This Privacy Policy explains in clear, transparent language how RBD Browser ("we," "our," or "the Application") handles user data, permissions, on-device encryption, network communications, and system foreground services. We are dedicated to privacy-by-design, data minimization, and user control.

1. Data Stored Strictly on Your Local Device

All data generated during your browsing sessions is retained locally in your device's private sandboxed app storage and hardware-encrypted containers:

• Browsing History: Page titles, visited URLs, and timestamps are saved in a local SQLite/Room database to power your forward/back navigation and history screen. Secret / Private Mode tabs strictly bypass history recording and leave zero traces.
• Download Records: File metadata, source URLs, download destination paths, and download chunk states are kept locally in private application records.
• Hardware-Encrypted Credential Vault: Usernames and passwords saved in the built-in password vault are encrypted using 256-bit AES-GCM via the Android KeyStore Hardware Security Module (HSM). Master access is guarded on-device by Android BiometricPrompt. Plaintext credentials are never transmitted over the network.
• User Preferences: Theme settings, search engine selections, page zoom levels, and content-shield filters are stored locally in Android SharedPreferences.

2. Data We NEVER Collect or Transmit to External Servers

3. Transparency on Android Permissions & Foreground Services

RBD Browser requests only the minimal system permissions necessary to deliver standard web browser and media functionality:

A. Media Playback Foreground Service (FOREGROUND_SERVICE_MEDIA_PLAYBACK)

• Purpose: Allows user-initiated continuous audio and video playback when switching tabs, turning off the screen, or locking the device.
• User Control: A persistent, standard system notification with active media playback controls (Play, Pause, Previous, Next, and Close) is displayed whenever media is playing. Users maintain 100% control to pause or dismiss playback at any moment.

B. Data Sync Foreground Service (FOREGROUND_SERVICE_DATA_SYNC)

• Purpose: Allows multi-part, resumeable file downloads initiated explicitly by the user to complete without abrupt termination by the operating system when the application is minimized.
• User Control: An ongoing notification displays live download progress percentage, transfer speed, and allows immediate pause/cancel.

C. Other Essential Permissions

• INTERNET & ACCESS_NETWORK_STATE: Required to establish network connections, retrieve web pages, and download requested files.
• POST_NOTIFICATIONS (Android 13+): Used exclusively to show real-time download progress and lock-screen media player controls.
• USE_BIOMETRIC: Facilitates local on-device authentication for the encrypted credential vault. Biometric measurements remain strictly inside the device hardware enclave.
• VIBRATE: Provides gentle haptic feedback during interactive controls.

RBD Browser does NOT request or access Location (GPS), Contacts, SMS, Microphone, or Camera.

4. Third-Party Integrations & On-Device Technologies

• Direct Web Navigation: When visiting websites, the Application communicates directly with the respective web servers via Android System Chromium WebView. Those third-party servers receive standard HTTP headers and network connection parameters necessary to deliver web content.
• Google News RSS Feed: The home screen news feed reads public RSS headlines directly from Google News (https://news.google.com/rss/) without transmitting personal user identifiers.
• On-Device AI OCR Utility: Image and text recognition utilities use Google ML Kit (play-services-mlkit-text-recognition). All processing executes 100% locally on your device CPU/NPU; zero images or text tokens are transmitted to cloud servers.
• Screen Casting / Wireless Display: Screen casting routes video streams to local wireless displays and Smart TVs using standard Android system casting intents over your local network. No external media relays are utilized.
• Crash Diagnostics: In production release builds, anonymized stack traces and device model identifiers may be processed via Firebase Crashlytics to diagnose fatal errors and maintain platform stability. No browsing history, queries, or personal data are included.

5. User Data Control, Export & Deletion

You maintain absolute ownership and control of your data:

• Clear Browsing Data: You can purge history, web cache, cookies, and local database entries instantly at any time via Settings → Clear Browsing Data.
• Vault Management: Saved passwords can be viewed, edited, exported as encrypted backups, or deleted individually or in bulk.
• Instant Full Reset: Clearing storage in Android System Settings (Settings → Apps → RBD Browser → Clear Storage) completely deletes all local databases, cached assets, and preferences.

6. Google Play Store Closed Testing Compliance

For testers participating in the Google Play Closed Testing track:

• Testing builds operate under the identical privacy rules outlined herein.
• Feedback submitted through Google Play Console or email is used solely to resolve bugs, enhance user experience, and ensure compliance.
• Refer to our Closed Testing Guide for verification instructions and test scenarios.

7. Children's Privacy (COPPA Compliance)

The Application is designed for general audiences and is not directed at children under the age of 13. We do not knowingly collect personal information from children.

8. Contact & Support

If you have any questions, suggestions, or privacy inquiries regarding this policy or RBD Browser, please contact developer support: