YeeDot1. Information processing list
Items marked conditional are not uploaded by Android Beta 0.1.0. They apply only after the feature launches, you use it, and required authorization is complete.
| Scenario | Information or permission | Purpose | Method | Required? | Trigger | Location and retention | Control |
|---|---|---|---|---|---|---|---|
| Local ledger and forecasts | Account names, balances, transactions, categories, notes, plans, forecasts | Bookkeeping, cash-flow calculation, and risk notices | On-device only | Core data required; notes optional | You enter or import data | On-device until deleted or cleared | Delete records, clear data, or uninstall |
| Reminders and privacy | Reminder time, plan dates, biometric result, privacy settings | Notifications, app lock, hidden amounts | System and local database | Optional | You enable it | On-device until disabled or cleared | App or system settings |
| Import, export, and share | Files or exports you select | Migration, backup, or sharing | System picker or share sheet | Optional | You select | Your chosen destination determines it | Cancel or delete exported files |
| Website visit | IP, time, path, User-Agent, response status | Delivery, security, troubleshooting | EdgeOne logs | Required for website delivery | Visit website | Shortest period required by settings and law | Stop visiting; no website cookie |
| Direct updates | IP, time, app version, channel, download request | Check, download, and verify updates | HTTPS manifest and APK | Check optional; download user-triggered | Check or confirm download | Minimum necessary delivery-log period | Do not check or download |
| Account and cloud backup — conditional | Apple identifier, session, device metadata, full snapshot | Authentication, device management, backup and restore | Encrypted transport; not end-to-end encrypted | Only for online feature | Feature launches and you opt in | Region and term published first; no current upload | Disable backup or delete cloud account |
| Anonymous analytics — conditional | Separate random ID, allow-listed event, version, time | Understand feature operation | Separated from account and ledger | No | Feature launches and you enable it | Published before launch; no current upload | Disable and request deletion |
| Feedback — conditional | Category, message, optional contact | Investigate and respond | Submitted by you | No | You submit | Minimum needed to resolve and meet duties | Do not submit or request deletion |
| YeeDot AI — conditional | Prompt, 12 recent turns, minimal cash-flow context | Draft cash-flow explanations | Via YeeDot to a disclosed provider | No | Provider disclosed and you separately consent | Provider term published first; no current upload | Decline or withdraw AI consent |
2. Android permissions and system capabilities
| Scenario | Information or permission | Purpose | Method | Required? | Trigger | Location and retention | Control |
|---|---|---|---|---|---|---|---|
| Network | INTERNET | Updates and conditional online features | HTTPS | Not for local core | Update check or online feature | Permission itself is not stored | Do not use online features or restrict network |
| Reminders | POST_NOTIFICATIONS | Show local reminders | Android notifications | Optional | You enable and allow | Settings remain on-device | App or system settings |
| App lock | USE_BIOMETRIC | System biometric unlock | System returns success or failure only | Optional | You enable and verify | No fingerprint or face template is read or stored | Disable app lock or system biometrics |
| Restore reminders | RECEIVE_BOOT_COMPLETED | Restore local reminders after restart/update | Receive system event | Only for reminders | Restart or app update | No device content collected | Disable reminders or background access |
| Install direct update | REQUEST_INSTALL_PACKAGES | Let Android install a confirmed official APK | Android confirmation UI | Only for direct updates | You confirm install | No installed-app list is collected | Decline or disable source permission |
| File import/export | System file picker | Read selected file or save export | Per-file system grant | Optional | You select | No broad storage permission | Cancel or delete export |
| Share | System share sheet | Send selected export to chosen app | System and user choice | Optional | You share | Chosen app's policy applies | Cancel sharing |
3. Scope and updates
A declared permission is not the same as collecting personal information. System biometrics, for example, return only an authentication result.
Before every release, compare this list with platform manifests, store privacy labels, and real network traffic. New permissions, SDKs, recipients, or purposes require an updated list and version first.