Privacy Policy & Data Safety

1. Overview & Core Privacy Principles

Welcome to AirBox. We provide secure cloud storage, media streaming, and protected file sharing services. Protecting your privacy and personal data is our foundational commitment. We do not sell, rent, lease, or trade your personal information or uploaded files to third parties or advertisers under any circumstances.

Google Play Data Safety Summary

• Data Encrypted in Transit: All network communication and file transfers are encrypted using industry-standard TLS 1.3 and HTTPS cryptographic protocols.
• Data Encrypted at Rest: All stored files, database records, and account credentials are protected using AES-256 standard encryption algorithms on secure infrastructure.
• Zero Third-Party Data Sale: We never monetize, lease, or share your personal data, contact details, or uploaded media with third-party advertisers or data brokers.
• In-App Account & Data Deletion: Users have the full ability to permanently delete their account and wipe all stored cloud files directly inside the application.
• Scoped Storage Compliance: The application only accesses the specific files and folders you explicitly select via the system file picker for upload or download.

1.1 Private Files Commitment

We do not read, scan, index, inspect, or train artificial intelligence or machine learning models on your private photos, videos, or documents. Your files remain exclusively yours and are accessible only when authenticated into your authorized account.

1.2 No Cross-App or Covert Tracking

We do not track your activity across other applications or websites. We collect only what is strictly necessary to deliver cloud storage, secure file transfers, and account management services.

1.3 Child and Minor Protection

AirBox is designed for general audience use. We do not knowingly collect personal data from individuals under 18 years of age without verified parental or legal guardian consent.

2. Information Collected & Purpose of Use

We collect personal data only when you interact directly with specific features of the AirBox application:

2.1 Account Creation & Authentication

Purpose: To create your cloud storage drive and verify your identity securely.

• Email Address or Mobile Number: Used exclusively for authentication, OTP verification codes, password resets, and critical account security notices.
• Display Name and Avatar: Displayed in your personal profile center.
• Encrypted Credentials: Stored using salted SHA-256 cryptographic hashing. We never store or view raw plaintext passwords.
• Session Authentication Tokens: Stored securely on your device to keep your authorized session active.

2.2 Cloud Files & Stored Media

Purpose: To securely store, synchronize, stream, and manage your files.

• Uploaded Files: Photos, videos, documents, audio files, and archives that you explicitly select for cloud backup.
• File Metadata: File names, sizes in bytes, upload timestamps, MIME types, and SHA-256 checksums to verify integrity and resume interrupted uploads.
• Custom Directory Structure: Folder organization created by you to organize your storage space.

2.3 Shared Links & Content Sharing (Optional)

Purpose: To generate secure shared file links and maintain link activity records.

• Shared Link Identifiers: Generated when you create shareable access links for your chosen files.
• Transfer Analytics: Aggregated view and download statistics to monitor bandwidth usage and link activity.
• Notification Preferences: User-defined settings for system alerts and file transfer notifications.

2.4 Technical Telemetry & Diagnostics

Purpose: To resolve crashes, maintain stability, and prevent unauthorized access.

• Upload Chunk State: Temporary chunk index to resume large file uploads seamlessly if network drops.
• Crash Diagnostics: Device hardware model, OS version, and crash stack traces to fix application errors.
• Security Access Logs: Temporary IP access logs retained to protect against automated brute-force attacks and abuse.

3. Device Permissions & Cloud Security Architecture

AirBox requests only permissions strictly necessary to perform file transfers and storage management:

• Photos / Media / Storage Access: Requested only when you initiate file uploads to select media, or when you download cloud files to your device gallery. We do not inspect or access unselected storage directories.
• Internet & Network State Access: Required to transmit encrypted file data to secure cloud storage infrastructure and check connection availability.
• Foreground Transfer Service & Notifications: Allows large background uploads and downloads to finish smoothly when you switch applications, while displaying a real-time progress notification.

Cloud Security Standards

• 3.1 TLS 1.3 Transport Encryption: Every file upload, download, and API request is encrypted via TLS 1.3 protocols. Network eavesdropping and interception are strictly prevented.
• 3.2 AES-256 Storage at Rest: All user files stored across our cloud servers are protected with AES-256 bit encryption keys with strict access control isolation.
• 3.3 30-Day Recycle Bin Auto-Purge: Deleted files are retained in your Recycle Bin for 30 calendar days to allow accidental deletion recovery. After 30 days, files are permanently wiped and unrecoverable.

4. Data Rights, Account Deletion & Grievance Contacts

Under applicable data protection laws and industry standards, you have full ownership and rights over your personal data:

• 4.1 Right to Access: View all your stored files, storage usage breakdown, and account profile anytime in the Personal Center.
• 4.2 Right to Rectification: Update or edit your display name, email address, password, or security credentials directly inside the app.
• 4.3 Right to Portability: Download and export all your stored photos, videos, and documents to any local storage device or external drive.
• 4.4 Right to Complete Erasure: Permanently delete your entire account, all cloud files, and associated metadata from our servers at any time.

How to Delete Your Account & Cloud Data (In-App Step-by-Step)

You can permanently delete your account and all stored files directly inside the application at any time:

1. Open the Personal Center (Profile) tab in the bottom navigation bar.
2. Scroll to the bottom and select "Delete Account & Cloud Data".
3. Type the confirmation word "DELETE" and tap "Delete Permanently".

Result: All cloud files, storage objects, personal profile data, and session credentials will be permanently erased immediately from our production infrastructure.