Part I — Privacy Policy
Core Privacy Commitment
Gpad operates 100% offline and locally on your device. We do not require account registration, operate remote user servers, embed advertising or tracking SDKs, record keystrokes, or sell or share personal data with third parties.
1. Scope & Developer Information
This Privacy Policy applies to the Android mobile application Gpad (package ID com.dfound.gpad), developed and published by DFound ("we", "our", or "us"). Gpad maps external USB OTG or Bluetooth game controllers and physical keyboards to on-screen touch inputs for Android devices (Android 11 / API 30 and newer).
2. Data We Access and How It Is Processed
- Personal Information: Gpad does not collect names, email addresses, phone numbers, location data, contacts, photos, or advertising identifiers.
- Hardware Input Events (Zero Keystroke Logging): Key presses, D-Pad presses, analog thumbstick coordinates, and trigger inputs from connected controllers or keyboards are processed transiently in volatile memory (RAM) solely to dispatch real-time touch gestures on your screen. Gpad does not log, store, or transmit what you type or press.
- User Control Profiles & Preferences: Game profiles (control positions, sizes, opacity, trigger modes such as Hold/Tap/Turbo/Toggle, dead-zone settings, and optional target package names), theme choices, and language preferences are stored strictly locally in your device's private sandboxed app storage (Room SQLite database and Android DataStore / SharedPreferences).
- On-Device ADB Pairing Keys: When you use On-Device Wireless Debugging pairing, Gpad generates a local RSA key pair and self-signed X.509 certificate inside its private app directory solely to authenticate local ADB connections with your own Android system. These cryptographic keys never leave your device.
- Optional Profile JSON Export / Import: When you explicitly copy or paste a profile JSON configuration, that action is strictly manual and stays on your device clipboard unless you choose to share it yourself.
- Optional Profile Package Matching: Game profiles may store a user-specified target package identifier locally to support in-memory profile scoping or switching when provided during a session. Gpad does not request installed-app inventory permissions (
QUERY_ALL_PACKAGESorPACKAGE_USAGE_STATS) and does not log or transmit app usage history.
3. No Accessibility Service Data Collection
Gpad does not declare or use Android's AccessibilityService API (BIND_ACCESSIBILITY_SERVICE) and does not inspect on-screen text, passwords, notifications, or UI content from third-party applications. Touch dispatching is executed locally via an on-device ADB Shell daemon (activated by you via Wireless Debugging or optional Shizuku) over Android's local interface.
4. Android Permissions Explained
Gpad requests only the permissions required for its core controller-mapping functionality:
| Permission | Purpose | Off-Device Transmission |
|---|---|---|
SYSTEM_ALERT_WINDOW(Display Over Other Apps) |
Renders the floating control overlay, key labels, and live overlay layout editor on top of games. | None (does not capture screen pixels) |
FOREGROUND_SERVICE & FOREGROUND_SERVICE_SPECIAL_USE |
Keeps the user-started floating overlay and touch mapping active reliably during gameplay with an ongoing notification. | None |
POST_NOTIFICATIONS |
Shows active overlay controls and the optional notification-shade 6-digit pairing input while Developer Options is open. | None |
INTERNET, ACCESS_NETWORK_STATE & ACCESS_LOCAL_NETWORK |
Required by Android for local mDNS service discovery (_adb-tls-pairing._tcp, _adb-tls-connect._tcp) and local socket communication with the phone's own Wireless Debugging daemon. |
None (strictly local loopback / local network pairing) |
VIBRATE |
Provides optional haptic feedback on supported controllers and the device. | None |
5. Third-Party SDKs & Data Sharing
- No Ads or Trackers: Gpad contains no third-party advertising networks, behavioral analytics trackers, or social SDKs.
- No Data Selling or Sharing: Because Gpad collects no user data onto external servers, we never sell, rent, or transfer personal information to third parties.
- Optional Shizuku Integration: If you already use Shizuku on your device and grant Gpad permission within Shizuku, Gpad communicates locally via Shizuku's IPC binder strictly to start the local ADB Shell daemon.
6. Data Retention & Deletion
- In-App Control: You can delete individual profiles or reset settings inside Gpad at any time.
- Complete Local Removal: Clearing Gpad's app storage in Android Settings or uninstalling the application immediately and permanently deletes all saved profiles, settings, and local ADB pairing keys.
- Support Emails: If you email duanelucky97@gmail.com for technical support, your message is used only to respond to your inquiry and will be deleted upon request within 30 days.
7. Children's Privacy
Gpad is a general-audience device utility and is not directed at children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.