Zonair Privacy Policy

1. Overview & Architectural Principles

Zonair is a privacy-first local file transfer application developed by Zoneck Trading LLP.

• Strictly Device-to-Device: All file transfers occur directly between devices over your local Wi-Fi, Ethernet network, or personal mobile hotspot.
• Zero Central Servers: Zonair operates without any intermediary cloud servers, relay nodes, or routing proxies. Zoneck Trading LLP does not run, host, or route files through any remote server.
• Zero Content Access: At no point in time are your files, messages, filenames, or directory structures visible or accessible to Zoneck Trading LLP or any third party.
• End-to-End Mutual TLS Encryption: Direct peer-to-peer streams are secured with TLS 1.3 using ephemeral cryptographic keys generated directly on your local device.

2. Information We Do Not Collect (Zero Analytics, Zero Tracking)

Zonair is engineered to operate completely offline and contains no remote reporting mechanisms:

• No Analytics SDKs: Zonair contains zero third-party analytics libraries (e.g. no Google Analytics, Firebase, Mixpanel, Adjust, or Facebook SDKs).
• No Telemetry or Crash Uploads: Zonair does not transmit diagnostic telemetry, stack traces, or error logs to remote servers.
• No User Accounts: You do not need to register, log in, or provide an email, phone number, or password to use Zonair.
• No Advertising Networks: Zonair contains no advertisements and does not access advertising identifiers (such as Google Advertising ID or Apple IDFA).

3. Information Stored Exclusively on Your Device

Zonair stores only the essential operational settings locally in your device's sandboxed storage. This data never leaves your device:

• Device Preferences: Custom or randomly generated device alias (e.g., "Fresh Raspberry #3"), theme choice (light/dark/brand), and display language.
• Transfer History: A list of your recent sent and received file names, sizes, recipient/sender aliases, and timestamps. This log is capped at 30 recent entries and can be cleared at any time with a single tap on "Clear all".
• Favorites & Device Groups: Custom device group names and favorite device identifiers created by you.
• Send Presets: Configured shortcut folder paths paired with destination device aliases.
• Cryptographic Certificates: Ephemeral, self-signed TLS certificates generated locally to secure device-to-device streams.

You can permanently delete all locally stored data at any time by clearing app data in your device's operating system settings or uninstalling the app.

4. Permissions & Hardware Access Justification

Zonair only requests permissions that are strictly necessary for local network communication and user-initiated file selection:

• Local Network Access (INTERNET, ACCESS_LOCAL_NETWORK): Used exclusively to broadcast local multicast discovery packets on UDP port 53317 and stream files directly via TCP over your local subnet. No data is transmitted to the public internet.
• Photo & Video Library Access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO): Requested only when you intentionally tap the photo/video picker to select specific media to send. Zonair does not scan or index your media library in the background.
• Foreground Service (FOREGROUND_SERVICE_DATA_SYNC): Used on Android exclusively to maintain active file transfers when the application is minimized or the screen is locked.
• Restricted Permissions Omitted: Zonair does not request broad storage access, package queries (QUERY_ALL_PACKAGES), or app installation permissions.

5. Children's Privacy

Zonair does not collect, solicit, or store personal information from any user, including children under the age of 13 (or under 18 where applicable). Because the application operates offline and peer-to-peer without user registration, no personal data from any child is collected or processed by Zoneck Trading LLP.

6. Compliance with Indian Law (IT Rules & DPDP Act)

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (DPDPA), the Grievance Officer details are provided below:

7. Changes to This Privacy Policy

If this Privacy Policy is updated, the revised version will be published on this website and noted in the application release notes. Your continued use of the application constitutes acceptance of any revisions.