Official Legal Document

Privacy Policy for MatFlow

1. Architecture & Data Storage Model

MatFlow is engineered as an offline-first artisan productivity tool:

• Local SQLite Room Database: All raw materials, recipe hierarchies, stock movements, and batch production histories are stored locally inside the application sandbox (matflow_database). This data never transfers to TKM Soft.
• Optional Google Drive Cloud Backup: MatFlow allows users to voluntarily connect their own personal Google Drive account to backup and restore encrypted database snapshots. These files reside exclusively in your personal Google Drive (AppData folder) and are protected by your Google account credentials. TKM Soft never accesses, copies, or views your Google Drive backup files.
• Zero Account Requirement: MatFlow requires no email registration, username, or cloud password to manage recipes or stock.

2. Android Device Permissions & Technical Justifications

In adherence to Google Play developer standards and Android 15 runtime permission guidelines, MatFlow requests only the minimum hardware capabilities necessary to function:

3. Third-Party Services & Telemetry

To provide optional monetization, secure digital transactions, and Google Play Android Vitals compliance, MatFlow integrates the following verified Google developer SDKs:

• Google Play In-App Billing: Handles transactions for the optional "MatFlow Pro" license (matflow_pro). All payment credentials and financial transactions are securely managed by Google. TKM Soft never accesses or stores credit card numbers, bank accounts, or billing addresses.
• Google AdMob (Rewarded Video Only): MatFlow strictly prohibits disruptive banner ads or forced popups. Rewarded video advertisements are offered purely on a voluntary basis to grant temporary bonus material or export allowances in the free tier. AdMob may process device identifiers (such as the standard Android Advertising ID - AD_ID) and diagnostic signals in accordance with the Google Advertising Privacy Policy.
• Firebase Analytics & Crashlytics: Collects aggregated, non-personally identifiable diagnostic events, app performance metrics, and stack traces to maintain our 99.9%+ crash-free stability target. No recipe data, material names, or business values are ever included in diagnostic logs.
• Google Drive API: If you explicitly initiate a cloud backup, the official Google Drive client library establishes an authenticated connection directly between your device and Google's servers. TKM Soft acts solely as client software and holds no intermediary servers.

4. Data Retention, Export & Complete Destruction

We believe in absolute user data sovereignty:

• Local Data Deletion: You can completely and irreversibly wipe all inventory records, custom recipes, and batch histories at any moment by using the in-app "Reset Database" option or clearing app storage in Android Settings. Uninstalling MatFlow removes all local SQLite data immediately.
• Cloud Backup Destruction: If you created Google Drive backups, you retain total ownership. You can permanently delete the backup archive directly through Google Drive or revoke MatFlow's access via your Google Account Security Permissions.
• CSV Export: You can export your inventory and production logs to standard CSV files at any time via Android FileProvider for external backup or migration.

5. Children's Privacy

MatFlow is an industrial and artisan productivity application designed for adults, craftspeople, and workshop operators. It is not directed toward children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly solicit or collect personal information from children.

6. International Data Protection Rights (GDPR & CCPA)

Under regulations including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

• Right to Access & Portability: Because your data resides solely on your device, you have instant access to export your data via built-in CSV generators at any time.
• Right to Erasure ("Right to Be Forgotten"): Deleting local storage or uninstalling the app permanently purges all stored information without needing to contact us.
• Right to Object: You can opt out of personalized advertisements via your Android device settings (Settings → Google → Ads → Delete advertising ID).

7. Security Safeguards

MatFlow enforces enterprise-grade application security:

• Strict Transport Security: Cleartext HTTP traffic is completely prohibited (usesCleartextTraffic="false"). All network communications with Google APIs use TLS 1.3 encryption.
• R8/ProGuard Code Hardening: Production builds undergo rigorous R8 obfuscation and resource shrinking to protect internal database schemas and security boundaries from tampering.

8. Policy Updates & Contact

We may periodically update this policy to reflect new Android OS specifications or feature additions. Significant changes will be noted on this webpage.

For questions or support regarding this Privacy Policy or MatFlow data practices, please contact:

TKM Soft — Burkan Emre Tokman
Email: burkanemretokman@gmail.com
Website: tkmsoft.com