Your boards stay with you.

01Who we are

WhiteBoard (the "App") is an Android application published under the package identifier studio.lumen.board. It provides an infinite-canvas whiteboard with drawing, note-taking, shapes, page templates, document scanning, export, and optional real-time collaboration over your local network.

This Privacy Policy describes how the App handles information. By installing or using the App, you agree to the practices described here. If you do not agree, please uninstall the App.

02Data safety summary

This section mirrors the Google Play Data Safety form so that the disclosures on our Play Store listing match this Privacy Policy line-for-line. WhiteBoard does not collect or share any user data through the App itself.

Data collected & shared

Security practices

About the Encrypted in transit answer: because the App does not transmit any first-party data to any server, this field does not apply. The only network traffic the App generates is the optional Live Session, which is direct device-to-device on your local Wi-Fi network. If you configure an external WebSocket endpoint, we recommend you only connect to endpoints that support wss:// (TLS) — see section 12.

Third-party SDKs included in the App

• Google ML Kit Document Scanner (part of Google Play Services, already on-device). Used only when you tap the document-scanner button; processes images on-device per Google's ML Kit terms.
• AndroidX / Jetpack Compose libraries. UI framework only. No data collection.
• Kotlin Coroutines, Serialization, DataStore. Local storage and concurrency only. No data collection.
• Java-WebSocket. Used to run the optional Live Session peer-to-peer server. No data collection.

The App does not include any first-party analytics, attribution, advertising, marketing, or crash-reporting SDK.

03The data we don't collect

To be unambiguous, the App does not collect any of the following:

• Personally identifiable information. No name, email, phone number, address, account ID, social handle, photo, or biometric data.
• Device identifiers. No persistent device identifier such as Android ID, IMEI, or MAC address.
• Usage analytics. No first-party screen views, button taps, session timings, feature flags, A/B exposure, or other behavioural events.
• Crash and performance reporters. No crash stack traces, ANR reports, or performance metrics are sent off-device.
• Location. Neither precise nor approximate location is requested or used.
• Contacts, calendar, SMS, call logs. The App does not request access to any of these.
• Camera or microphone for in-App capture. The App itself does not record audio or take photos.

There is no first-party server that the App pings or telemeters to. There is no embedded first-party analytics, attribution, or marketing SDK.

04What stays on your device

Everything you create in the App lives entirely on your device, inside the App's private storage that Android isolates from other apps. Specifically:

• Boards and pages (your drawings, shapes, text, images, bookmarks) are stored as JSON files under the App's private files directory.
• Imported images (from the Photo Picker or document scanner) are copied into the App's private media folder.
• App settings (theme, default brush, default page background, confirmations) are stored in Android's Jetpack DataStore, which is also part of the App's private storage.
• The first-launch onboarding flag is stored in a single SharedPreferences key so onboarding only shows once.

Android automatically wipes all of this storage when you uninstall the App or use Settings → Apps → WhiteBoard → Clear storage.

05Permissions we request and why

The App declares only two Android permissions in its manifest. Each is used only for its stated purpose and never repurposed for any kind of tracking.

The App does not request the Camera, Storage, Location, Contacts, SMS, Microphone, or any other dangerous-class Android permission. To pick photos, the App uses the modern Android Photo Picker, which gives the App scoped, one-shot access to the specific image you tap — no permission prompt required.

06Live Sessions — your only network feature

Live Sessions are entirely opt-in. You start one by tapping Live session in the board overflow menu. The App can operate in either of two modes:

A. Local Wi-Fi (default)

The App starts a WebSocket server on your device, advertises a private RFC-1918 IPv4 address (e.g. 192.168.x.y), and shows you a join code or shareable whiteboard://join?… URL. Up to 8 peers on the same Wi-Fi network can join.

While the session is active, the following are transmitted between peers:

• Your IP address on the local network (necessary to establish the WebSocket connection).
• The drawing operations you make (strokes, shapes, text, image references), in real time.
• An ephemeral, randomly chosen display colour for cursor indicators.

No persistent identifier is exchanged. When every peer disconnects and you stop the session, the connection ends. The session does not pass through any cloud or intermediary — peers talk directly to each other on your LAN.

B. External WebSocket server (advanced, optional)

If — and only if — you go into Settings, enable "Real-time collaboration," and enter your own WebSocket endpoint (for example, a self-hosted server you operate), drawing operations will be sent to that endpoint instead. The App does not ship a default endpoint and no third-party endpoint is used.

We have no visibility into who you choose to connect to or what they do with the traffic. If you connect to a server operated by a third party, that party's privacy terms apply — please read them.

07Document Scanner

The optional document scanner is powered by Google's ML Kit Document Scanner, which is part of Google Play Services already installed on your Android device.

When you tap the scanner button, Android hands off control to the on-device Google Play Services scanner activity. According to Google's documentation, the scanner processes images entirely on-device and does not upload them. The App only receives back the resulting cropped images (or PDF), which are stored in the App's private storage like any other imported image.

By using the scanner, you also accept Google's Privacy Policy and ML Kit terms.

08Children's privacy

The App is suitable for users of all ages. It does not knowingly collect personal information from anyone, including children under 13 (under 16 in the EEA, under 18 in some jurisdictions). Because the App collects nothing, it inherently complies with the Children's Online Privacy Protection Act (COPPA), the GDPR's child-data provisions, and similar laws.

Parents and guardians can let children use the App with confidence. There is no chat, no social feed, no link out to the open web, and no in-app purchases.

09Your rights

Because we do not collect or store any of your personal information on any server, there is nothing for us to look up, export, correct, or delete on your behalf. Even so, you have the following rights at any time:

• Access & portability. Open any board in the App and export it as PDF, PNG, or JPEG.
• Erasure. Uninstall the App, or use Settings → Apps → WhiteBoard → Clear storage. Android will remove every byte the App ever wrote.
• Restriction. Keep the App offline — every feature except Live Sessions and the Photo Picker works with no network at all.
• Objection. Stop using the App at any time; there is no account to close.

Residents of California (CCPA/CPRA), the EEA and UK (GDPR), Brazil (LGPD), and similar jurisdictions enjoy the rights set out in their respective laws. Because we process no personal data, those rights are honoured by default. You may still reach out using the contact details below to confirm this in writing.

10Data retention

Since no personal data leaves your device, there is no retention period at our end — we never had your data. On your device, files persist until you delete a board, clear App storage, or uninstall.

11International users

The App can be downloaded and used worldwide. Because no personal information is transmitted off your device, there is no cross-border data transfer to disclose.

12Security

Android isolates the App's storage from other apps via the per-app sandbox. Live Session WebSocket connections are direct device-to-device on your local network. External WebSocket endpoints you configure should support wss:// (TLS); we recommend you only connect to endpoints that do.

No software is perfectly secure. If you discover a security issue, please report it to us at the contact address below.

13Changes to this policy

We may update this Privacy Policy from time to time — for example, to clarify a point or to describe a new feature. When we do, we will update the "Last updated" date at the top of this page. Material changes will also be surfaced inside the App, and (where required by law) we will obtain your fresh consent before the change takes effect.

14Contact us

Questions about this Privacy Policy or about how WhiteBoard handles information? Reach the team directly: