Privacy Policy - Bluetooth Device Controller

Summary: Bluetooth Device Controller does not collect your name, email, or precise location on our own servers. The app works offline over Bluetooth to your Arduino/HC-05/HC-06/HC-08 module. To show ads, Meta Audience Network (Facebook Monetization) automatically collects and shares Device IDs (Advertising ID), IP address, device model and ad performance data for advertising, analytics and fraud prevention. This is disclosed below and matches our Google Play Data Safety declaration.

This Privacy Policy describes how Bluetooth Device Controller ("we", "us", "our", "Application") handles information when you use our Android app Bluetooth Device Controller (package com.smartboardjbr) provided by Jaibir Singh (Uttar Pradesh, India). By using the app, you agree to this policy.

Contact: suriyalbharti1@gmail.com

1. Overview — No Account, No Backend

The app has no backend server, no user accounts, no login, and no database hosted by us. Your button configurations are stored only on your device in a local database (AndroidDB.db). Bluetooth commands are sent directly from your phone to your hardware over Bluetooth Classic SPP or BLE UART — they do not go through our servers.

The only data that leaves your device to the internet is data collected automatically by Meta Audience Network (Facebook monetization) to display ads, as described in Section 3.

2. Data We Store Locally (Does NOT Leave Your Device)

Unless you use Export, this never leaves your phone:

Button settings you create: button name, device label, ON/OFF payloads, voice phrases, control type, fan speed commands
Last connected Bluetooth device name and MAC address (so the app can offer one-tap reconnect)
App preferences like Light/Dark theme choice

You can export these as a JSON file via Home menu → Export buttons to file and share it yourself via the system file picker. That file is created only when you explicitly choose to export. You can delete local data anytime via Android Settings → Apps → Bluetooth Device Controller → Clear data or by uninstalling the app.

3. Data Collected and Shared Automatically via Meta Audience Network (Facebook Monetization)

Our app displays ads using Meta Audience Network SDK (Facebook Audience Network), provided by Meta Platforms, Inc. As documented in Meta's Data Disclosure for Facebook & Audience Network SDKs, the SDK automatically receives and processes the following data even if you never tap an ad. All data is encrypted in transit:

Data type (Google Play category)	What is collected by Meta SDK	Purpose
Device or other IDs Device or other IDs	Device identifiers including Android Advertising ID (GAID / Advertising ID), Android ID, and App identifiers. You can reset or delete your Advertising ID in Android Settings → Privacy → Ads. Also includes Family Device IDs where applicable.	Advertising or marketing, Analytics, Fraud prevention, security and compliance
Device attributes + IP / Network info	Device model, screen dimensions, operating system version, CPU cores, storage size, SDK version, app package name, app version, mediation platform and networking information such as IP address, mobile operator/ISP name, language and time zone. IP may be used to infer approximate location (city-level, not precise GPS).	Advertising, Analytics, Fraud prevention
App activity → App interactions & Ad performance	Ad impressions, clicks, placement, viewability, app launches and interactions with ads.	Advertising, Analytics, Fraud prevention
App info and performance → Diagnostics	Performance related to ad rendering and SDK diagnostics.	Advertising, Analytics, Fraud prevention

Why this is in our Data Safety declaration: In Play Console → App content → Data Safety, we declare Device or other IDs = Collected & Shared, Not processed ephemerally, Required for advertising, purposes = Advertising or marketing, Analytics, Fraud prevention. This matches Meta's guidance above and Google's requirement to disclose all SDK data. Data is encrypted in transit and you can request deletion (see Section 7). Meta may also automatically log app installs / app launches if Facebook Analytics/App Events are enabled — we do not send custom events with personal data.

Third-party recipient: Meta Platforms, Inc. (Facebook) and its ad partners that serve Audience Network ads. See Meta Privacy Policy and Meta Data Policy.

How to limit it: Android lets you control the Advertising ID: Settings → Privacy → Ads → Delete advertising ID (opt-out) or Reset advertising ID. You can also limit ad tracking in your device settings and adjust Facebook Ad Preferences. The app will still work without personalized ads. You can also block Ad ID transmission via com.google.android.gms.permission.AD_ID removal in Manifest, but our current production build does NOT block it because Audience Network requires it for ad delivery.

4. Bluetooth Permissions & Location — Clarification

Important: We do not collect, store or transmit your precise or approximate geographic location for our own purposes.

The app controls hardware over Bluetooth. On Android 12+ (API 31+) it requests BLUETOOTH_SCAN with neverForLocation and BLUETOOTH_CONNECT. Scan results are not used to derive location.
On Android 6 to 11, Android required ACCESS_FINE_LOCATION to discover Bluetooth devices. The permission was technically required by the OS, but the app did not collect or transmit location data to our servers.
Meta SDK may receive IP address/coarse location inference for ads as described in Section 3 — that is ad-network processing, not our own location tracking. Bluetooth device names and MAC addresses you pair are handled locally and are not sent to our servers.

Therefore, in our Data Safety form, Location is NOT declared as collected by us for app functionality — only the ad-network's IP-based approximate inference as part of Device ID/ads.

5. Personal Data We Do NOT Collect on Our Servers

We do not ask for or collect on our servers:

Name, email address, phone number, physical address (unless you email us for support)
Financial or payment information
Contacts, calendar, photos, files, or messages
Precise GPS location
Health, fitness or other sensitive data
Facebook Login profile data — we do not use Facebook Login in this app (if added later, we would update this policy)

If you email us at suriyalbharti1@gmail.com, we only use your email to reply. We do not sell your contact information.

6. How We Use Information

To provide core functionality: discover, pair and send commands to your Bluetooth serial module (HC-05 / HC-06 / HC-08 etc.)
To remember your buttons and last connected device locally so you can reconnect quickly
To display ads via Meta Audience Network which funds development — using the data in Section 3
To respond to your support requests sent by email

7. Data Sharing, Encryption & Retention

Sharing

We do not sell personal data. The only sharing is the automatic sharing with Meta Platforms, Inc. for Audience Network ads as listed in Section 3, plus ad delivery partners Meta uses. No other third-party SDK that collects data is integrated for analytics (e.g., we do not use Firebase Analytics unless you add it separately).

Encryption in transit

Encrypted in transit: YES All Audience Network data is encrypted with TLS/HTTPS. Local Bluetooth commands are sent over local radio, not over the internet.

Retention & Deletion

Local button data stays on your device until you delete it. Ad data retention is governed by Meta's retention policies. For deletion requests:

Local data: Clear via the app's delete button, via Android Settings → Apps → Clear data, or uninstall. Instant.
Advertising data held by Meta: Email us at suriyalbharti1@gmail.com with subject "Data Deletion Request". We will confirm and forward your request to Meta via Meta's data deletion request channel and guide you to reset/delete your Advertising ID in Android Settings. You can also directly reset/delete your Advertising ID without contacting us. We respond within 30 days and delete email correspondence after resolution unless legally required to retain.

Because we provide this mechanism, our Data Safety form declares "You provide a way for users to request that data is deleted: Yes".

8. Legal Bases (for EEA/UK users, GDPR)

Legitimate interest for core Bluetooth functionality and local storage
Consent for personalized advertising where required in EEA/UK. If you decline, Meta may show non-personalized ads. Manage via device Ad settings and Facebook Ad Preferences.

9. Children's Privacy

Our app is not directed to children under 13, and we do not knowingly collect personal data from children. For Mixed Audience compliance, we do not knowingly show personalized Audience Network ads to children. If you believe a child provided data, contact us and we will assist with deletion via Meta's tools. You can enable MixedAudience / Limited Data Use flags in Meta SDK if you target children.

10. Security

Local data is protected by Android app sandboxing. Ad network data is protected by TLS. We do not store personal data on internet-facing servers we control.

11. Your Rights & Choices

Access/Delete local data: Open app → Buttons-Setup → delete buttons; or Clear data / uninstall.
Delete/Reset Advertising ID: Android Settings → Privacy → Ads → Delete or Reset ID. App remains functional.
Meta Ad Preferences: facebook.com/adpreferences and Manage how Meta uses data for ads
Opt out of Meta off-Facebook activity for ads: Activity from ad partners
Request deletion via email: suriyalbharti1@gmail.com
Export your data: Home menu → Export buttons to file → JSON copy.

12. Third-Party Links & Services

The app contains ads provided by Meta. Tapping an ad may open a third-party website. We have no control over those sites; review their policies.

Meta Privacy Policy: https://www.facebook.com/privacy/policy
Meta Data Disclosure for SDKs (source for Section 3): Meta Audience Network Data Practices
Google Play Data Safety Help: https://support.google.com/googleplay/android-developer/answer/10787469

13. Data Safety Declaration (Google Play) — What You See in Store

To satisfy Google Play's Data Safety requirements, we accurately declare (visible under "Data safety" on our listing):

Does app collect or share data? YES
Data encrypted in transit? YES
User can request deletion? YES (via email above + Advertising ID controls)
Category: Device or other IDs → Collected: YES — Shared: YES (with Meta Audience Network)
Ephemeral? NO
Required? YES, required for ads
Purposes: Advertising or marketing, Analytics, Fraud prevention

This fixes the Version code 30: Device Or Other IDs — Invalid Data safety form notice. Deadline: September 20, 2026.

14. Facebook SDK Permissions Note

If our build includes Meta SDK, Android will show permission com.google.android.gms.permission.AD_ID (Advertising ID). We do not request ACCESS_FINE_LOCATION for ads — location permission is only for Bluetooth discovery on older Android, as explained in Section 4. No Facebook Login permission is requested by this app.

15. Changes to This Policy

We may update this policy when the app or Meta SDK changes. We will post the new version here and update the "Last updated" date. You are advised to review periodically. Changes are effective when posted.

Previous version: April 19, 2025 (generic template that omitted ad network disclosure). This version: September 19, 2026 — rewritten to accurately disclose Meta Audience Network (Facebook Monetization) Device ID collection and fix the Google Play Invalid Data Safety form for version 30.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise deletion rights:

Bluetooth Device Controller
Email: suriyalbharti1@gmail.com
Country: Uttar Pradesh, India
App: Bluetooth Device Controller (com.smartboardjbr)
SDK: Meta Audience Network (Facebook Monetization)

Generated for Bluetooth Device Controller to resolve Google Play Data Safety — Device Or Other IDs violation (Version 30, Deadline: September 20, 2026). Host at a public HTTPS URL and paste that URL in Play Console → App content → Privacy policy. Must match Data Safety form exactly. Based on Meta's official disclosure.