1. Introduction

CamBlock ("the App") is an Android application developed for enterprise and facility security use cases. This Privacy Policy describes how we collect, use, store, and protect information when you use the App. By installing or using the App, you agree to the practices described in this policy.

2. Information We Collect

Device Identifier: The App generates and stores a unique device ID to track enrollment status. This ID is used solely to associate your device with a facility enrollment session and is transmitted to our backend servers.

QR Code Data: When you scan a QR code, the encoded JWT token is transmitted to our API for validation. QR tokens contain facility identifiers, location names, and timestamps.

Enrollment Status: Entry/exit events including timestamps, facility IDs, and location labels are logged on our servers to maintain enrollment records.

Camera App Usage: The App uses Android's UsageStats API to detect whether a camera application is in the foreground. This data is processed locally on the device only and is never transmitted to our servers.

3. Information We Do NOT Collect

• We do not collect, capture, store, or transmit any photos, videos, or images.
• We do not collect personal identification information such as name, email, phone number, or address.
• We do not track GPS location, movement, or geolocation data.
• We do not access your contacts, messages, call logs, or any personal communications.
• We do not use analytics SDKs or advertising trackers of any kind.
• We do not share any data with third-party advertisers or data brokers.

4. How We Use Collected Information

The device ID and enrollment data are used exclusively for:

• Validating QR code scans and confirming facility access
• Maintaining and restoring the device enrollment state across app restarts and reboots
• Facility administrators to verify which devices are currently enrolled

5. Data Storage and Security

Enrollment data is stored on secure backend servers accessible only by authorized facility administrators. Communication between the App and our servers is encrypted using HTTPS/TLS. JWT tokens used for QR validation include expiration times and are validated server-side. Local enrollment state is stored using Android SharedPreferences on the device.

6. Device Administration

The App requests Device Administrator privileges to disable the device camera hardware at the system level. This capability is activated only when a valid entry QR code is scanned and is fully removed when a valid exit QR code is scanned. Users must explicitly grant Device Administrator rights through the Android Settings system prompt — the App cannot self-activate these rights.

7. Permissions Justification

All permissions requested by CamBlock are used solely to provide the core security functionality. No permission is used for data collection, tracking, advertising, or any purpose not described in this policy. Refer to the Permissions section of this website for a full breakdown.

8. Data Retention

Enrollment records are retained as long as required by the facility operator for auditing and compliance purposes. Device identifiers are removed from active records upon a successful exit scan. Facilities may configure their own data retention policies within the backend system.

9. Children's Privacy

CamBlock is designed for enterprise and workplace deployment and is not intended for use by individuals under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected with a new effective date. Continued use of the App after changes constitutes acceptance of the revised policy. Significant changes will be communicated through the app update notes on Google Play.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: shivam.soni@mindefy.tech
Developer: Security App
Platform: Google Play Store