Androp
Back to androp.site
Privacy policy for Androp
Androp is a file transfer app with four modes: Direct (WiFi Direct), Zone (local WiFi), Hub (cloud sharing with a code), and Drop (location-based sharing via cloud). Direct, Zone, and Hub live under the Share tab; Drop has its own tab with a map. You are anonymous by default. This policy explains what data is processed, why, and your choices.
1. Data controller
Androp is published by Madebydavid (contact: support@androp.site). For privacy inquiries, contact us at support@androp.site or via the email listed on Google Play.
2. Principles
- We do not sell personal data.
- We only collect what is needed for the features you use.
- Files and location are sent only when you actively choose to send, share, or create a drop.
3. Direct (WiFi Direct)
Phones connect directly without our servers. Files travel between devices over WiFi Direct. Androp does not store these files in the cloud. We do not use Bluetooth, only WiFi Direct and related permissions.
4. Zone (local WiFi)
When you start Zone, your phone acts as a file server for others on the same WiFi. Traffic uses unencrypted TCP on the local network, not the public internet unless your network is configured otherwise.
- Others on the same WiFi could theoretically intercept traffic. Do not use Zone on public networks for sensitive files.
- The alias you choose in Settings is visible to others in the app.
- You can disable Zone connection notifications under Settings → Notifications.
5. Hub (cloud via Supabase)
When you create or join a hub, uploaded files are stored temporarily on Supabase servers in the EU. Hubs auto-delete after 24 hours. Hub creation requires Androp Pro; joining with a code is free.
6. Drop (cloud via Supabase)
Drop requires internet and uses Supabase (database and file storage in the EU). When you create a drop:
- Location (GPS), chosen radius, alias, and files are stored in the cloud.
- You sign in anonymously (anonymous user ID at Supabase). No email or phone required.
- Others can fetch files when physically within the radius you set.
- You can delete your own drops; related metadata and files are removed from the cloud.
- Without backup (Google account or recovery code), reinstalling or deleting the app may mean you lose access to drops and Drop progress.
- Drops that can no longer be tied to a user may be flagged and deleted after a grace period.
Supabase processes data as our processor. See Supabase privacy.
Map tiles: The Drop map uses OpenStreetMap data served via OpenFreeMap (MapLibre). Requests include your approximate map view area but no personal identifiers. See openfreemap.org and openstreetmap.org/copyright.
Safety and liability: Androp does not choose, verify, or supervise drop locations. You are solely responsible for your decisions when visiting or creating drops in the physical world.
- Do not visit or encourage others to visit dangerous places (e.g. railway tracks, cliff edges, construction sites, private property without permission, or areas where access is prohibited).
- Always follow local laws, signage, and property rights.
- Use common sense. Drop is file sharing, not an invitation to trespass or take unnecessary risks.
Androp disclaims liability for injury, loss, illegal conduct, or other harm related to physically seeking out drop locations.
7. Optional account and restore
You do not need an account for Direct and Zone. To keep drops and progress on a new phone you can optionally:
- Google Sign-In: Your email is stored with your anonymous user ID so drops can be restored.
- Recovery code: A one-time code you store safely. We store a hash only. We cannot show it again. You remain anonymous to other users.
Your Google name and email are not shared with other users; only your alias is shown in the app.
8. Drop score and gamification
If you use Drop, points, level, streak, and weekly challenge data may be stored in the cloud (user_gamification) linked to your anonymous user ID. This is used only for in-app features and is not shared with other users as a profile.
9. Androp Pro
Google Play Billing: Paid Pro subscriptions are purchased via Google Play. Purchase tokens are processed by Google. See Google's privacy policy at policies.google.com/privacy.
Promo code: A 14-day free Pro trial can be activated with code DROPIT when purchasing the monthly subscription in Google Play. Google Play terms apply.
10. Drop alerts (optional)
Under Settings → Notifications you can enable Drop alerts. The app then periodically checks whether you are within about 1 km of a drop and may send an optional notification. This requires:
- Drop to be enabled in the app.
- Location all the time (background GPS) and notification permission.
- A discreet foreground service while the feature is on.
Location is used only to find nearby drops. It is not shared with other users as live location sharing. Turn off Drop alerts at any time to stop background GPS.
11. Device permissions
- Location (foreground): WiFi Direct discovery, Drop map, and geo-unlock.
- Location (background): only when Drop alerts are enabled.
- Files / media: only files you choose to send or share.
- WiFi / network: WiFi Direct, local network (Zone), and internet (Hub and Drop).
- Notifications: optional: file received, Zone connection, and nearby Drop.
12. On-device storage
Received files may be saved to Downloads/Androp. Alias, language, theme, and notification preferences are stored locally on your phone.
Your app preferences may be included in Android device backups (if enabled by you). Files received via Androp are saved to Downloads/Androp and are not backed up by Androp.
13. Retention
Drop data and cloud files are kept until you delete the drop. Hubs are deleted after 24 hours. Drops without a valid owner may be removed after a grace period. Local app data is removed when you uninstall.
14. Your rights (GDPR)
You may request access, correction, or deletion of drop data you control by deleting drops in the app or contacting us. Anonymous Supabase IDs cannot be linked to you without additional information you shared yourself. You may lodge a complaint with your data protection authority.
Data portability: You can request a copy of personal data we hold about you in a machine-readable format by contacting support@androp.site.
15. Local storage and cookies
Local storage: Androp stores app preferences (theme, language, alias, drop settings) locally on your device using Android SharedPreferences. No cookies are used. The marketing website (androp.site) may use browser localStorage for language preferences only.
16. Children
Androp is not directed at children under 13. We do not knowingly collect data from children.
17. Changes
We may update this policy. Material changes will be reflected in the app and on the published web version.