1. Introduction

Welcome to Connections ("App"). We respect your privacy and are committed to protecting user data through transparent data practices. This Privacy Policy & Terms of Service ("Policy") explains what data is collected, how it is used, how cloud synchronization operates, and the strict limitations of liability governing your use of the App.

This App is developed and maintained by Malhotra Apps (Rahul Malhotra, "Developer", "We", "Us", "Our"). By installing, accessing, or using Connections, you agree to the collection and use of information in accordance with this Policy and agree to the Limitation of Liability set forth herein. If you do not agree with any part of this Policy, you must refrain from using the App.

2. Data We Collect & How We Use It

A. Personal & Contact Vault Data

Information You Provide: Contact names, phone numbers, email addresses, physical addresses, job titles, company names, social media profile handles, and custom @username handles.

Purpose: Used strictly to populate your personal contact vault, enable 1-swipe quick actions (Call, SMS, WhatsApp), display Caller ID overlays, and generate your optional public digital business card. When Cloud Sync is enabled, contacts are backed up to secure Google Cloud servers to allow cross-device sync, secure backup restoration, and automatic profile updates for connected contacts.

Storage: Contacts are saved locally on your device in an encrypted SQLite Room Database. If Cloud Sync is enabled by the user, data is backed up to Google Firebase Firestore servers. Cloud Sync is completely optional and user-controlled; users can disable sync and permanently purge their cloud data at any time using the in-app "Delete Cloud Data and Turn Off" option.

B. Authentication Information

Google Account Data: Display name, email address, profile picture URL, and unique Firebase User ID (uid).

Purpose: Used exclusively to authenticate your account, verify ownership of your custom @username, and manage Cloud Sync & Multi-device Backup.

C. On-Device Hardware & Permission Data

• Camera Access (CAMERA): Used exclusively on-device for the in-app QR code camera scanner. Camera frames are processed in-memory and are never recorded, stored, or transmitted to any server.
• Phone State, Call Log & Overlay (READ_PHONE_STATE, READ_CALL_LOG, SYSTEM_ALERT_WINDOW): Used strictly on-device to match incoming and outgoing call phone numbers against your private Connections contact vault and display a floating Caller ID card. Call logs, call history, and phone audio are processed 100% locally and are never recorded, stored, uploaded, or transmitted to any server.
• Device Storage (FileProvider): Used locally to generate temporary QR code PNG images for sharing via system share sheets. Zero storage permissions are required or requested on modern Android versions.

3. Field-Level Privacy Controls

You maintain total control over the visibility of every item in your profile card:

• 👥 App Connections: Shared in-app when connecting with another user via QR code scan.
• 🌐 Public Web: Rendered publicly on your live web digital business card (https://connections-7c986.web.app/u/$username).
• 🔒 Only Me: Stored strictly on your local device and private owner cloud account, completely hidden from web visitors and other app users.

4. Data Sharing & Third-Party Infrastructure

We do NOT sell, rent, trade, lease, or monetize user data with third-party advertisers, marketing agencies, data brokers, or commercial tracking networks.

Cloud Sync, user authentication, and web digital business cards are powered by Google Cloud Platform (Google Firebase). All data transmitted to Google Cloud is encrypted in transit using HTTPS/TLS 1.3 and encrypted at rest using industry-standard AES-256 encryption on Google's secure cloud infrastructure. Access to private contact vaults is strictly restricted to the authenticated account owner via Firestore Security Rules. Firebase operates as our service provider under strict enterprise-grade data processing and security standards.

5. IRONCLAD LIMITATION OF LIABILITY & DISCLAIMER OF WARRANTIES

A. "AS IS" and "AS AVAILABLE" Disclaimer

The App, its features, and all associated cloud services are provided strictly on an "AS IS" and "AS AVAILABLE" basis, with all faults and without warranties of any kind, whether express, implied, statutory, or otherwise. To the fullest extent permissible under applicable law, Malhotra Apps and the Developer explicitly disclaim all warranties, including but not limited to implied warranties of merchantability, fitness for a particular purpose, non-infringement, system integration, data accuracy, uptime, and uninterrupted availability.

B. Complete Release of Developer Liability

Under no circumstances and under no legal theory (whether in contract, tort, negligence, strict liability, indemnity, breach of statutory duty, or otherwise) shall Malhotra Apps, the Developer (Rahul Malhotra), their affiliates, agents, or licensors be held liable to you or any third party for any direct, indirect, incidental, consequential, special, punitive, exemplary, or reliance damages arising out of or related to:

1. Data Loss or Corruption: Any loss, corruption, deletion, or failure to backup or restore contacts, user profiles, or vault records.
2. Security Incidents & Breaches: Any unauthorized access, cyberattack, data breach, server intrusion, or unauthorized alteration of your data occurring on third-party cloud infrastructure (including Google Firebase) or on your local device.
3. Service Interruptions: Any cloud server outage, network downtime, API deprecation, or inability to access your profile or web digital card.
4. Third-Party Actions: Any actions, omissions, security vulnerabilities, or policy changes of third-party infrastructure providers (including Google LLC, Firebase, or Android OS).
5. Accuracy of Data: Any inaccurate Caller ID overlays, broken web links, or user-entered data errors.

C. Third-Party Cloud Infrastructure Disclaimer

All cloud storage, user authentication, and web card hosting are handled entirely by Google Firebase. Malhotra Apps and the Developer do not operate or own physical servers, databases, or cloud security perimeters and have no control over Google's cloud infrastructure. Malhotra Apps and the Developer disclaim all liability for any security events, data leaks, or server disruptions originating from Google Firebase or third-party service providers.

D. User Backup Responsibility

You acknowledge that you are solely responsible for maintaining local backups of your contact vault using the App's built-in JSON Export feature (Settings ➔ Export Backup (JSON)).

E. Absolute Monetary Liability Cap

To the maximum extent permitted by applicable law, in no event shall the total aggregate liability of Malhotra Apps, the Developer (Rahul Malhotra), or their affiliates, agents, and licensors arising out of or relating to the App, services, or this Policy, under any and all legal theories (whether in contract, tort, negligence, strict liability, warranty, or otherwise), exceed ₹1 (One Indian Rupee) or the total amount actually paid by you (if any) to use the App in the twelve (12) months preceding the claim, whichever is lower.

F. User Indemnification

You agree to defend, indemnify, and hold harmless Malhotra Apps, Rahul Malhotra, and their affiliates, officers, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt, and expenses (including but not limited to attorney's fees) arising from: (i) your access to or use of the App; (ii) your violation of any term of this Policy; (iii) your violation of any third-party right, including without limitation any privacy right, data protection right, or intellectual property right; or (iv) any claim that your contact submissions or user content caused damage to a third party.

6. User Rights, Data Deletion & Account Erasure

You have the right to inspect, export, or permanently erase your data at any time:

• Cloud Data Erasure: Toggling Cloud Sync OFF in Settings provides an immediate "Delete Cloud Data and Turn Off" option that automatically executes a batch deletion request to permanently purge all stored contact documents from Google Firebase Firestore.
• Local Data Erasure: Clearing the App's data in Android System Settings or uninstalling the App permanently wipes all local SQLite database records.
• Manual Erasure Request: You may request manual deletion of your cloud account and @username by emailing malhotra-apps-support@googlegroups.com.

7. Governing Law & Dispute Resolution Jurisdiction

This Privacy Policy, Terms of Service, and any disputes, controversies, or claims arising out of or relating to the App shall be governed by and construed in accordance with the substantive laws of India, without regard to its conflict of law principles. You expressly and irrevocably agree that the competent courts located in New Delhi, India shall have exclusive jurisdiction over any matter or dispute arising hereunder.

8. Grievance Redressal Officer (IT Rules, 2021 & DPDP Act, 2023)

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer and Data Fiduciary Representative for Connections are provided below:

• Name: Rahul Malhotra
• Designation: Grievance Officer & Data Protection Lead, Malhotra Apps
• Grievance & Support Email: malhotra-apps-support@googlegroups.com
• Statutory Timeline: Acknowledgments will be provided within 48 hours, and grievances will be resolved within 30 days from receipt.

9. Changes to This Privacy Policy

We reserve the right to update or modify this Policy at any time without prior notice. Any changes will be posted in this document with an updated Effective Date. Your continued use of the App following any modifications constitutes your acceptance of the revised Policy.

10. Contact Information