AIO INDIA - Policy & Permissions Justification

Quick facts for the reviewer

1. App purpose and core features

AIO INDIA is a local classifieds marketplace and social messaging app for India. Core, advertised features:

• Buy & sell products - listings with photos/videos, search, orders
• One-to-one and group chat - text, photos, videos, voice notes, status updates
• In-app voice/video calls, plus a call button on listings/chats
• AIO INDIA wallet (UPI top-up) for purchases
• Rewards - scratch cards, Spin & Win, referrals (+1 spin per successful referral)
• Notifications for messages, orders and incoming calls

2. Permissions at a glance

Only the permissions listed here are declared. There is no SEND_SMS, READ_SMS, READ_CALL_LOG, WRITE_CALL_LOG, ACCESS_BACKGROUND_LOCATION, READ_MEDIA_IMAGES, READ_MEDIA_VIDEO or READ_MEDIA_AUDIO in the build.

3. Permission-by-permission justification (detail)

3.1 Contacts - READ_CONTACTS

Reads device contacts on the device to show which contacts already use AIO INDIA, so the user can start a chat or create a group. Only SHA-256 hashes of normalized E.164 numbers are sent to our server for matching. The raw phonebook (names, numbers, emails, photos) is never uploaded, stored, sold or shared. Denying the permission only hides contact suggestions; manual number entry and all other features keep working. Users can also delete synced contacts from Settings.

3.2 Camera - CAMERA

Opens only on an explicit user action: taking a photo/video for a product listing, chat, status or profile, or turning on the camera in a video call. Live video is streamed peer-to-peer and is never recorded or stored by AIO INDIA.

3.3 Microphone - RECORD_AUDIO, MODIFY_AUDIO_SETTINGS

Records a voice note only while the user holds the mic button (recording stops on release) and captures mic audio during a call the user has joined. Calls and voice notes are not recorded for any other purpose; call audio is never stored. MODIFY_AUDIO_SETTINGS is used for speaker/earpiece routing during calls.

3.4 Location - ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION

Read once, in the foreground, when the user taps "Detect location" while posting/editing a product or profile address, to pre-fill pincode/city/state. The app does not track location in the background, does not build a location history, and does not request ACCESS_BACKGROUND_LOCATION. Regular address entry works without this permission.

3.5 Notifications - POST_NOTIFICATIONS

Firebase Cloud Messaging notifications for new messages, order/status updates and incoming calls. Requested once through the standard Android 13+ dialog; users can turn notifications off in Android Settings at any time.

3.6 Storage (legacy only) - READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE

Both are limited to maxSdkVersion=32 (Android 12 and below) for selecting/saving product and chat images on older devices. On Android 13+ the app uses the Android system Photo Picker and does not request broad media access (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO are absent).

4. Restricted permission: SMS (READ_SMS, SEND_SMS, RECEIVE_SMS)

Use case: As a default SMS handler, AIO INDIA can display SMS conversations, compose and send SMS (SEND_SMS), read the user's SMS inbox for display (READ_SMS), and receive incoming SMS (RECEIVE_SMS/SMS_DELIVER) when selected as default. All actions are user-initiated or required for the core default-SMS functionality.

Technical scope: SMS_DELIVER receiver is exported only with BROADCAST_SMS permission and runs only when the app is the default SMS app. SEND_SMS is used to send user-composed messages. READ_SMS is used to show existing conversations. The app does not send SMS in the background without user action, does not upload SMS content for advertising, and does not become default automatically.

User control: Becoming the default SMS app is entirely optional and initiated by the user from Settings. If the user denies/revokes or chooses another default app, SMS functionality is disabled and all other AIO INDIA features continue to work. Permissions can be revoked in Android Settings.

5. Restricted permission: Phone

5.1 READ_PHONE_STATE

Used only to detect when a normal SIM call starts or ends, so an active AIO INDIA in-app call can be automatically held (microphone/remote audio paused) and resumed. The app does not read the call log, contacts or phone number from this permission, and does not use IMEI/device identifiers.

5.2 READ_PHONE_NUMBERS

Used only on the login / SIM-select screen to detect the user's own SIM number and pre-fill the 10-digit login number, or to let the user pick which SIM number to use. It is an optional convenience: if denied, the user types the number manually and login works normally. The number is used for account login only and is not used for advertising or tracking.

5.3 CALL_PHONE and MANAGE_OWN_CALLS

CALL_PHONE places a normal phone call directly when the user taps "Phone call" on a chat or contact (ACTION_CALL); if the permission is denied the app falls back to the standard ACTION_DIAL dialer. MANAGE_OWN_CALLS lets the app manage its own WebRTC voice/video calls through a Telecom ConnectionService (audio focus, call state, system call integration). The app never becomes the default dialer and never reads the call log.

6. Foreground services (actual types in the APK)

The build declares the following foreground service types. Each service runs only while its user-visible task is active and shows the required ongoing notification.

These are the only foreground service types declared in the current manifest. The app does not use the mediaProjection, location, camera, or shortService foreground-service types.

FOREGROUND_SERVICE_MICROPHONE and FOREGROUND_SERVICE_PHONE_CALL are used only by CallForegroundService while a call is active; the app does not record calls and does not run a hidden background call service.

7. Advertising ID and library-declared permissions

AIO INDIA shows no third-party ads, has no ad SDK, and does not sell advertising data. The AD_ID permission was removed from the manifest. Play Console → App content → Advertising ID: No.

The final APK also contains normal (non-runtime) permissions added by libraries. None of them prompt the user or grant access to personal data by themselves:

These library permissions are normal (non-runtime) permissions; none of them prompt the user or grant access to personal data by themselves. AD_ID was removed in the 5.6.46 build.

8. Data Safety answers (Play Console form)

Security practices: data encrypted in transit = Yes (HTTPS/TLS); users can request deletion = Yes; committed to Play Families Policy = No; independent security review = No; data sold = No; data used for advertising = No.

Chat messages, photos and voice notes are delivered only to the recipients the user chooses. Order address is used for delivery (seller/courier) as required to fulfil the user's order. This is not sale of data.

9. Security, retention and deletion

• Transport: HTTPS/TLS only; cleartext traffic is disabled in the manifest.
• Auth: token-based sessions; device fingerprint + idempotency keys for wallet/reward requests.
• Contacts: raw phonebook never leaves the device; only SHA-256 hashes are sent for matching.
• Retention: account data is kept while the account is active. Order, wallet, tax and fraud-prevention records are kept as required by law; other personal data is deleted after an approved deletion request.
• No sale of data: AIO INDIA does not sell personal data and does not share it for advertising.

Account deletion

In-app (recommended): Settings → Delete My Account → confirm. The account and associated personal data (profile, listings, chat messages, wallet and order records) are deleted immediately from the live database. Backup copies are purged within 30 days.

Email fallback: write to am4u.listen@gmail.com from your registered mobile number (or mention it in the email). We verify the request and complete the same deletion within 30 days.

Play Console → Data safety → Account deletion URL: https://aioapi.facebookindia.in/policy-justification.html#account-deletion

10. Reviewer demo (2-3 minutes)

1. Contacts: Chat tab → contact picker → select a contact → chat opens (matched by hash).
2. Camera/mic: Chat → attach → camera/photo picker → send; hold mic → voice note.
3. Location: Post Product → address → "Detect location" → pincode/city/state auto-filled.
4. Default SMS app: Settings → "Make AIO your SMS app" → tap and accept the system role dialog. Once set as default, AIO can show conversations, send/receive SMS. If another app is set as default, this is disabled; all other features remain available.
5. Phone state: start an in-app call → receive a SIM call → in-app call auto-holds and resumes.
6. Phone numbers: log out → login screen → "Detect my number" → SIM number pre-fills. Deny → type manually.
7. Calls: chat/product → call button → in-app voice/video call.

A demo account or live walkthrough can be provided on request. App is India-focused; numbers are normalized to +91.

11. Play Console form answers - checklist