# EonaCat Airwave for Android Privacy Policy ## Who is responsible **[EonaCat]** ("we", "us", or "our") is responsible for this app's privacy practices. Contact us at **[EonaCat@gmail.com]** with privacy questions or requests. ## Information the app processes EonaCat Airwave is a communications and media player app. It does not require you to create an account with the app publisher. The app does not include publisher-operated advertising or analytics in the reviewed Android app code. Depending on the features you use, the app processes: - **Settings and connection details:** Radio and SIP account settings, PBX settings, internet radio station names and stream URLs, directory preferences, and app preferences. These are stored in the app's private on-device files. Passwords are protected using AES-GCM with an Android Keystore key when a usable Keystore is available; if it is unavailable, the app's current implementation may store secrets without that protection. Android device backup is enabled for the app, so app data may also be included in device backups according to your Android backup settings and device/provider behavior. - **Voice audio:** If you grant microphone permission and use a voice feature, the app captures microphone audio for the active SIP call or radio transmission and sends it to the service or endpoint you are connected to. The app does not intentionally save microphone recordings as files. Audio received from those services is played on your device. - **Call and radio connection data:** When you connect, the app exchanges the signaling and network data needed by the selected service. Depending on the protocol and configuration, this can include account identifiers, caller/callee identifiers, dialed numbers, connection status, and audio. SIP trace messages may be displayed in the app while it is running; they are held in memory and may contain connection details. You can clear or copy the displayed trace. - **Network discovery data:** When you open Discovery or start a scan, the app checks active IPv4 networks and sends SIP discovery probes to devices on those networks. You may also enter a network range to scan. Results and any entered scan range are used locally by the app; they are not sent to the app publisher. - **Internet radio directory and station data:** The app contacts the Radio Browser service to retrieve station listings, including when you select a country or refresh the directory. When station artwork is shown or a stream is played, the app contacts the artwork host or stream host associated with that station. The relevant service may receive your IP address and ordinary request/network metadata. ## Where information is sent The app does not send the above information to a server operated by the app publisher as part of the reviewed app functionality. Network communication is instead made to services needed for features you choose to use: - SIP accounts, ED-137 radio gateways, and PBX servers configured or selected by you; - Internet radio streams and artwork hosts associated with a station; and - Radio Browser for internet radio directory listings. Those services and their operators determine how they process information they receive. Their privacy policies and security practices apply to their services. A network scan also sends probes to devices on the selected local network. ## Permissions and device features - **Microphone (`RECORD_AUDIO`):** Used to capture audio for voice communication or radio transmission. Android asks for permission, and you can deny or revoke it in Android Settings. Voice transmission will not work without the required permission. - **Internet and network state:** Used for radio, SIP, PBX, directory, stream, and discovery network functions. - **Notifications and foreground service:** Used to show the ongoing status of active background audio or calls. Notification permission may be requested on supported Android versions; denying it does not itself grant the app additional access to your data. - **Audio settings and wake lock:** Used to route or maintain audio during an active session. ## Security The app uses Android Keystore-backed encryption for stored secrets when the device provides a usable Keystore. This protection is not available in all circumstances, and the current app may fall back to storing secrets without encryption if Keystore setup fails. Network security depends on the protocol and server configuration. The app permits cleartext network traffic, and some services or user-supplied URLs may not encrypt traffic. Do not assume that credentials, signaling, or audio are encrypted in transit; use trusted endpoints and secure transport settings where supported. ## Retention and deletion App settings remain in the app's private storage until you remove them, clear the app's storage, or uninstall the app. Android or a backup provider may retain a backup according to your device and account settings; uninstalling the app may not remove such backups. Information sent to radio, SIP, PBX, directory, stream, or artwork services is subject to those operators' retention practices. You can remove saved entries using the app's controls where available, or clear the app's storage/uninstall it through Android Settings. This does not delete information already received or retained by external services. ## Children's privacy The app is not designed to collect personal information from children through an app-publisher account or backend. If you believe a child has provided personal information directly to the publisher, contact us using the details above. ## Changes to this policy We may update this policy when the app or its data practices change. The effective date at the top indicates when this version was last updated. Material changes should be reflected in the policy made available with the app. ## Contact For questions or privacy requests, contact **[EonaCat@gmail.com]**.