Privacy Policy FidiBox

Data controller

SAS Asarus

90 bis rue de Fougères, 35700 Rennes

sas.asarus.bzh@gmail.com

1. About this application

FidiBox is an Android mobile application built with Flutter by Asarus, designed to keep your loyalty cards (barcodes and QR codes) directly on your phone.

• App name: FidiBox
• Publisher: SAS Asarus
• Android package identifier: com.asarus.fidibox
• Platform: Android (Flutter)

2. Data we collect directly

FidiBox has no user account, no server and no synchronization. As the publisher, Asarus does not collect, receive or store any personal data about you.

3. Offline operation and local storage

Your loyalty cards (barcodes, QR codes) are stored only locally on your device, using the local Hive database. They leave your phone only if you yourself trigger a backup export.

4. Importing cards

FidiBox lets you import cards from several sources: a Catima export, a Fidme archive, photos from your gallery, or manual entry. This import is processed locally on your device: the files and photos used are neither sent to nor stored on a server.

5. Backup and export

You can export a backup of your cards at any time. This export uses Android's native share system: you choose where to send the file (email, personal cloud storage, etc.). Asarus never has access to this file.

6. Android permissions used

FidiBox requests the following permissions:

• Camera (CAMERA): to scan the barcodes and QR codes of your cards.
• Network access (INTERNET, ACCESS_NETWORK_STATE): to load the ads shown in the app.
• Biometrics (USE_BIOMETRIC, USE_FINGERPRINT): to lock access to the app with your fingerprint or face recognition, if you enable this option.
• Advertising permissions (ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_TOPICS): standard permissions on recent Android versions, used by the Google AdMob advertising SDK.

7. Advertising (AdMob) and in-app purchase

FidiBox displays a banner ad provided by Google AdMob and offers a single one-time in-app purchase (no subscription) to remove ads. To serve and measure these ads, the AdMob SDK may collect advertising identifiers and standard usage data, as described in Google's privacy policy.

8. Biometric lock

The biometric lock relies entirely on the security mechanisms provided by the Android system. Neither FidiBox nor Asarus has access to your biometric data, which remains managed by your device.

9. Sharing data with third parties

Other than the Google AdMob SDK mentioned above, FidiBox does not share any data with third parties. No data is sold.

10. Security

Your cards are stored locally on your device. Their protection therefore also depends on your phone's own security measures (screen lock, biometrics). We recommend enabling the app lock if your device is shared.

11. Your rights

Since Asarus does not collect or retain any data about you, there is no processing on our part over which to exercise a right of access, rectification or erasure: your data stays under your sole control, on your device. To delete it, use the app's delete or archive features, or uninstall it. For any question, you can write to us at the address above.

12. Changes to this policy

This policy may change, in particular when a feature is added. Any significant change will be indicated on this page, with an updated date.