PortDroid Privacy Policy

The mobile application PortDroid and the website dev.mogrovas.com are developed and operated by Peter Magno, an individual residing in the Republic of Colombia (hereinafter, the 'Developer' or 'Mogrovas Dev'). For all data protection and privacy inquiries, our exclusive communication channel is: [email protected].

PortDroid is architected under the principle of privacy by design. The Developer does NOT own, rent, or operate backend servers, relay proxy servers, cloud user databases, or account management systems for PortDroid. All communications to Portainer instances and SSH hosts occur strictly point-to-point (peer-to-host) from the user's mobile device to the server infrastructure configured by the user.

The application collects and retains solely the operational data necessary to perform its functions: - Infrastructure credentials: IP addresses, hostnames, port numbers, usernames, passwords, private SSH keys (PEM/PKCS8 formats), and Portainer API access tokens. - Application settings: Language choices, theme preferences, biometric lock flags, and local AI parameters. - Assistant chat history: Kept locally inside the application database. SECURITY SAFEGUARDS: All stored configuration data is encrypted with SQLCipher (AES-256 algorithm) and EncryptedSharedPreferences, governed by master cryptographic keys held within the Android Keystore system. Android automated OS cloud backup is explicitly disabled (android:allowBackup='false') to prevent unintended exposure through third-party backups.

PortDroid never sells or transfers personal data to third parties for commercial or tracking purposes. External services are engaged solely upon express, voluntary user request: - a) Google Drive Backup: If the user activates Cloud Sync, the database is encrypted on the device with a user-selected passphrase and uploaded directly to the Google Drive API, residing strictly in the private, hidden 'appDataFolder' (OAuth scope 'drive.appdata'). The Developer has zero access to this folder or its data. - b) Cloud AI Assistant (Google Gemini): If the user configures cloud AI and provides their own Gemini API key (BYOK), prompt queries and selected log lines are sent directly to Google servers (generativelanguage.googleapis.com). PortDroid includes a 'Privacy Gatekeeper' that automatically detects and masks private IP addresses and domain names before dispatch. - c) Local On-Device AI (LiteRT-LM / Hugging Face): If offline AI is selected, model weights may be downloaded from Hugging Face (huggingface.co) under strict permissive license filters. Inference executes 100% locally on the device chip without transmitting prompt data over the network. - d) Integrity Verification (Google Play Integrity): An anonymous cryptographic token is exchanged with Google Play to verify app authenticity and prevent tampering. - e) In-App Purchases (Google Play Billing): Pro purchases and subscriptions are handled entirely by Google Play. The Developer never receives credit card numbers or financial payment details.

- INTERNET: Required to establish direct socket connections to Portainer instances and SSH hosts. - ACCESS_NETWORK_STATE: Required to check network connectivity status prior to initiating operations. - FOREGROUND_SERVICE & FOREGROUND_SERVICE_DATA_SYNC: Required to keep local AI model downloads or backup sync running smoothly without OS termination. - POST_NOTIFICATIONS: Required to deliver progress notifications and connectivity status alerts.

PortDroid contains NO analytics SDKs (such as Firebase Analytics, Google Analytics, or Mixpanel), behavioral tracking frameworks, or advertising networks. Application usage is strictly private.

In compliance with Colombian personal data protection legislation, data owners possess the right to: know, update, rectify, and delete their personal data, and revoke granted consents. The regulatory supervisory authority is the Superintendence of Industry and Commerce (SIC) - Superintendencia de Industria y Comercio (www.sic.gov.co).

For users in the European Union (GDPR) and California (CCPA): Because the application does not transmit personal data to Developer servers, no automated profiling or personal data sales occur ('Do Not Sell My Personal Information'). The legal basis for local processing is contract performance for user-requested functions.

PortDroid is an infrastructure management utility intended exclusively for IT professionals aged 18 and older. We do not knowingly collect information from minors.

To exercise legal rights or submit privacy-related inquiries, contact us via email at: [email protected].