Android Privacy Policy
Scope and operator
The Pineapple Plug LLC provides Don't Date Your Photos (DDYP) for Android. Contact support@ddyp.co. This policy covers the Android app, which requires Android 11 or newer. DDYP has no account creation or sign-in, advertising, or in-app behavior analytics SDK.
Photos, videos and local records
With your permission, DDYP reads accessible photos, videos and associated dates and identifiers to display and organize your library. You can choose limited access or change permissions in Android Settings. Cloud-only items unavailable through the device's media library may not appear.
Photos, previews and sorting records are processed on your device. Local storage holds Keep, Favorite, Maybe and deletion selections, progress, completed-deletion records and allowance information. DDYP Favorites are local to DDYP and do not change other gallery apps' Favorites. Device backup and other apps' cloud synchronization follow your settings and those services' practices.
Nothing is removed simply by swiping. DDYP gathers selected items for review and asks for Android's confirmation before moving them to system trash. Recovery, trash expiry and reclaimed space depend on your device and gallery. DDYP has no server backup of your library.
Sharing and saving
If you choose Share or Save a copy, the selected item goes to the app, recipient or storage provider you choose, under that provider's practices; DDYP does not receive a copy through those actions. A destination may be a cloud service.
Purchases and complimentary access
Google Play handles checkout and payment details. DDYP sends package name, product ID and purchase token over HTTPS to its Cloudflare-hosted verifier, which checks Google Play. The service retains a token hash, encrypted purchase token, product, access status, expiry, verification and acknowledgement times, plus retry, processing and request-budget records. These support purchase validation, restoration, acknowledgement and access checks. DDYP does not receive your payment-card details or billing address.
If you activate complimentary access, DDYP sends the invitation to its Cloudflare service and receives an access credential stored securely on your device. Renewal sends that credential to the service. The database retains invitation and credential hashes, their association, enabled status, creation times and grant last-use times, rather than raw invitations or access credentials. This creates no DDYP account. These records support issuing, renewing and revoking access.
Encrypted local storage holds verified access, allowance information and any complimentary credential. Paid access needs periodic online verification, including lifetime access. Offline access lasts up to 24 hours after successful verification, capped at subscription expiry if sooner.
Updates and technical information
Expo EAS Update receives HTTPS requests containing an installation identifier, platform, runtime and update identifiers, and may receive failed-launch/update identifiers and an emergency-launch indicator. Android v17 replaces the free-form emergency-error header with a fixed indicator. This does not eliminate other diagnostics or describe earlier builds.
Cloudflare, Google, Expo and delivery providers receive network information such as IP addresses when handling requests. DDYP's purchase ledger does not intentionally store IP addresses. These providers process information under their applicable terms and privacy practices. We do not claim that all provider records are anonymous, unlogged or immediately deleted. Update and verification requests do not include your photo/video library or sorting history.
Data inquiries, retention and removal
For any data-related inquiries, including questions or deletion requests, contact support@ddyp.co.
(This concerns purchase-verification, complimentary-access, technical and support records. DDYP does not upload or store your photo or video library on its servers.)
If you choose Share or Save a copy, the selected item goes to the app, recipient or storage provider you choose, under that provider's practices; DDYP does not receive a copy through those actions.
If you email support, we receive your email address and the information you choose to provide. Do not email raw purchase tokens, invitations, access credentials, payment-card details or sensitive media.
Uninstalling removes ordinary app storage but does not cancel Google subscriptions or erase Google or DDYP server records. Purchase and complimentary-access records currently have no automatic expiry or deletion schedule; no fixed server retention period is promised. We must identify relevant records and verify your authority before acting on a request. A receipt or reference alone may not establish this. Removing verification records can affect access and restoration. There is no automatic or self-service deletion facility. Applicable retention obligations and provider-held records must also be considered.
Children and changes
DDYP is not directed at children under 13. It does not request an age, name or email as part of ordinary app use. Contact support if a child has sent personal information. We will update this policy when our practices change.