com.dfx1.console) and on iPhone and iPad
· Last updated 13 August 2026The DFX1 Companion App does not collect, transmit, or share any personal data.
It contains no analytics, advertising, tracking or crash-reporting service of any kind, and it sends nothing to DFX1 Forensics. The app communicates only with a DF-X1 Forensic Console over a local, encrypted Bluetooth Low Energy link, and anything it receives stays on your device unless you deliberately export it yourself.
DFX1 Forensics LLC, 6654 Airlie Rd, Warrenton, Virginia 20187, United States. Questions about this policy: mike@dfx1forensics.com.
This single policy covers both editions of the app — the Android application distributed through Google Play, and the iPhone/iPad application distributed through Apple TestFlight and the App Store. The two apps behave the same way; where a genuine platform difference exists, it is stated per platform below rather than glossed over.
The DFX1 Companion App is an accessory for the DF-X1 Forensic Console, a hardware device that screens removable media (USB drives, external hard drives, SD cards) for malware before that media is connected to a computer. The app acts as the console's display and keypad: it shows scan progress and results, lets an operator enter a password to unlock encrypted media, and displays the console's chain-of-custody records.
The app is a tool for professional use. It is not intended for children, and it is useful only to someone who has a DF-X1 console to connect it to.
Identical on both platforms:
| Data type | Collected? | Notes |
|---|---|---|
| Personal information (name, email, address, phone) | No | Never requested. There is no account and no sign-in. |
| Location | No | No location permission is requested or held on either platform. |
| Contacts, calendar, photos, files | No | No such permission is requested. |
| Camera or microphone | No | No such permission is requested. |
| Usage analytics or diagnostics | No | The app contains no analytics, crash-reporting, advertising or tracking library of any kind. |
| Advertising identifiers | No | The app shows no advertising and reads no advertising identifier. |
| Identifiers linked to you | No | The app creates no user account, no user ID and no device ID of its own. |
No data of any kind is transmitted off your device to DFX1 Forensics or to any third party by this app.
BLUETOOTH_SCAN — to find a nearby DF-X1 console.BLUETOOTH_CONNECT — to connect to it and stay paired.BLUETOOTH and BLUETOOTH_ADMIN — the equivalents on older
Android versions.The app declares neverForLocation on its Bluetooth scan: it does not use
Bluetooth to derive your physical location, and it does not request any location
permission.
The Android app does not request the INTERNET permission.
Android therefore prevents it from making any network connection at all. This is not a
policy promise — it is enforced by the operating system and can be verified by anyone
who inspects the app.
The app requests no location, contacts, photos, camera, microphone, tracking or notification permission.
iOS does not offer an equivalent of Android's network lock — there is no setting that makes an iPhone app technically incapable of reaching the internet, so we do not claim one. What we state instead is a fact about the build: the iPhone app contains no networking code and no third-party SDK, sends nothing to DFX1 Forensics, and asks Apple's App Tracking Transparency for nothing because it does no tracking. The app is not granted, and does not use, any means of reporting your activity to us.
When connected to a DF-X1 console, the app receives:
This information is displayed on your device and held in the app's private storage there. It is not sent to DFX1 Forensics, and it is not sent anywhere else. We never receive it and have no ability to.
The console produces this information about the media being examined, not about you. The app never reads the contents of the files on the examined media, and the console never sends file contents to the app.
A DF-X1 console can be configured by your own organisation with an operator identifier, which appears on scan records so an examination can be attributed. That value is set and held by your organisation on its own equipment. DFX1 Forensics does not choose it, does not receive it, and never sees it.
A password you type to unlock encrypted media is sent only to the connected console, over the encrypted Bluetooth link, for the sole purpose of unlocking that media. It is not stored by the app, not written to any log, and not retained after use. The characteristic that carries it is marked on the console as requiring an encrypted, authenticated link, so a password is never transmitted over an unsecured connection.
The app can generate a PDF report of a scan and hand it to the operating system's standard share sheet — Android's share sheet, or the iOS share sheet — so you can email it or save it to a case file. That happens only when you choose to export, and where the file goes is entirely your choice. DFX1 Forensics is not involved in and has no visibility of that transfer.
The link between the app and a console is Bluetooth Low Energy, and it is local: the two devices talk directly to each other, with no server, no cloud service and no account in between.
The console marks the characteristic used for credentials as requiring an encrypted, authenticated connection, so a media password cannot be exchanged over an unsecured link. On Android the app additionally establishes a bonded (paired) link with the console. Where a secure link is required and cannot be established, the exchange does not take place.
Because nothing is transmitted to us, we hold no data about you and there is nothing for us to delete. Data held on your device by the app is removed when you clear the app's storage or uninstall the app.
The app is a professional tool intended for users aged 18 and over. It is not directed at children, and we do not knowingly collect information from anyone — of any age — because the app collects no information at all.
The app contains no third-party analytics, advertising, or tracking services. No data is shared with third parties, because no data is collected.
The app stores are the one exception, and they are outside our control: if you obtained the app from Google Play, or from Apple TestFlight or the App Store, that operator may collect information about the download or the test installation itself under its own privacy policy. That is separate from anything the app does, and neither store receives scan data from the app.
Privacy laws including the GDPR and the CCPA give you rights over personal data a company holds about you — access, correction, deletion, and the right not to have it sold. DFX1 Forensics holds no personal data collected by this app, and has never sold or shared any. If you believe otherwise, write to the address below and we will answer.
If this policy changes, the revised version will be posted at this address with an updated date. Material changes affecting how the app handles information will be described in the app's release notes.
DFX1 Forensics LLC
6654 Airlie Rd, Warrenton, Virginia 20187, United States
mike@dfx1forensics.com