EFFECTIVE DATE: JANUARY 20, 2026 // PROTOCOL_VERSION: 2.0
Version-Specific Privacy
IMPORTANT: Privacy practices differ by platform
WEB VERSION (pda-i.com): ZERO TRACKING
ANDROID FREE: CONTAINS GOOGLE ADS + TRACKING
ANDROID PREMIUM ($2): ZERO TRACKING (ADS REMOVED)
Web Application (pda-i.com)
The web version operates on a zero-tracking, local-first architecture:
- No analytics or telemetry
- No advertisements
- No third-party tracking scripts
- All data stored locally in your browser
Android Free Version (Google Play)
The free Android app includes Google AdMob advertisements which collect and process user data:
- Google Advertising ID tracking
- Device information (model, OS version)
- IP address and approximate location
- Ad interaction data (views, clicks)
- Third-party ad network tracking
Android Premium Version ($2 In-App Purchase)
Upgrading to premium removes all advertisements and ad tracking:
- AdMob SDK disabled after purchase
- No advertising ID collection
- Google Play billing data only (transaction record)
- Same local-first architecture as web version
Advertising & Tracking (Android Free)
The free Android version uses Google AdMob for advertising. This involves significant data collection:
Data Collected by AdMob
- Advertising ID: Unique identifier for ad targeting
- Device Information: Make, model, OS version, screen size
- IP Address: For geolocation and fraud prevention
- App Usage Data: Time spent, features used
- Ad Interactions: Views, clicks, conversions
- Crash Data: Anonymous crash reports for stability
Third-Party Ad Partners
Google AdMob may share data with third-party advertising networks:
- Ad exchanges and demand-side platforms
- Analytics and measurement partners
- Fraud prevention services
See Google's privacy policy: https://policies.google.com/privacy
Opting Out of Personalized Ads
Android users can opt out of personalized advertising:
- Settings → Google → Ads → Opt out of Ads Personalization
- Visit: adssettings.google.com
- Or upgrade to Premium ($2) to remove all ads
AD_NETWORK: GOOGLE_ADMOB
PERSONALIZATION: ENABLED (Free) / DISABLED (Premium)
TRACKING_ID: GOOGLE_ADVERTISING_ID
OPT_OUT: USER_CONTROLLED
In-App Purchases & Billing
The Android app uses Google Play In-App Billing for the $2 premium upgrade:
Data Collected for Billing
- Google Account: Email and user ID for purchase verification
- Transaction Data: Purchase timestamp, price, product ID
- Payment Information: Handled entirely by Google Play (we never see payment details)
- Receipt Data: Stored locally to verify premium status
Payment processing is managed by Google Play. See their privacy policy: Google Payments Privacy
BILLING_PROVIDER: GOOGLE_PLAY_BILLING_v6
PAYMENT_HANDLING: GOOGLE_SECURE
PREMIUM_VERIFICATION: LOCAL_RECEIPT_CHECK
PRICE: $2.00_USD (ONE-TIME)
Data Storage & Encryption
Local Storage (All Versions)
Core application data is stored locally on your device using localStorage and encrypted storage:
- Notes: Stored locally, unencrypted (plain text)
- AI API Keys: Encrypted with AES-256-GCM before storage
- AI Conversations: Encrypted with AES-256-GCM before storage
- Conversation Groups: Encrypted with AES-256-GCM before storage
- Theme Preferences: Stored locally, unencrypted
- Keyboard Settings: Stored locally, unencrypted
- Premium Status (Android): Purchase receipt stored locally
Android Application
The Android version adds:
- Google OAuth Tokens: Encrypted and stored locally
- Ad Preferences (Free): Managed by Google AdMob SDK
Note: Health tracking features were removed in version 1.5.6 to simplify permissions.
ENCRYPTION: AES-256-GCM
KEY_DERIVATION: PBKDF2-SHA256 (100,000 iterations)
STORAGE_LOCATION: DEVICE_LOCAL_ONLY
SERVER_TRANSMISSION: NONE (except ads in Free version)
Third-Party Services
PDA-i integrates with external services only when you explicitly authorize them:
Google Services (Optional - All Versions)
When you sign in with Google, we request limited OAuth scopes:
- Google Calendar: Read-only access to view your calendar events
- Gmail: Full access to read, compose, and send emails
- Google Tasks: Full access to manage your tasks
- Google Contacts: Read-only access to view contacts
Data Flow: Google → Your Device. We never store your Google data on our servers.
AI Services (Optional - All Versions)
When you configure AI chat functionality, you provide your own API keys for:
- Anthropic (Claude): Messages sent directly from your device to Anthropic's API
- OpenAI (GPT): Messages sent directly from your device to OpenAI's API
Data Flow: Your Device → AI Provider. Subject to their privacy policies.
Google AdMob (Android Free Only)
Advertisements served by Google AdMob in the free Android version:
- Collects device and behavioral data
- Shares with third-party ad networks
- Personalized based on Google Advertising ID
- Removed immediately upon premium purchase
What We Don't Collect
Web Version & Android Premium
These versions operate on a zero-telemetry philosophy:
- No Usage Analytics: We don't track how you use the app
- No Crash Reports: No automatic error reporting
- No Location Data: We never access your GPS or location
- No Device Fingerprinting: No tracking across sessions
- No Cookies: No tracking cookies or third-party scripts
- No Server-Side Accounts: No user accounts on our servers
- No Marketing Data: No email lists, no remarketing pixels
Android Free Version
Important: The free Android version collects data via Google AdMob as described above. Premium upgrade removes all advertising tracking.
WEB_VERSION:
ANALYTICS_ENGINE: NULL
TRACKING_SCRIPTS: NULL
ANDROID_FREE:
AD_NETWORK: GOOGLE_ADMOB
TRACKING: ADVERTISING_ID
ANDROID_PREMIUM:
ANALYTICS_ENGINE: NULL
AD_NETWORK: NULL
Network Communications
All Versions
PDA-i communicates over the network when:
- You explicitly sign in to Google (OAuth flow)
- You sync with Google services (Calendar, Gmail, Tasks, Contacts)
- You send messages to AI services (with your own API keys)
- You fetch RSS feeds (direct connection to feed sources)
Android Free Additional Communications
- Ad Requests: To Google AdMob servers for ad delivery
- Ad Tracking: Impression and click data to ad networks
- Billing Verification: To Google Play for in-app purchase validation
All communications use HTTPS encryption. We operate no backend servers—there's nothing to hack because there's nothing stored centrally.
Your Rights
Data Access & Control
Because all core data is stored locally on your device, you have complete control:
- Access: All data is directly accessible via browser DevTools or file system (Android)
- Export: Use browser export functions or backup your device
- Delete: Clear browser localStorage or uninstall the app
- Portability: Your data is yours to move freely
- Revoke Permissions: Disconnect Google or remove AI keys at any time
Advertising Rights (Android Free)
- Opt Out of Personalization: Android Settings → Google → Ads
- Reset Advertising ID: Clears ad tracking history
- Remove Ads Completely: Upgrade to Premium ($2)
GDPR Rights (EU Users)
European users have additional rights regarding AdMob data:
- Request data deletion from Google AdMob
- Object to personalized advertising
- Access collected advertising data
Contact Google: Privacy Help Center
Open Source Transparency
PDA-i is a single-file web application (~8,000 lines). You can:
- View the entire source code by inspecting the page
- Verify our encryption implementations (AES-256-GCM, PBKDF2-SHA256)
- Audit all third-party API calls
- Run the web version completely offline (except for sync features)
- Inspect AdMob integration in Android app (compiled but auditable via APK decompilation)
ARCHITECTURE: VANILLA_JAVASCRIPT
DEPENDENCIES: MINIMAL (Font Awesome, Google APIs, AdMob SDK)
BUILD_PROCESS: CAPACITOR (Web → Android)
TRANSPARENCY: MAXIMUM
International Users
PDA-i operates entirely on your device. However:
- Web/Premium: No data residency concerns (local-only storage)
- Android Free: AdMob may transfer data to US servers for ad serving
- Google Services: Data syncs to Google's global infrastructure
- AI Services: API calls to Anthropic (US) or OpenAI (US)
Children's Privacy (COPPA Compliance)
PDA-i is not intended for children under 13:
- We do not knowingly collect data from children
- Google AdMob is configured for general audiences only
- No child-directed advertising
- Parents: Clear browser data or uninstall to remove all app data
If you believe a child has used PDA-i, contact us at [email protected]
California Privacy Rights (CCPA)
California residents have specific rights:
Right to Know
You can request disclosure of:
- Categories of personal information collected (see sections above)
- Sources: Direct user input + Google AdMob (Free version)
- Purpose: App functionality + advertising (Free version)
- Third parties: Google AdMob, ad networks (Free version only)
Right to Delete
Request deletion of your data:
- Local data: Clear browser/app storage yourself
- AdMob data: Contact Google (link above)
Do Not Sell
We do not "sell" personal information in the traditional sense, but AdMob ad serving may constitute "sharing" under CCPA. To opt out:
- Upgrade to Premium ($2) to remove all ads and tracking
- Or opt out of personalized ads in Android settings
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or for legal compliance. Updates will be posted at https://pda-i.com/privacy with an updated effective date.
Material changes (e.g., new ad networks, data collection) will be announced:
- In-app notification (Android versions)
- Updated effective date at top of this page
- Version number increment
Contact & Data Protection Officer
For privacy inquiries, data requests, or GDPR/CCPA concerns:
EMAIL:
[email protected]
WEB: https://pda-i.com
RESPONSE_TIME: 48_HOURS_STANDARD
GDPR_REQUESTS: 30_DAYS_MAXIMUM
Please note: Since we don't collect or store user data on servers (except via third-party AdMob), most deletion requests can be handled by:
- Clearing browser localStorage (Web)
- Uninstalling the app (Android)
- Contacting Google for AdMob data (Free Android only)
PDA-i v2.2 // PRIVACY_PROTOCOL_v2.0 // WEB_ZERO_TRACKING // ANDROID_FREE_ADS // ANDROID_PREMIUM_AD_FREE