Privacy Policy

Data we collect

Your files, cases, findings, and reports are processed on your device and are never uploaded. The app has no user accounts and no first-party analytics.

Advertising (Google AdMob)

The app shows ads via Google AdMob. Google's Mobile Ads SDK may collect and process your device's advertising identifier and related technical data to serve personalized or non-personalized ads based on your consent. In the EEA/UK and similar regions a consent form (Google UMP) is shown before ads load. This data is handled by Google under the Google Privacy Policy. We do not receive or store it, and your evidence/case content is never used for advertising.

Network & location (Live Triage module only)

Every file-analysis feature works fully offline. One clearly-labeled module, Live Triage · net, uses the network and location only on your explicit action, to:

• read your device's active WiFi connection details, and
• actively probe (ping) hosts on the local subnet your device is connected to, to list devices on your own network.

This requires the INTERNET and ACCESS_FINE_LOCATION permissions (Android requires location to expose WiFi details and to scan). Scan results are shown on screen only and are never uploaded. No traffic of other devices is captured. If you do not use the Live Triage module, the app makes no network use for analysis at all.

How your files are handled

• Files you select are opened through Android's Storage Access Framework using read-only handles. The app never modifies your source files.
• Analysis (hashing, type identification, metadata, strings, entropy, CDR/IPDR, SQL, PCAP) happens entirely on the device.
• Case data, evidence findings, audit logs, and generated reports are stored in the app's private storage, excluded from cloud backup by default, and removed when you uninstall the app.

Sharing

The app shares a generated report only when you explicitly use the share/open action, and only with the app you choose. Nothing is shared automatically.

Permissions

• File analysis uses the Storage Access Framework, which needs no permission.
• The Live Triage module declares INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE, ACCESS_FINE_LOCATION, and (Android 13+) NEARBY_WIFI_DEVICES. Location is requested at runtime, only when you open that module.

Contact

For questions about this policy, contact Byte Breach Investigations at www.bytebreachinvestigations.com, by email at karthickntm003@gmail.com, or through the Play Store listing.