selected media folders protected by Android's application sandbox security.
- Encryption in Transit: 100% of network communications between the Butify mobile app and backend cloud services are encrypted using industry-standard TLS 1.3 cryptographic protocols.
- Cloud Database Encryption: User profile data, credit ledgers, and contest standings are stored in Google Cloud Firebase databases secured by AES-256 encryption at rest and strict role-based access control rules.
- Zero Data Commercialization: We strictly DO NOT sell, rent, lease, or monetize user data or contact details with data brokers, advertisers, or unaffiliated third parties.
5. THIRD-PARTY SDK DISCLOSURES AND DATA SHARING
Data is shared only with certified service providers strictly for documented operational purposes:
- Google Mobile Ads (AdMob): Processes anonymous Advertising IDs (AdID) and device performance metrics to display contextual and rewarded advertisements. Governed by Google's Privacy Policy.
- Google Play In-App Billing: Manages in-app credit purchases and premium subscriptions. All payment instrument data is processed exclusively on Google Play secure payment servers.
- Google Firebase / Cloud Infrastructure: Houses authentication credentials, real-time database ledgers for credit balances, and crash reporting diagnostics.
6. DATA RETENTION AND EXPIRATION POLICY
- Device Files: Processed videos, audio files, and documents remain on user device storage until manually deleted or cleared by the user.
- Account Telemetry: Active user accounts retain profile and credit information for the duration of the account's life. Accounts that remain completely inactive for a continuous period of 24 months are automatically scheduled for complete data erasure.
7. USER DATA DELETION, ACCESS, AND ERASURE MECHANISMS
In strict compliance with Google Play User Data policies, GDPR, and CCPA requirements, Butify provides comprehensive and instantaneous data deletion capabilities:
- In-App Deletion: Users can delete their account and wipe all associated cloud and local data at any time by navigating to Settings -> "Delete Account & Wipe Data", or by tapping "Delete Account" in the application footer.
- Web-Based Deletion Portal: Users who have uninstalled the app or prefer web-based requests can initiate full account deletion via our public portal at https://butify-c6873.web.app/data-safety.
- Erasure Scope: Initiating account deletion permanently and irreversibly purges user credentials, email addresses, credit point histories, referral rankings, and authentication tokens from all active cloud databases and caches.