Privacy Policy
For NFC Studio (com.hienao.nfc.studio), including the main app's Pro trial and lifetime in-app purchase from version 1.1.10, and legacy NFC Studio Pro (com.hienao.nfc.studio.pro). Hienao is the developer.
NFC Studio does not require an account. NFC tag identifiers, content, raw blocks and authentication information are processed locally and are not included in analytics or crash-reporting events.
1. Data processed on your device
The apps may process NFC tag identifiers, technologies, NDEF records, raw tag data, operation results, templates, preferences and authentication information that you choose to save. This is necessary to read, analyze, edit, write, compare or copy supported tags and to provide history and templates.
- Scan and write history has a 30-day retention period; older entries are removed when the app runs its startup cleanup.
- Templates and preferences remain until you delete them, clear app data or uninstall the app.
- Names, categories and notes in My Tags remain on your device until you delete them, clear app data or uninstall the app. A digest of the tag UID is saved to recognize the same tag again.
- Saved authentication information is available with Pro access, is encrypted using Android Keystore-backed AES-GCM, and remains until deletion, clearing app data or uninstalling.
- Automatic Android backup is disabled. NFC content leaves the device only when you explicitly export it through Android's document picker or use NFC to write to a tag.
If you choose QR import, the camera preview and QR content are processed on your device with the bundled ML Kit barcode model. Camera images are not uploaded. Google ML Kit may transmit app, device and scanning performance diagnostics, including a per-installation identifier, as described below.
2. Usage analytics and crash reporting
The main app and legacy Pro app offer optional Google Firebase Analytics and Firebase Crashlytics. Usage analytics and crash reporting are disabled by default. The onboarding privacy step explains both data flows and lets you opt in to each independently; you can change either choice later in Settings without losing app functionality. When enabled, Google may process an app-instance or installation identifier, masked IP address and derived approximate location, app lifecycle and screen views, fixed event fields such as edition, feature, NFC protocol category and operation outcome, and crash information such as stack traces, relevant app state and device metadata. Analytics events may also appear as breadcrumbs before a crash.
The app deliberately excludes NFC tag UIDs, NDEF content, raw tag blocks, saved credential names, passwords, keys, exported file names and other free-form input from these events and crash custom keys. Advertising ID collection and ad-personalization signals are disabled for Firebase Analytics. Data is encrypted in transit.
The bundled Google ML Kit barcode scanner may also send app and device information, a per-installation identifier, configuration and performance metrics, and scan event or error codes to Google for diagnostics and usage analytics. Google states that these transfers are encrypted and are not shared with third parties. QR images and decoded content are not listed among the data collected by this SDK.
When you enable usage analytics, Firebase Analytics may also automatically collect in-app purchase events, including product ID, product name, price and currency, for usage and revenue analysis. This SDK behavior can apply without a custom purchase-event call in our code. Disabling usage analytics stops future Analytics collection; it does not erase data already processed by Google. We do not add purchase tokens or signed receipts to custom analytics or crash fields.
3. Advertising and consent
The main app's free tier, including older free releases, uses Google AdMob and Google's User Messaging Platform for advertising and consent where required. Depending on region, choices and device settings, Google may process IP address or general location, app interactions, diagnostics, advertising or device identifiers for advertising, analytics and fraud prevention. Available ad privacy choices can be revisited in Settings. Hienao does not receive NFC tag content through AdMob.
Valid Pro trial, lifetime purchase, annual subscription or access-code entitlement suppresses banner display in the current main app. This does not disable separately enabled Analytics or Crashlytics, or erase data already processed by an ad/consent service. The legacy separate Pro app does not include the advertising SDK or its advertising permissions.
4. Pro trial, lifetime purchase, annual subscription and legacy licensing
From version 1.1.10, the main app offers an optional seven-day Pro trial that starts only when you activate it. No payment method, subscription or automatic charge is started by the trial. The app stores elapsed trial time, device wall-clock/monotonic-clock readings and a boot counter locally to calculate expiry and detect clock changes. This trial record is not sent to Hienao, exported with NFC data or included in automatic backup or device transfer. It remains until app data is cleared or the app is uninstalled; clearing data can reset trial eligibility because there is no account-based trial server.
Permanent Pro is a non-consumable one-time Google Play purchase, not an automatically renewing subscription. Google Play processes payment and may process account, device, purchase and diagnostic information under Google's policies. The app receives signed purchase data and a signature, which may include product ID, order ID, purchase time, status and purchase token. It verifies these, acknowledges delivery through Google Play, and caches the signed data in app-private storage excluded from backup and device transfer. Hienao operates no separate payment/account backend and does not receive your payment-card details. The optional Firebase purchase analytics described in section 2 is a separate Google data flow.
From version 1.1.14, the main app also offers an optional annual Pro subscription through Google Play. It unlocks the same Pro features and removes banner ads while active. It is billed annually and renews automatically unless canceled; the price and terms are shown before purchase. You can manage or cancel it in Google Play, with access continuing until the paid period ends. The app verifies signed subscription purchase data and acknowledges delivery through Google Play. It does not save annual receipts as permanent purchase proofs: annual access is checked with Play after app restart, when returning to the foreground, and periodically while active. Failed queries preserve access already verified in the current process; a successful query showing no active subscription removes annual access. Google Play processes payment and subscription data under its policies. Hienao has no separate subscription backend and does not receive payment-card details. The local seven-day trial does not start a paid subscription.
The purchase cache is retained while it supports the entitlement and removed when a successful Google Play query confirms that the product is no longer owned, or when app data is cleared or the app is uninstalled. Google Play's own purchase records are not deleted by clearing local app data. You can restore a valid purchase using the same Google Play account. Refund/revocation is applied after a successful purchase query; an offline device cannot detect it immediately. Expiry or loss of Pro access does not itself delete saved NFC history, templates or credentials.
From version 1.1.12, you can open Google Play to redeem its promotional codes; Google processes redemption, and the app restores the resulting purchase through the same verified purchase flow. Separately, a Pro access code is validated entirely on-device against a stored verification fingerprint. Only a local activation proof is retained in app-private storage excluded from backup and device transfer. Access codes and proofs are not sent to Hienao, added to custom analytics or crash reports, or exported with NFC data. In version 1.1.12, activation has no time limit. From version 1.1.13, each access-code activation lasts four hours; the same supported code can be entered again after expiry. The app also retains elapsed access time, wall-clock/monotonic-clock readings and a boot counter locally to calculate expiry and detect clock changes. These timing records have the same backup, export and transmission exclusions as the activation proof. Older timeless proofs require code re-entry after upgrading. Clearing app data or uninstalling removes the proof and timing records. A retired code can stop working in a later app update.
Legacy NFC Studio Pro uses Google Play licensing and receives a signed licensing response to verify its separate purchase entitlement.
5. Permissions and Google Play services
NFC permission communicates with nearby tags. Camera permission is requested only for QR scanning; pasting is available instead. Internet and network-state permissions support the Google services described above, including billing in the current main app and licensing in legacy Pro. The main app retains advertising-related permissions even when Pro suppresses its banner; legacy separate Pro has no advertising permissions. To let you choose an installed app for an Android Application Record, the main app queries launcher apps locally; this app list is not uploaded to Hienao or included in custom telemetry.
The app may open Google Play's native in-app review flow. Google Play handles the rating and optional review text under its policies; the app does not receive or upload your submitted rating or review text to an Hienao service.
6. Sharing, sale and security
Hienao does not sell your personal data and does not operate a server that receives your NFC tag data. Data may be processed by Google only for the services described above. Local security depends in part on Android and your device security. No method of storage or transmission is guaranteed to be completely secure.
7. Children
The apps are general utility tools and are not directed to children. Hienao does not knowingly collect personal information from children through an Hienao-operated server.
8. This website
This support site is hosted by Cloudflare. Cloudflare may process request metadata such as IP address, browser information and security diagnostics to deliver and protect the site.
9. Your choices
You can separately opt in to or disable future usage analytics and crash reporting during onboarding or in Settings, delete history, templates and saved authentication information in the app, clear all app data in Android settings, uninstall the app, manage ad privacy choices in the free edition, or control exported files through the storage provider you select.
10. Changes and contact
This policy may be updated when app features, legal requirements or third-party services change. Questions or privacy requests can be sent to [email protected].