Zonair Privacy Policy

1. Overview & Architectural Principles

Zonair is a privacy-first local file transfer application developed by Zoneck Trading LLP.

• Strictly Device-to-Device: All file transfers occur directly between devices over your local Wi-Fi, Ethernet network, or personal mobile hotspot.
• Zero Central Servers: Zonair operates without any intermediary cloud servers, relay nodes, or routing proxies. Zoneck Trading LLP does not run, host, or route files through any remote server.
• Zero Content Access: At no point in time are your files, messages, filenames, or directory structures visible or accessible to Zoneck Trading LLP or any third party.
• End-to-End Mutual TLS Encryption: Direct peer-to-peer streams are secured with TLS 1.3 using ephemeral cryptographic keys generated directly on your local device.

2. Information We Do Not Collect (Zero Analytics, Zero Tracking)

Zonair is engineered to operate completely offline and contains no remote reporting mechanisms:

• No Analytics SDKs: Zonair contains zero third-party analytics libraries (e.g. no Google Analytics, Firebase, Mixpanel, Adjust, or Facebook SDKs).
• No Telemetry or Crash Uploads: Zonair does not transmit diagnostic telemetry, stack traces, or error logs to remote servers.
• No User Accounts: You do not need to register, log in, or provide an email, phone number, or password to use Zonair.
• No Advertising Networks: Zonair contains no advertisements and does not access advertising identifiers (such as Google Advertising ID or Apple IDFA).

3. Information Stored Exclusively on Your Device

Zonair stores only the essential operational settings locally in your device's sandboxed storage. This data never leaves your device:

• Device Preferences: Custom or randomly generated device alias (e.g., "Fresh Raspberry #3"), theme choice (light/dark/brand), and display language.
• Transfer History: A list of your recent sent and received file names, sizes, recipient/sender aliases, and timestamps. This log is capped at 30 recent entries and can be cleared at any time with a single tap on "Clear all".
• Favorites & Device Groups: Custom device group names and favorite device identifiers created by you.
• Send Presets: Configured shortcut folder paths paired with destination device aliases.
• Cryptographic Certificates: Ephemeral, self-signed TLS certificates generated locally to secure device-to-device streams.

You can permanently delete all locally stored data at any time by clearing app data in your device's operating system settings or uninstalling the app.

4. Permissions & Hardware Access Justification

Zonair requests only the minimal device permissions necessary to discover nearby peers and complete user-initiated transfers over local Wi-Fi. In accordance with Google Play and Microsoft Store Developer Policies, each permission is justified as follows:

• Local Network & Sockets (INTERNET, ACCESS_WIFI_STATE, CHANGE_WIFI_MULTICAST_STATE): Used exclusively to broadcast UDP multicast discovery beacons on local port 53317 and establish peer-to-peer TCP streams across your local Wi-Fi subnet. Zonair does not communicate with external internet hosts.
• Nearby Devices (NEARBY_WIFI_DEVICES): Required on Android 13+ to discover and bind to local Wi-Fi peers and Wi-Fi Direct hotspots without accessing device geolocation. Zonair explicitly sets usesPermissionFlags="neverForLocation".
• Selective Media & File Access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO): Used only when you tap the file, media, or folder picker to send specific files. Zonair operates on user intent and never indexes, scans, or reads unselected files.
• Background Transfer Service (FOREGROUND_SERVICE_DATA_SYNC): Used on Android exclusively to maintain active, user-initiated file transfers without disruption when the app is minimized or the screen is locked. A persistent notification displays live transfer progress.
• Windows Capabilities (privateNetworkClientServer, runFullTrust): Used on Windows 10/11 solely to bind the local socket listener on port 53317 and handle system tray notifications and auto-start preferences.
• Prohibited / High-Risk Permissions Purged: Zonair does not request MANAGE_EXTERNAL_STORAGE, QUERY_ALL_PACKAGES, REQUEST_INSTALL_PACKAGES, or precise GPS location.

5. Data Retention, Deletion & User Rights

Because Zonair is decentralized and cloudless, Zoneck Trading LLP does not retain, process, or store any of your files or personal data on remote servers.

• Transfer History Control: Recent transfer history is stored strictly in your local device cache (maximum 30 entries). You can instantly clear this history at any time by navigating to Settings → Clear History.
• Received Files: Files you receive are written directly into your device's designated downloads folder. You retain complete ownership and control to view, move, or permanently delete these files via your operating system's file explorer.
• Complete Data Erasure: To erase all local app preferences, cache, and TLS keys, simply clear application data in your operating system's application management settings, or uninstall the app. All local configuration is permanently removed upon uninstallation.
• Data Subject Rights & Inquiries: Under applicable data protection regulations (including GDPR, CCPA, and the Indian DPDP Act), users have the right to know what data is processed. Since we collect zero personal data, we hold no records to retrieve or delete. For any verification requests, contact privacy@zoneck.com.

6. Third-Party Sharing & Data Transmission

Zonair adheres to a strict zero-sharing standard:

• We do not sell, rent, monetize, or trade any user information.
• We do not transmit user data or telemetry to advertising networks, data brokers, or analytics providers.
• We do not use third-party cloud relays or proxy tunnels. All traffic stays strictly within your local network boundary.

Website Analytics Disclosure: The Zonair website (zonair.zoneck.com) may use Cloudflare Web Analytics, a privacy-preserving, cookie-free analytics service, to measure aggregate page views. This applies only to the website and does not affect the Zonair application itself, which contains zero analytics code. No personally identifiable information is collected by this website analytics.

7. Children's Privacy (COPPA & GDPR-K Compliance)

Zonair is a general-audience local utility that does not solicit, collect, or store personal information from any user, including children under the age of 13 (or under 16 in the European Union). Because no accounts, cloud storage, or personal profiles exist within Zonair, no personal data from children is ever collected or processed by Zoneck Trading LLP.

8. Compliance with Indian Law (IT Rules & DPDP Act)

In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (DPDPA), the Grievance Officer details are provided below:

9. Policy Updates

We may update this Privacy Policy periodically to reflect app enhancements or legal requirements. Material updates will be published with a revised effective date on this page (https://zonair.zoneck.com/privacy.html) and documented in release notes.