Privacy Policy

This Privacy Policy describes how Coding Cosmos ("we", "us", or "our") collects, uses, and protects information when you use the FlashNotify mobile application ("App"). By installing or using the App, you agree to the practices described in this policy.

1. Information We Collect

FlashNotify is designed to respect your privacy. We do not collect, store, or transmit any personally identifiable information (PII) to our servers. The App operates primarily on-device.

a) Automatically Collected Data (via Firebase)

We use Google Firebase services, which may automatically collect limited diagnostic and usage data:

• Firebase Analytics: Anonymous usage statistics such as app open events, feature interactions, device model, OS version, country/region (at a city level), and session duration. This data is aggregated and cannot be used to identify you personally.
• Firebase Crashlytics: Crash reports including device model, OS version, app version, stack traces, and the state of the app at the time of a crash. This data is used solely to identify and fix bugs. No personal content (messages, contacts, or notification content) is included in crash reports.

b) Data Stored Locally on Your Device

Your app settings and preferences (e.g., flash speed, trigger configuration, selected apps) are stored locally on your device using Android DataStore. This data never leaves your device and is not accessible to us.

c) Data We Do NOT Collect

• Notification content (text, sender, message body)
• Call logs, phone numbers, or caller identity
• Contacts or address book data
• Location data
• Any personally identifiable information

2. Permissions Used and Why

The App requests the following Android permissions, each used solely for its stated purpose:

• CAMERA / FLASHLIGHT: To activate the camera LED flash when a trigger event occurs.
• READ_PHONE_STATE: To detect incoming and outgoing call state so the flash can be triggered accordingly. No call content, phone numbers, or call logs are read or stored.
• NOTIFICATION_LISTENER (Notification Access): To detect when a new notification arrives so the flash can be triggered. Only the arrival event is detected — notification content, sender, and message text are never read, logged, or transmitted.
• POST_NOTIFICATIONS: To display a persistent foreground service notification informing you that FlashNotify is running in the background.
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_SPECIAL_USE: To run a background service that monitors trigger events reliably.
• RECEIVE_BOOT_COMPLETED: To automatically restart the background service after a device reboot, if you have enabled FlashNotify.
• QUERY_ALL_PACKAGES: To display a list of installed apps so you can configure which apps trigger the flash. The list of apps is used only within the App and is never transmitted externally.

3. How We Use Collected Information

• To provide and improve the App's core functionality
• To diagnose crashes and fix technical issues (via Crashlytics)
• To understand aggregate usage patterns and improve the user experience (via Analytics)

We do not use any collected data for advertising, profiling, or any purpose beyond app improvement.

In future versions, the App may display advertisements served by Google AdMob. This policy will be updated accordingly before any such feature is introduced.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your data to any third party. Data may be shared only in the following limited circumstances:

• Google Firebase (Google LLC): Crash and analytics data is processed by Firebase under Google's Privacy Policy (policies.google.com/privacy). Google acts as a data processor on our behalf.
• Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of our users or the public.

5. Data Retention

Firebase Analytics data is retained for up to 14 months by default, after which it is automatically deleted. Crashlytics data is retained for 90 days. Local on-device settings are retained until you uninstall the App or clear app data.

6. Your Rights (GDPR – EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of data we hold about you.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Rectification: Request correction of inaccurate data.
• Right to Restriction: Request that we restrict processing of your data.
• Right to Object: Object to processing of your data for analytics purposes.
• Right to Data Portability: Request your data in a portable format.

Legal Basis for Processing (Article 6 GDPR): We process diagnostic and analytics data on the basis of our legitimate interests in maintaining and improving the App. No data processing requires your consent as no personally identifiable information is collected.

To exercise any of these rights, contact us at the email address provided in Section 10. You may also opt out of Firebase Analytics data collection via Settings → Google → Ads → Delete advertising ID on your Android device (menu name may vary by Android version).

7. Your Rights (CCPA – California Users)

If you are a California resident, under the California Consumer Privacy Act (CCPA) you have the right to:

• Know what personal information is collected about you
• Know whether your personal information is sold or disclosed and to whom
• Opt out of the sale of your personal information (we do not sell personal information)
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

8. Children's Privacy (COPPA)

FlashNotify is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

9. Data Security

We implement reasonable technical and organisational measures to protect data processed through the App. All communication with Firebase servers occurs over encrypted HTTPS connections. Local app data is stored in Android's protected application sandbox and is not accessible to other apps.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Coding Cosmos
Developer Type: Individual Developer
Country: India
Email: codingcosmos121@gmail.com

We will respond to all requests within 30 days.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. We will update the "Last Updated" date at the top of this document. Continued use of the App after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act). For users in the EU/EEA or California, applicable regional regulations (GDPR, CCPA) take precedence where required by law.