Privacy, in plain sight.

1. Who we are and what this policy covers

This policy describes data handling by the Android app Media Converter (com.codalivo.mediaconverter) and this privacy policy website.

The app has no account system. Local conversion works without agreeing to optional Google Analytics for Firebase or Firebase Crashlytics. Both services are disabled by default and have separate controls. Releases with advertising use Google AdMob; advertising data and choices are separate from these optional reports.

2. Files and information on your device

The app accesses files you select in Android’s file picker or share with it. It uses their media content and metadata to inspect and convert them. It stores file references, access permissions, settings, job history, progress, and temporary recovery files locally. A file shared with temporary access may be copied into app-private storage so conversion can continue later.

Original files are kept unchanged. Converted files are saved to the MediaConverter album or a location you choose. Outputs and temporary files can contain media metadata; consider this before sharing them.

Android 9 requires storage permission to save to the public album. Newer versions save app-created outputs without full-library access. Notification permission supports progress and conversion controls. Battery, charging, thermal and storage information is used locally to manage processing. The app does not need contacts, microphone, camera or precise-location access for conversion.

On Android 11 and later, up to 12 local crash or unresponsive-app summaries are retained for seven days. They contain a time, process category and failure category, without media or file locations, and are not uploaded by the app.

3. Optional usage statistics

If you enable usage statistics, Google Analytics for Firebase receives conversion categories, output formats and codecs, power and quality choices, transformation flags, outcomes and broad processing-time ranges. It also processes app and device information, session data, an app-instance identifier and network information such as IP addresses. We use this information to understand which features work well and improve the app.

We do not add media, filenames, paths, file locations, job identifiers or media metadata to analytics. Our Analytics configuration disables advertising identifier collection, advertising personalization and automatic screen reporting. Enabling statistics does not grant permission for personalized ads.

4. Optional crash reports

If you enable crash reports, Firebase Crashlytics processes technical failures, stack traces, app state, device and app details, installation and session identifiers, and associated network information to help us diagnose reliability problems. Reports can be sent on a later app launch.

We sanitize app-reported exception messages and do not deliberately attach media or file locations. Native crash dumps and unresponsive-app traces can contain system diagnostics that cannot be fully redacted. Android and Google Play may also collect diagnostics independently under your device and account settings.

Google’s handling is described in its Firebase privacy information and Privacy Policy.

5. Google AdMob advertising

In releases that display ads, Google AdMob and its advertising partners process information to deliver and measure advertising, maintain their services and prevent fraud. This can include IP address and approximate location inferred from it, advertising or other device identifiers, app and device details, ad impressions and interactions, and performance diagnostics. We do not supply your selected media or filenames to advertising services.

Ad personalization depends on your applicable consent choices and the advertising configuration. Where required, a separate advertising consent message explains the available options before ads are requested. Advertising privacy options let you revisit those choices where required. Non-personalized or limited ads can still involve data processing; disabling usage statistics or crash reports does not disable advertising data processing.

You can also reset or delete your advertising ID in Android settings. Read How Google uses information for advertising and Google’s Privacy Policy.

6. Other apps, providers and website hosting

Choosing Open or Share gives the receiving app temporary access to the chosen file. If you select a cloud-backed file or destination provider, that provider may download or upload the file. Those services operate under their own policies. Local processing in Media Converter does not prevent a provider or receiving app you choose from transferring files.

Google and applicable advertising partners receive the service data described above. We may disclose information we hold when required by law or to protect security and legal rights. We do not sell your media. Google and other providers may process service data outside your country, using safeguards described in their policies and applicable agreements.

This static website is hosted by Cloudflare. Visiting it sends normal connection information, such as your IP address, requested page and browser information, to the host for delivery and security. The page contains no analytics scripts, advertising scripts, contact forms or embedded third-party media. See Cloudflare’s Privacy Policy.

We use Android’s storage access controls for app-private data and encrypted HTTPS/TLS transport for online service data. Outputs saved to a public album are governed by Android permissions and the access you grant to other apps.

If you contact us, we receive the information you include and use it to answer your request. Do not send private media unless it is necessary and you intend to share it.

7. Retention and deletion

Local history and preferences remain until you remove them or clear app storage. Recovery files support interrupted jobs. Clearing app storage or uninstalling removes app-private settings, history, imported copies, recovery files and local summaries. App-private data is excluded from Android backup and device transfer. Public output files remain until you delete them using your file manager. Removing a conversion record does not delete its output.

Analytics event data is retained for [ANALYTICS RETENTION PERIOD]. Crashlytics and advertising data follow the retention rules for those services, described in their privacy documentation and our configured service settings. Support correspondence is kept for [SUPPORT RETENTION PERIOD], unless a longer period is legally required.

Turning optional sharing off stops new app collection, clears queued usage events and requests deletion of unsent crash reports. It cannot recall an upload already underway or erase information already received by Google. Contact us about deletion of data we control. Receiving apps and cloud providers manage their own copies.

8. Your choices and privacy rights

At startup, usage statistics and crash reports initially show Off. Tap Allow both to enable both, or adjust the options and tap Save choices to keep the selections shown. Saving with both Off declines both. Selecting an option alone does not enable collection; your response must be saved successfully. Change these choices at any time in Settings. Conversion remains available with both off. Advertising consent is handled separately and is not granted by accepting optional reports or using the app.

Where consent is required, we rely on your consent for optional statistics, crash reporting and relevant advertising processing. Necessary local processing provides the conversion you request; security, fraud prevention and responding to inquiries may rely on legitimate interests or legal obligations where applicable.

Depending on your location, you may have rights to access, correct, delete or receive a copy of personal data, restrict or object to processing, withdraw consent, or complain to a data protection authority. Contact the privacy address above to make a request. We may need proportionate information to verify it. We do not collect extra identifying data just to link you to anonymous or pseudonymous reports.

The app is a general-purpose media tool and is not directed at children below the age at which they can independently consent to personal data processing in their jurisdiction. If you believe a child has supplied personal information to us, contact us.

9. Contact and policy changes

For privacy questions or requests, contact support@codalivo.com. We update this page when data practices change and revise the effective date. Material changes requiring a new choice will be explained in the app and consent requested where applicable.