commit f03e22b947e88a16bb5651b455d2f72432bc7916 equwal <13551856+equwal@users.noreply.github.com> 2026-09-26 21:53:45 -0700 Correct the account part of the privacy policy The app asks subread.space for the hours each time that the main screen opens. MainActivity.onResume calls refreshCloud, which calls Cloud.state. subread.space makes a new account for each request without the device cookie. So subread.space makes the account at the first start, also when the user uses only the captions on the phone. The old text said that the account was for the cloud captions. The Data safety form on Google Play declares the device IDs as collected and required. The privacy policy must agree with the form. Also correct the comment on the INTERNET permission. The cloud captions send the sound to subread.space, so the old comment was wrong. The app behavior does not change.
PRIVACY.md | 8 +++++--- app/src/main/AndroidManifest.xml | 2 +- 2 files changed, 6 insertions(+), 4 deletions(-)
diff --git a/PRIVACY.md b/PRIVACY.md index 27a24fd..94944f2 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -22,9 +22,11 @@ The app sends no sound. does not store them ([data privacy](https://docs.deepinfra.com/account/data-privacy)). subread.space takes the length of each piece from your hours. -- **An account, for the cloud captions.** subread.space gives the app an - account with a random id (`acct_...`) and a random device token. The - account holds your hours. It has no name, email address or phone number. +- **An account.** Each time that you open the app, it asks subread.space for + the hours of your account. The first time that you open the app, + subread.space makes the account, also when you use only the captions on the + phone. The account has a random id (`acct_...`) and a random device token. + It holds your hours. It has no name, email address or phone number. - **Purchases.** In the Google Play build, Google Play takes the payment. The app sends the purchase token to subread.space. subread.space asks Google Play if the purchase is paid, and then adds the hours. It keeps the product, the diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml index 89e8cc2..3315843 100644 --- a/app/src/main/AndroidManifest.xml +++ b/app/src/main/AndroidManifest.xml @@ -1,7 +1,7 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android"> - <!-- The captions go to the share relay, and the speech model comes from Hugging Face. No sound leaves the phone. --> + <!-- The captions go to the share relay, and the speech model comes from Hugging Face. The cloud hours and the cloud captions come from subread.space. The sound leaves the phone only for the cloud captions. --> <uses-permission android:name="android.permission.INTERNET" /> <!-- Android asks for this permission for the sound of other apps too, not only for the microphone. --> <uses-permission android:name="android.permission.RECORD_AUDIO" />