Privacy notice — Winkie for Android (English translation)

Data controller

x3system di Giorgio Corrente. For any request: giorgio.corrente@x3system.it.

In short

The app receives on the phone the scans that reach the office PC, over the local network. Scans never cross the internet and never reach us. The app has no account, does not talk to our licence server, and carries no advertising and no usage analytics. The one exception is reading the QR code, described below.

What data the app handles, and where

1. On the phone, and only there:

   • the scans received, until you delete them, and for no more than 30 days;
   • the paired PC's name, its address on the office network and its certificate's fingerprint;
   • the access token the PC gave the phone and the phone's cryptographic key, kept with the Android Keystore: they never leave the phone.

   Android's automatic backup is off for the app: none of this ends up in a cloud backup or on another phone.

2. On the paired PC, on the office network (which is yours or your organisation's, not ours): when you pair the phone, the app sends the PC the phone's name (the one set on the phone, e.g. «Pixel di Lucia») and the public half of its key. The PC also keeps the pairing date, the last contact and the phone's last address, to show them in its «Telefoni» card. Whoever uses that PC can unpair the phone at any time.

3. Reading the QR code. To read the code the PC shows, the app uses Google's ML Kit, through the phone's Google Play services. Camera images are processed on the phone and are not sent. ML Kit does send Google some diagnostic data: device and app information, device identifiers, performance metrics and error codes (Google's details). Google uses it to run and improve ML Kit, does not share it with third parties, and encrypts it in transit. This happens only when you use «Inquadra il codice» (scan the code); choose «Digita il codice» (type the code) to avoid it.

4. Purchase. The app is bought on Google Play: Google handles the payment under its own notice. We receive no payment data.

Permissions

• Camera: only to read the PC's QR code.
• Notifications: to tell you when each scan arrives.
• Network (network access and state, changing the connection): to talk to the PC on the office network. When the phone is on Wi-Fi, the app uses that Wi-Fi, not mobile data.
• Foreground service («Ricevi con il telefono in tasca», optional): keeps the app connected to the PC with the screen off. Android shows a persistent notification while it runs.
• Start at boot: to resume reception after a restart, if you had turned it on.

For how long

• Scans stay on the phone for at most 30 days (the PC keeps them as before).
• When you unpair the phone, or the PC unpairs it, the app deletes the access token and the key; the scans already received stay until you delete them.
• Uninstalling the app makes Android delete all its data from the phone.

Children

The app is an office tool and is not directed at children.

Your rights

You can ask for access, rectification, erasure and portability of your data, and you can complain to the Italian data protection authority (Garante). We keep no personal data collected by the app: the data described above lives on your phone and on your organisation's PC. For ML Kit's diagnostic data, Google's notice applies. Write to giorgio.corrente@x3system.it: we answer within 30 days.

Changes

If this notice changes, the new version is published on winkie.it with its date. If the app ever started collecting new data, we would say so in the app first.