Privacy Policy
Effective & Last Updated: November 10, 2026 • Version 1.0 (Effective Nov 10, 2026) • Applies to Presenter for Android & Official Website
Plain-English Privacy Summary
Presenter is an offline-first Android utility built so you can show someone specific photos, videos, audio files, or PDF documents on your phone without worrying they will swipe into private chats, browse unapproved albums, or see incoming OTP codes and personal notifications.
Your personal media is never uploaded to any Presenter servers. Every file you import stays strictly inside your phone's private, sandboxed local storage. Standard Google Play ecosystem SDKs—Google Play Billing for optional subscriptions, Google AdMob for Free Tier ads, and Google Firebase Crashlytics for crash stability—operate solely within their documented platform roles described below.
1. Your Media & Files (100% On-Device Local Sandbox)
When you select photos, videos, audio, or PDF documents to present or organize into a Presenter collection:
- Selected files are copied locally into Presenter's private, OS-sandboxed application directory (filesDir) on your Android device.
- Presenter does not operate any cloud storage, remote media databases, or file synchronization servers.
- We never view, scan, index for AI training, transmit, or monetize your personal photos, videos, or documents.
- Android's Linux user-ID sandbox prevents other third-party apps from browsing files stored inside your Presenter collections.
When you move a collection to the Recycle Bin, it is held locally for 7 days before automatic permanent purge (or you can tap "Empty Recycle Bin" to wipe it immediately). On the Free Tier, collections carry a 7-day retention period. Because Presenter maintains zero cloud backups, all purged or deleted files are irreversibly lost. Always keep original copies in your phone's primary gallery or cloud backup service (e.g., Google Photos).
2. OTP & Notification Visual Suppression (Zero Message Reading)
During an active locked presentation, Presenter hides Android's system status bar and suppresses visual heads-up notification popups using standard Android windowing and hardware screen-pinning APIs (WindowInsetsControllerCompat and Activity.startLockTask()).
Presenter never requests SMS permissions (READ_SMS / RECEIVE_SMS), never reads notification text content, and never intercepts, logs, or transmits your OTP codes, banking verifications, or personal messages.
3. Device Permissions We Use & Why
Invoked strictly via Android's official BiometricPrompt API to verify the device owner when unlocking the app or exiting a locked presentation. Presenter never receives, accesses, or stores raw biometric images or cryptographic templates—authentication occurs entirely inside your device's secure hardware enclave (TEE/StrongBox). Your fallback Master PIN is hashed and stored exclusively on-device using hardware-backed AES-256 encrypted preferences.
When you pick items using the Android Photo Picker, system document picker, or Android Share Sheet ("Quick Present"), Android grants Presenter scoped, user-initiated access strictly to the specific URIs you selected—without broad background scanning of your entire storage.
Network access is used exclusively for: (a) verifying subscription purchases and restores with Google Play Billing; (b) loading advertisements and optional user-initiated rewarded ad slots via Google AdMob on the Free Tier; and (c) sending anonymized crash stack traces via Firebase Crashlytics. Network permissions are never used to upload or transmit your personal photos, videos, audio, or PDF documents.
Presenter never requests camera permissions (android.permission.CAMERA). Security Incident Audit Logs record purely text-based timestamps of unpin or tamper attempts in a local database—never capturing unauthorized intruder photos or videos.
4. Purchases & In-App Subscriptions
Presenter offers optional subscriptions (Presenter Pro Monthly at $1.99/month or Annual at $14.99/year, subject to regional currency conversion by Google Play) to unlock unlimited items, all media formats, incident audit logs, and a 100% ad-free experience.
- All payment processing, renewals, and cancellations are managed directly by Google Play Billing.
- Presenter never collects, views, or stores your credit card number, bank details, or billing address.
- Purchase tokens are verified locally using RSA-256 signature verification and cached in encrypted device preferences so Pro features remain reliable even when offline.
5. Advertising & Rewarded Ads (Free Tier Only)
To keep Presenter Free available at $0 forever, the Free Tier uses Google AdMob to display banner, interstitial, and optional user-initiated rewarded ads (such as watching a short video ad to unlock +2 bonus images or video/PDF slots). Google AdMob may process your Android Advertising ID, coarse IP-derived location, and ad interaction diagnostics in accordance with Google's Privacy Policy.
You can reset or delete your Android Advertising ID or opt out of personalized ads anytime in your phone's system settings (Settings → Google → Ads). Presenter Pro subscribers receive zero advertisements, and ad requests are suppressed entirely while Pro is active.
6. Crash Reporting & Diagnostics
To maintain reliability across diverse Android OEM devices, Presenter uses Google Firebase Crashlytics. If an unexpected crash occurs, non-personal diagnostic telemetry (device model, Android OS version, memory state, and code stack trace) is transmitted to help us resolve issues quickly.
Diagnostic logs never include your photos, file names, Master PIN, or vault contents. Our website is hosted on Vercel and serves static pages without invasive third-party behavioral tracking cookies.
7. Local Security Incident Audit Logs (Strictly Text-Only)
When Security Incident Logging is enabled in Presenter Pro, repeated unauthorized attempts to unpin the screen or pull down notifications are recorded with a timestamp in a local SQLite database on your device.
These audit records are strictly text-only event descriptions (such as "Unpin attempt detected"). They do not capture photos, do not record audio, remain 100% on your device, can be wiped with a single tap inside Settings, and are never transmitted to any external server.
8. Data Deletion, Verifiable Consent Record & Policy Updates
- Complete Local Control: You can delete individual items, empty the Recycle Bin, clear app storage in Android Settings, or uninstall Presenter at any time to permanently erase all local collections, incident logs, and encrypted preferences from your phone. Please review our Terms of Service regarding your responsibility to keep external backups of important media.
- Verifiable Electronic Consent Record: When you accept our Terms of Service on first launch, a cryptographic hash receipt (
TOS-XXXXXX) is created and stored locally in encrypted device preferences (presenter_legal_consent_vault). This record is maintained entirely on-device to demonstrate proof of informed consent under Google Play Developer policies without transmitting your identity off-device. - Children's Privacy: Presenter is a general-audience utility and does not knowingly collect personal information from children under 13 (or the applicable minimum age in your jurisdiction).
- Updates to This Policy: If we make material updates to this Privacy Policy, we will revise the "Effective & Last Updated" date at the top of this page.
9. Contact Us
Questions or privacy inquiries? Reach our developer team directly at:
support@presenter-app.com