TBATECH
CommandCenter Pro Permissions Safety Directory
Google Play Policy Verification 100% Manifest Verified Zero Background Location

Card-Wise Android Permission Safety Directory

Comprehensive transparency disclosure mapping each declared Android permission in com.tba.coachingcommand to its exact technical necessity, user benefit, and data minimization guarantee.

android.permission.CAMERA Dangerous / Runtime

📸 Camera Access (Student Photos & ID Cards)

Functional Necessity: Used in the Student Admission and Profile Editor to capture student facial photographs for automated generation of printable PVC Student ID Cards, Examination Admit Cards, and Transfer Certificates. Also scans QR codes on admit cards during exam entry.

Data Protection: Activated strictly upon manual user click. Camera feed is never recorded, streamed, or accessed in background.

Storage: Scoped App Sandbox ✓ Play Compliant
ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION Foreground Only

📍 Staff Geofence Campus Attendance Punch

Functional Necessity: Validates whether school teachers or staff members are physically present within the authorized school campus radius when submitting their daily attendance punch.

Zero Background Location: The app DOES NOT run background location tracking. FOREGROUND_SERVICE_LOCATION has been explicitly deleted from the manifest. GPS coordinates are read instantaneously on punch and discarded immediately.

Retention: Instantaneously Discarded ✓ Zero Background GPS
READ_CONTACTS & WRITE_CONTACTS Optional Runtime

👥 Parent Directory Import & Emergency Registry

Functional Necessity: Enables the School Director to select parent phone numbers directly from their device address book when registering new admissions, eliminating typing mistakes and expediting administrative workflow.

Zero Harvesting: The app does not scrape, bulk upload, sync, or sell user address books. Only the single contact selected by the user is added to the student's admission record.

Scope: Single Contact Selection ✓ Zero Address Book Scraping
READ_MEDIA_AUDIO & SCOPED STORAGE Storage & Media

📊 PDF Marksheet Export & Voice Notes

Functional Necessity: Renders and exports official high-resolution PDF Marksheets, Student Demographic Reports, Fee Vouchers, and ID cards to the device's Documents directory. READ_MEDIA_AUDIO enables playback of AI voice briefings.

Modern Scoped Storage: Compliant with modern Android storage models (maxSdkVersion=29 for write, maxSdkVersion=32 for read). No broad device file access is requested.

Storage: Scoped PDF Documents ✓ Scoped Storage
android.permission.POST_NOTIFICATIONS Android 13+ Runtime

📢 Administrative Operational Alerts

Functional Necessity: Dispatches daily fee recovery summary notifications, morning attendance alerts, timetable bell alarms, and examination updates to the school director and staff.

Zero Advertising: No advertising, marketing, or promotional notifications are ever sent. Can be toggled on/off at any time in Android system settings.

Channel: Administrative Alerts ✓ Zero Ads
SYSTEM_ALERT_WINDOW Special App Access

📞 Smart Incoming Call Fee HUD Overlay

Functional Necessity: When a registered parent calls the school office phone, the app displays a non-intrusive floating heads-up display (HUD) showing the student's name, class, and pending fee amount so staff can immediately address parent inquiries.

Manual Authorization: Requires explicit consent in Android Special App Access settings. Disappears automatically as soon as the phone call concludes.

Lifecycle: Active on Call Only ✓ Explicit Consent
FOREGROUND_SERVICE_MEDIA_PLAYBACK Foreground Service

🎧 AI Audio Player & Briefing Voice Notes

Functional Necessity: Runs CallOverlayService with foregroundServiceType="mediaPlayback" to prevent OS termination during audio playback of daily AI voice briefings.

Visible System Notification: Accompanied by a persistent system notification with playback controls as mandated by Android foreground service policies.

Type: mediaPlayback ✓ Notification Controlled
<queries> (Package Visibility) Privacy-First Intent

💬 Zero-Permission WhatsApp & SMS Sharing

Functional Necessity: Declares package queries for WhatsApp, WhatsApp Business, SMS client, and PDF viewers to share fee invoices and marksheets.

Zero Invasiveness: Avoids requesting invasive SEND_SMS or READ_SMS permissions. Uses Android Share Intents giving the user complete manual oversight before sending.

Method: Android Intent Share ✓ Zero SMS Permissions
SCHEDULE_EXACT_ALARM & RECEIVE_BOOT_COMPLETED Alarms & Scheduling

⏰ Scheduled Executive Reporting & Timetable Alarms

Functional Necessity: Triggers scheduled daily morning executive fee summaries and class bell timetable alarms at exact user-configured times, and restores them after device reboot.

Resource Safety: Uses Android AlarmManager and WorkManager with zero background polling.

Battery: AlarmManager Managed ✓ Exact Alarm Compliant
INTERNET & ACCESS_NETWORK_STATE Core Network

☁️ Firebase Cloud Sync & AI Engine API

Functional Necessity: Secure synchronization of school database backups to Google Cloud Firebase (Mumbai) and executing Google Gemini AI educational insights.

TLS 1.3 Security: All data in transit is protected via TLS 1.3 HTTPS.

Security: TLS 1.3 Encrypted ✓ Play Compliant