🔒 Privacy Policy

How the App Works

DiashowDL is a cross-platform slideshow player for iOS, Android, macOS, Windows and Linux. You compose a "show" — a sequence of slides — and play it on the device or project it to a second screen on your local network.

• Supported slide types: images, video, PDF pages, Lottie animations and embedded web / HTML content
• Works offline: playing your own shows requires no internet connection
• Self-contained archives: shows are packaged as .ddlz files you can move freely between your devices
• Optional Remote Presenter Mode: communicates only between two of your own devices on the same Wi-Fi network
• Optional weather widget: fetches public weather data from Open-Meteo when you add it to a slide

Network Connections

The app contacts only the destinations listed below. There is no analytics endpoint, no crash reporting, no telemetry, no advertising network, no remote configuration service and no push-notification service.

• https://flutterdev.at/static/diashow/ — demo / example shows. The app downloads media files from this static path when you open a bundled example show. No request body, no cookies, no authentication, no personal data is sent; the only information transmitted is the standard HTTPS request line (URL of the asset) and your IP address (visible to any web server by virtue of TCP/IP). Server access logs are not correlated with users.
• https://geocoding-api.open-meteo.com and https://api.open-meteo.com — public weather APIs operated by Open-Meteo. These are called only when you explicitly add a weather widget to a slide. The only data sent is the location string (city / place name) you typed and the latitude / longitude derived from it. No account, no API key, no personal identifiers are sent. Open-Meteo's own privacy policy applies to that service.
• Local network only — Remote Presenter Mode: a TLS WebSocket on TCP port 9130 plus a UDP discovery responder on port 9131, used only between your own devices on the same Wi-Fi (RFC 1918 / loopback addresses). The connection is authenticated with a bearer token and secured with a device-unique self-signed RSA certificate generated on first run. No data leaves your local network.
• Optional environment-sensor widgets: temperature, humidity, CO₂ or IAQ readings are fetched over HTTPS from your own sensor on your LAN — no internet call, no third party.

Data Storage

All data the app keeps is stored exclusively on your device:

• App preferences (SharedPreferences): language, server name, cache and playback settings
• Secure storage (iOS Keychain / Android EncryptedSharedPreferences): the locally generated licence key, the bearer auth token used by Remote Presenter Mode, and the store-receipt fields returned by Apple / Google after the in-app purchase
• App support directory: your own shows and cached media, plus the device-unique self-signed SSL key and certificate used by Remote Presenter Mode

Important: All of this data is stored exclusively on your device and is never transmitted to our servers or any third party. You can remove it at any time by uninstalling the app.

Permissions

The app requests only the permissions it needs for the features you use, grouped by platform:

iOS

• NSPhotoLibraryUsageDescription: requested only when you tap "import from photos" while editing a show
• No camera, microphone, location, contacts, Bluetooth, calendar or HealthKit usage

macOS

• App sandbox enabled
• Outbound network client only
• User-selected files and app-scope bookmarks for picking and remembering folders that hold your media and .ddlz archives
• Photos library for the same purpose as iOS

Android

• INTERNET: local-network sync and the optional weather widget
• com.android.vending.BILLING: Google Play Billing for the single in-app purchase
• READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_VISUAL_USER_SELECTED: importing your own photos / videos into a show (Android 13+, with the partial-selection API on Android 14+)

The accelerometer is read via the sensors_plus package for gesture control during a show; sensor values stay on the device and are never transmitted.

In-App Purchase

The app is free to download and fully functional without payment. There is one in-app purchase per platform (StoreKit on iOS, Google Play Billing on Android). When you complete the purchase, the receipt fields returned by the store are saved locally in secure storage so the recurring "unlicensed" reminder slide stops appearing during playback. No features are gated behind the purchase. Payment processing is handled entirely by Apple or Google according to their own privacy policies; the app itself never sees your payment information.

Third-Party Services

DiashowDL relies on a small, explicit set of third-party services:

• Apple App Store / Google Play (StoreKit / Play Billing): for the in-app purchase. Subject to Apple's and Google's own privacy policies.
• Open-Meteo (open-meteo.com): only when you add a weather widget to a slide. No account; only the location string is sent.
• Static asset host flutterdev.at: for downloading the bundled demo show media. Operated by the developer; standard web-server access logs only, not correlated with users.

The app does not include Firebase, Sentry, Crashlytics, Google Analytics, Facebook SDK, AdMob, Branch, AppsFlyer, IDFA collection, or any other tracking, analytics or advertising framework.

Data Controller

The data controller responsible for this app is:

Legal Basis for Processing

The limited processing the app performs — fetching demo media when you open an example show, sending the location string you typed to Open-Meteo when you add a weather widget, and locally storing the in-app-purchase receipt — is carried out under Article 6(1)(b) GDPR (performance of a contract / providing the feature you requested) and Article 6(1)(f) GDPR (legitimate interest in delivering that feature without collecting more than is necessary). The app does not collect or process personal data on our servers.

Website Tracking Disclosure

This privacy policy page is hosted on our website, which may use essential scripts for functionality (such as theme switching). Our website does not use analytics, advertising trackers, or third-party cookies. No personal data is collected through this website.

Children's Privacy

Our app does not collect personal data from anyone, including children. This applies to children under 13 (as defined by COPPA in the United States) and children under 14 (as defined by Austrian data protection law under the GDPR). The app has no user profile, no chat, no user-generated-content sharing, and no ad targeting.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

Your Rights

Since we do not store any personal data on our servers, there is no profile to access, rectify, port or delete from our systems. All data the app keeps remains on your device under your complete control. You may also lodge a complaint with the supervisory authority listed below.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:

Compliance

This privacy policy complies with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Children's Online Privacy Protection Act (COPPA)
• Google Play Store Privacy Requirements
• Apple App Store Privacy Guidelines

CCPA Notice for California Residents: Under the CCPA, you have the right to know what personal information is collected, request deletion of your personal information, and opt out of the sale of your personal information. Since we do not collect, sell, or share any personal information, these rights are inherently fulfilled. We do not sell personal information as defined by the CCPA.