ההרגלים שלכם אף פעם
לא יוצאים מהטלפון.
בדקו בעצמכם.

<!-- Diplina's own manifest, in full. All five are local: wake up, ring, buzz. -->
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>
<uses-permission android:name="android.permission.SCHEDULE_EXACT_ALARM"/>
<uses-permission android:name="android.permission.USE_EXACT_ALARM"/>
<uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
<uses-permission android:name="android.permission.VIBRATE"/>

<!-- And two that libraries tried to add, taken back out: -->
<uses-permission android:name="…ACCESS_NETWORK_STATE" tools:node="remove"/>
<uses-permission android:name="…FOREGROUND_SERVICE"    tools:node="remove"/>

<application android:allowBackup="false" … />

<!-- on iOS the same guarantee is a per-file attribute, re-applied
     after every write, and read back to confirm it stuck. -->

// Asserted on every build — not documented and hoped for.
assertThat(manifest).doesNotContain("android.permission.INTERNET")
assertThat(manifest).contains("android:allowBackup=\"false\"")

// No analytics, crash reporting or ad SDK may enter the build:
blocked = ["firebase", "crashlytics", "analytics", "admob", "appsflyer", …]

// Pro is a one-time purchase. A subscription cannot compile:
assertThat(kotlinSources).doesNotContain("ProductType.SUBS")