AiTricker ("we", "our", "us") built the White Board Android application (the "App") as a free product. This Privacy Policy explains what information the App and the third-party services integrated within it access, collect, use, and share when you use the App. By installing or using White Board, you agree to the practices described below.

The App is provided "as is" and is intended for general drawing, teaching, and note-taking on a digital whiteboard. The App works fully offline for its core drawing features; an internet connection is required for advertisements, in-app review prompts, the optional Web Image Search feature, and the optional AI-powered OCR Scanner feature.

• App Name: White Board
• Developer: AiTricker
• Package Name: com.teachingboard.aitricker
• Support Email: nonytoons2011@gmail.com
• Target Audience: General audience (13+). The App is not directed at children under 13.

White Board, by itself, does not collect any personally identifiable information (such as your name, email address, phone number, or account credentials). However, the App uses third-party SDKs that automatically collect certain non-personal and device-level information as described in Section 4 below.

2.1 Information stored locally on your device

• Drawings, boards, notes and sessions you create.
• Photos captured via the in-app camera or chosen from your gallery and inserted into a board.
• OCR scan history — text recognized from scanned images is stored locally for your convenience (last 20 scans only).
• App preferences (theme, default tools, last-used settings, tour completion flag, session-open count, etc.).

Locally stored data is kept on your device only using Android's built-in storage APIs, Room database and Jetpack DataStore.

2.2 Information sent to our server

When you use the OCR Scanner feature, the following data is sent to our server (a Google Cloud Function hosted on Google Cloud Platform):

• Google account authentication: To use the OCR Scanner, you must sign in with your Google account via Firebase Authentication. Your Google user ID (a unique internal identifier) is sent with each OCR request to enforce per-user scan limits and verify premium purchase status. We do not access or store your Google account name, email address, profile photo, or password.
• Image data: The photo you capture or select is sent to our server for AI-based text recognition. The image is processed in real-time and is not stored on the server — it is discarded immediately after processing.
• Device identifier (Android ID): A non-resettable, per-app device identifier (Settings.Secure.ANDROID_ID) is sent with each OCR request to prevent abuse (limiting the number of accounts per device). This identifier is not linked to your name, email, or any personally identifiable information.

2.3 Information stored on our server

The following non-personal data is stored in Google Cloud Firestore (a Google-managed database) to enforce scan limits and track premium status:

• Google user ID (an opaque internal identifier — not your name or email)
• Device identifier (Android ID)
• Number of OCR scans used
• Whether the user has premium status (unlocked via in-app purchase)
• Purchase token (for verifying premium purchases with Google Play)
• Timestamp of the first and last scan

No images, recognized text, user names, emails, or any personally identifiable information is stored on our server.

Permission	Why we use it
INTERNET	Required to load advertisements via Google AdMob, to fetch the in-app review prompt via Google Play Review API, to search and download images from Wikimedia Commons when using the Web Image Search feature, and to process images via the AI-powered OCR Scanner feature.
CAMERA	Used only when you tap the in-app "Camera" option to capture a photo and insert it into your whiteboard. The camera is never accessed silently or in the background. The hardware feature is declared as optional; the App also works on devices without a camera.
WRITE_EXTERNAL_STORAGE (Android 9 and below only)	Allows you to export and save your drawings to the device gallery on older Android versions. On Android 10+ the App uses scoped storage and this permission is not requested.
com.google.android.gms.permission.AD_ID	Declared automatically by the Google Mobile Ads SDK (AdMob) so that the SDK can access the Android Advertising ID for ad personalisation, frequency capping and fraud prevention on Android 13 and above.

The App integrates the following Google services. Each of these is governed by its own privacy policy in addition to this one.

4.1 Google AdMob (Google Mobile Ads SDK)

We use Google AdMob to display banner and interstitial advertisements inside the App. AdMob is provided by Google LLC and may automatically collect and share the following information:

• Android Advertising ID
• IP address
• Approximate (coarse) location derived from your IP address
• Device information (model, manufacturer, OS version, language, screen size)
• Diagnostic and crash information
• Interactions with ads (impressions, clicks, viewability)

This data is collected directly by Google and is used for serving and measuring advertisements, ad personalisation, frequency capping, analytics and fraud prevention. AiTricker does not receive any personally identifiable information from AdMob.

You can learn more about how Google uses this data and your choices here:
https://policies.google.com/privacy  |  https://policies.google.com/technologies/ads

You can opt out of personalised advertising or reset your Advertising ID at any time from your device:
Settings → Google → Ads (on most Android devices).

4.2 Google Play In-App Review API

We use the Google Play In-App Review API to show an in-app rating prompt after you have opened a few sessions. The review prompt is rendered and handled entirely by Google Play services; AiTricker does not see, store, or transmit your rating or any associated data.

4.3 Wikimedia Commons API (Web Image Search)

The App includes a Web Image Search feature that allows you to search for freely-licensed images and insert them into your whiteboard. When you use this feature, your search query is sent to the Wikimedia Commons public API to retrieve matching images.

• Data sent: Only the text you type as a search query is transmitted. No personal information, device identifiers, or location data is sent with the request. As required by the Wikimedia Foundation's User-Agent policy, each request includes an identification header containing the app name, version, our developer contact email (nonytoons2011@gmail.com) and a link to this privacy policy page, so that the Wikimedia Foundation can contact us in case of issues. No additional user information is shared.
• Data received: Image thumbnails, URLs, titles and attribution metadata from Wikimedia Commons.
• Storage: Downloaded images are stored locally on your device as part of the board. They are not uploaded to any server.

This feature is entirely optional and only activates when you explicitly tap "Web Image" and enter a search query. The Wikimedia Foundation's privacy policy applies to requests made to their API:
https://foundation.wikimedia.org/wiki/Privacy_policy

4.4 Firebase Authentication (Google Sign-In)

The App uses Firebase Authentication to sign you in with your existing Google account when you use the OCR Scanner feature. This is required to securely identify you for scan-limit enforcement and premium-status verification.

• Data accessed: Firebase Authentication receives a Google ID token from Google Sign-In. We only use the opaque user ID (UID) generated by Firebase — we do not access, store, or transmit your Google account name, email, profile photo, or password.
• Data stored: The Firebase UID is stored in our Firestore database as the record key for scan-count and premium-status tracking (see Section 2.3).
• Sign-out: You can sign out of the App at any time. Your locally stored drawings and boards are not affected by sign-out.

Firebase Authentication is governed by:
https://firebase.google.com/support/privacy

4.5 Firebase App Check (Play Integrity)

The App uses Firebase App Check with the Play Integrity API to verify that OCR requests originate from a genuine, unmodified installation of the App. This helps protect our server from automated abuse.

• Data sent: An App Check token (generated by the Play Integrity API) is sent with each OCR request. This token attests that the request comes from a legitimate app instance — it does not contain any personal information.
• Data stored: App Check tokens are not stored on our server. They are verified in real-time and discarded.

Play Integrity API is governed by:
https://developer.android.com/google/play/integrity

4.6 Google Play Billing (In-App Purchases)

The App offers an optional one-time in-app purchase ("OCR Premium Unlock") to unlock unlimited OCR scans (subject to a daily fair-use limit). All purchases are processed entirely by Google Play Billing.

• Payment data: All payment information (credit/debit card details, UPI, carrier billing, etc.) is handled exclusively by Google Play. AiTricker does not receive, process, or store any payment card details or financial information.
• Purchase verification: After a successful purchase, the App sends the purchase token to our server to verify it with the Google Play Developer API. Upon successful verification, the user's premium status is updated in Firestore (see Section 2.3).
• Refunds: All refund requests are handled by Google Play in accordance with Google Play's refund policies. See the Refund Policy tab above for details.

Google Play's privacy policy applies to all billing transactions:
https://policies.google.com/privacy

4.7 Google ML Kit (On-Device AI Features)

The App uses Google ML Kit for the following on-device AI features. All ML Kit processing happens entirely on your device — no data is sent to any server for these features.

• Digital Ink Recognition (Smart Tool): Recognizes handwritten shapes and text drawn on the whiteboard and converts them to clean digital shapes or typed text. Processing is fully on-device.
• Language Identification: Detects the language of recognized text to assist with translation. Processing is fully on-device.
• Translation: Translates recognized text between supported languages. Translation models are downloaded to your device on first use and all processing happens locally.

ML Kit may download language models to your device over the internet. No user content (text, drawings, or images) is sent to Google's servers by ML Kit.
https://developers.google.com/ml-kit/terms

4.8 AI-Powered OCR Scanner (Google Cloud Functions & Vertex AI)

The App includes an optional OCR Scanner feature that uses artificial intelligence to recognize handwritten or printed text from images. When you use this feature:

• Image processing: The image you capture or select is sent over HTTPS to a Google Cloud Function hosted on Google Cloud Platform (region: asia-south1). The Cloud Function forwards the image to Google Vertex AI (Gemini model) for text recognition. The image is processed in real-time and is not stored on our server or by Vertex AI after processing.
• Device identifier: Your device's Android ID is sent with the request to enforce the free scan limit. See Section 2.2 for details.
• Data returned: Only the recognized text is returned to the App. The text is stored locally on your device in the scan history.

This feature is entirely optional and only activates when you explicitly tap "OCR" and capture or select an image. Google's Vertex AI is governed by Google Cloud's privacy policy:
https://cloud.google.com/terms/cloud-privacy-notice

4.9 Google Cloud Firestore (Scan Limit Tracking)

We use Google Cloud Firestore to store a minimal record of how many OCR scans each device has used. This is solely to enforce the free scan limit (5 per device) and prevent abuse.

• Data stored: Device identifier (Android ID), scan count, premium status, and first/last scan timestamps.
• Data NOT stored: No images, recognized text, user names, emails, IP addresses, or any personally identifiable information.
• Hosting: Firestore is hosted by Google Cloud Platform in the asia-south1 (Mumbai) region.

Google Cloud Firestore is governed by:
https://cloud.google.com/terms/cloud-privacy-notice

4.10 No analytics, no crash reporting

The App does not integrate Firebase Analytics, Crashlytics, Facebook SDK, or any other analytics or attribution SDK. Our server-side infrastructure is limited to the OCR processing, scan-limit tracking, and purchase verification described above — there is no cloud sync of your drawings and no tracking beyond what is described in this policy.

If you are located in the EEA, the United Kingdom, or Switzerland, ads in the App are served under the Google EU User Consent Policy. On your first launch (and whenever required), Google's User Messaging Platform (UMP) will present a consent dialog asking whether you allow personalised ads.

• If you consent, AdMob may serve personalised ads using the data listed in Section 4.1.
• If you do not consent, AdMob will serve only non-personalised (contextual) ads, which still require limited data such as IP address and ad interactions to function.

You may change or withdraw your consent at any time by clearing the App's data in Android Settings → Apps → White Board → Storage → Clear data, which will cause the consent dialog to be shown again on the next launch.

Under GDPR / UK GDPR you have the right to access, rectify, erase, or restrict processing of your personal data. For data processed by AdMob, such requests should be directed to Google. For the device identifier and scan-count record stored on our server (Firestore), you may request deletion by contacting us at nonytoons2011@gmail.com. You can also uninstall the App to stop further processing on your device.

We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA) as amended by the CPRA. Google AdMob's data practices for California users are described in Google's privacy policy linked above.

White Board is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided information to us, please contact us at nonytoons2011@gmail.com and we will take appropriate steps.

Local data: All user-created content (drawings, photos, sessions, scan history, preferences) is stored locally on your device. You can delete this data at any time by:

• Deleting individual boards/sessions or scan history from within the App.
• Clearing the App's data: Android Settings → Apps → White Board → Storage → Clear data.
• Uninstalling the App, which removes all locally stored data.

Server-side data: The OCR scan count record stored in Firestore (device identifier, scan count, timestamps) is retained to enforce the free scan limit. Images sent for OCR processing are not retained — they are discarded immediately after text recognition is complete. If you wish to have your scan-count record deleted from our server, please contact us at nonytoons2011@gmail.com with your request.

For data collected by AdMob, please refer to Google's data deletion mechanisms in their privacy policy.

User content is stored in the App's private storage area on your device, which is protected by Android's app-sandbox model. All network traffic — including OCR image uploads, scan-limit checks, AdMob requests, and Google Play services — is encrypted in transit using HTTPS / TLS. Server-side data in Firestore is protected by Google Cloud Platform's security infrastructure including encryption at rest.

However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

The App may let you share drawings with other applications installed on your device (e.g. WhatsApp, Gmail, Drive) using Android's standard share sheet, and may open the Google Play Store for rating or installing related apps. We are not responsible for the privacy practices of these third-party apps or services.

We may update this Privacy Policy from time to time to reflect changes in the App, third-party SDKs, or applicable laws. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be announced inside the App or on this page.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Developer: AiTricker
Email: nonytoons2011@gmail.com
App: White Board (com.teachingboard.aitricker)