Private release candidate · local-first behavior
Privacy Policy
This policy describes the private release candidate of Small Making Fieldbook, Android package org.blacksheepyouth.smallmaking. It is written to match the audited local-only release.
Public distribution remains blocked until the publisher confirms the legal operator, monitored privacy contact, target audience, live policy URL, and final release behavior.
01 · SCOPE
Scope and Operator
This policy covers the Small Making Fieldbook Android app, package org.blacksheepyouth.smallmaking, and its companion two-page website. The product is a proposed, app-authored general creative field guide; it is not a description of an existing organization program.
The private release evidence does not establish a publisher-approved legal operator or privacy contact. Public distribution must not begin until the publisher confirms those details, the live policy URL, and authority to associate the product with BLACK SHEEP YOUTH SERVICES INC.
02 · INVENTORY
Data Inventory
The app keeps only optional local state: a recently opened route, bookmarks, abstract patches, short notes entered by the user, chosen 5, 10, or 15 minute frames, and display preferences for text size, contrast, and reduced motion.
It does not ask for a name, email address, telephone number, birthday, school, mailing address, precise location, contacts, photos, audio, payment details, advertising identifier, or account credentials. A note can contain whatever a user types, so users should not place identifying, confidential, medical, or other sensitive information in a note.
03 · PROCESSING
Collection and Processing
Taps and text are processed on the device to open field cards, apply display preferences, and save or remove the items the user chooses. The released app does not send this information to the publisher or another party.
The app does not use saved choices or notes to score behavior, infer personality, assess wellbeing, diagnose a condition, build an advertising profile, or decide eligibility. The companion website contains no submission form.
04 · STORAGE
Local Storage
Retained fieldbook items are stored in private app storage on the Android device. The app provides no publisher-operated cloud sync, remote account, or cross-device history.
The release sets android:allowBackup="false" and excludes app files, databases, and preferences from declared cloud backup and device-transfer rules. Android or a device manufacturer may still control operating-system behavior outside the app, so this policy does not promise that every system-level copy is impossible.
05 · PERMISSIONS
Permissions
The signed release requests no dangerous runtime permissions. It does not request access to the camera, microphone, contacts, calendar, calls, SMS, precise or approximate location, nearby devices, or shared photos and files.
If a later version adds a permission, the app must explain its purpose and this policy must be updated before that version is distributed.
06 · NETWORK
Network Behavior
The Android release declares no Internet permission and makes no app network requests. Its guide content and raster illustrations are packaged with the app.
Visiting this privacy policy in a browser is different: the browser must request website files from a host. A future public hosting provider may process ordinary connection information such as an IP address, request time, requested path, and browser information. Hosting behavior must be reviewed and disclosed before this site is made public.
07 · SERVICES
Third-Party Services
The released app contains no advertising, analytics, crash-reporting, social-login, map, payment, messaging, cloud-storage, or remote-content SDK.
Android, the device manufacturer, the app store, the user’s browser, and any future website host operate under their own terms and privacy practices. Any third-party library, service, or host added later must be audited and disclosed here before release.
08 · TRACKING
Analytics, Ads, and Tracking
The released app has no ads, behavioral analytics, tracking pixels, cross-app tracking, advertising identifier access, profiling, or marketing attribution.
The packaged website sets no cookies or browser storage and loads no third-party trackers. Ordinary server logs created by a future host are a separate hosting matter and must be disclosed after the host and its settings are known.
09 · ACCOUNTS
Accounts and Authentication
No account, sign-in, password, username, email verification, social login, or account-recovery process is required. Local fieldbook state is tied to the app installation, not to an identified profile.
The app does not provide public profiles, followers, feeds, messaging, or any user-to-user communication.
10 · AUDIENCE
Children
The publisher has not yet approved the intended age group or child-directed status. Public distribution and store target-audience answers remain blocked until that decision is made and reviewed for every selected market.
The app is designed without accounts, messaging, public sharing, location, camera, microphone, advertising, or prompts for identifying information. A child or guardian should not place a name, school, contact detail, precise location, health detail, or other sensitive information in a local note. A guardian with device access can delete individual notes, clear the Patchbook, reset app data, or uninstall.
The fieldbook is not a counseling, safeguarding, crisis-reporting, or emergency service.
11 · SENSITIVE DATA
Sensitive Data
Activities do not ask for trauma, abuse, medical information, diagnosis, exact location, school, contact information, identity documents, finances, passwords, or another sensitive disclosure.
The short-note field is free text. If a user enters sensitive or identifying information despite that boundary, it remains part of the local note until the user deletes it or resets the app. Notes should hold brief activity observations, not secrets, records, or requests for help.
12 · SECURITY
Security
Local app data is protected by Android’s application sandbox and is not intentionally transmitted by the fieldbook. The app does not claim that its local storage is encrypted independently of the device.
No device or storage method is perfectly secure. Someone with access to an unlocked or compromised device, or to a system-level backup or migration copy, may be able to reach local data. Users should protect the device and avoid storing confidential information in fieldbook notes.
13 · RETENTION
Retention and Deletion
Optional local data remains until the user removes it, clears the Patchbook, resets the app, clears app storage through Android settings, or uninstalls the app.
The controls include deleting one note, removing one bookmark, releasing one patch, clearing all Patchbook items, and resetting every fieldbook preference. Because the app sends no copy to a publisher server, there is no publisher-held account record to delete. The app cannot delete screenshots, copies, backups, or migration records made outside it.
14 · CONTROL
User Controls
Users choose whether to save a bookmark, abstract patch, or short note. They can remove those items without creating an account or contacting an operator.
Text size, contrast, reduced-motion behavior, and duration choices are also controlled locally. The reset action states its scope and requires deliberate confirmation before deleting all fieldbook state.
15 · INTERNATIONAL
International Use
The Android app does not transfer app data across national borders because it does not transmit app data off the device.
A browser request to a future public website, or app-store processing connected with download and distribution, may involve infrastructure in more than one country. The publisher must identify the actual host and applicable operator obligations before public release. Market availability does not itself establish legal compliance.
16 · CHANGES
Policy Changes
This policy displays its last-updated date. A future release that adds network access, a permission, an account, a third-party SDK, a new data type, or a new use of local data must update this policy and the corresponding store declarations before distribution.
A material change must not be hidden behind a date change alone. A revised policy should explain what changed and preserve earlier versions where required.
17 · CONTACT
Contact and Questions
No public privacy contact has been approved for this private release candidate. Public distribution is blocked until the publisher provides a monitored privacy email or another appropriate contact channel and authorizes its publication.
The IRS filing address and any in-care-of entry are administrative record fields. They are not presented as a privacy office, service location, staff role, or walk-in contact.
18 · SOURCES
Sources and Attribution
Statements about app behavior were checked against the final source, merged manifest, dependency inventory, signed artifacts, and runtime observation. They are not assumptions about the organization’s operations.
The fieldbook title, activities, product thesis, and policy illustrations are app-authored. The symbolic illustrations do not depict actual participants, staff, facilities, services, records, or events. Public organization research supports only limited federal identity and broad youth-development classification; it does not establish a specific mission, program, audience, service, or approval of this product.
Before publication, the publisher should make the live policy, in-app disclosure, store Data Safety answers, target-audience answers, permissions, dependencies, hosting behavior, and final binary agree.