App Permissions — How We Request and Use Them (Overseas)
Overseas review draft. Real iOS/Android permissions must match the final mobile build, iOS Privacy Manifest (PrivacyInfo.xcprivacy), AndroidManifest and store privacy disclosures. Do not list unused permissions or omit real ones at release.
- Permissions are requested only when you trigger the matching feature (just-in-time), with a clear purpose string.
- On first voice use, Atween also explains on-device transcription and voice-rhythm/emotion-candidate processing and obtains your explicit confirmation. You can manage permissions in system settings and switch off "voice cues for AI understanding" in Atween.
- Denying a non-essential permission never blocks transcription, long-form text, Talk-It-Through, deletion, export, exit, complaint or crisis support; alternatives (text input, file picker, limited photo access, later) are provided.
- Third-party SDKs or web views that request permissions are reflected in the Sub-processor List.
Android permissions
| Permission | What it does | When / why | If denied / alternative |
|---|---|---|---|
| CAMERA | Capture photos/video | You actively capture media as material | Text input or pick from gallery |
| RECORD_AUDIO | Record audio | Voice input, on-device transcription, and (after first confirmation) rhythm/emotion cues for controlled AI understanding and safety; internal labels not shown or given to the other person | Text input; viewing/deleting/exporting/complaint unaffected |
| READ_MEDIA_IMAGES (A13+) | Read chosen images | You actively select images | Capture new or text input |
| READ_MEDIA_VIDEO (A13+) | Read chosen video | You actively select video | Text description or no video |
| READ_MEDIA_VISUAL_USER_SELECTED (A14+) | Read only selected media | Reduce gallery access | Select per item |
| POST_NOTIFICATIONS | Send notifications | Account safety, export/delete receipts, complaint progress, necessary service notices | View in-app |
| USE_BIOMETRIC / USE_FINGERPRINT | System biometric for local unlock | Protect local access; raw biometrics never uploaded | System password / other login |
iOS permissions (purpose strings)
| Key | What it does | When / why | If denied / alternative |
|---|---|---|---|
| NSCameraUsageDescription | Use camera | Actively capture photos/video as material | Text input or pick from library |
| NSMicrophoneUsageDescription | Use microphone | Voice input, on-device transcription, and (after first confirmation) rhythm/emotion cues for controlled AI and safety; internal labels not shown or given to the other person | Text input |
| NSPhotoLibraryUsageDescription | Read library | Actively select images/video | Limited library access, capture, or text |
| NSPhotoLibraryAddUsageDescription | Add to library | Save exported images/files | System share / Files |
| NSUserNotificationsUsageDescription | Send notifications | Account safety, receipts, complaint progress, necessary notices | View in-app |
| NSFaceIDUsageDescription | Face ID for local unlock | Protect local access; raw face data never uploaded | Device passcode / other login |
Permissions we do not request by default
Contacts, precise location, calendar, health, Bluetooth, local network, call log and SMS reading are not requested at launch. If a future feature needs any, we first update the Privacy Policy, Collected-Information List, Sub-processor List and this statement, and explain per feature at use.