Submission Target: Google Play Protect Security & Appeals Review Team |
Status: Active Official Declaration |
Date: October 2026
🛡️ Executive Summary & Application Identity
This declaration document certifies the legitimate enterprise architecture, cryptographic signatures, declared Android permissions, and security compliance of the ZTXEYE Enterprise Device Policy Controller (DPC) application.
In accordance with Google Play Developer Policy and Android Enterprise documentation, every declared permission is strictly tied to documented DPC functionality:
Permission
Type
Enterprise Justification
android.permission.BIND_DEVICE_ADMIN
Signature
Mandatory Android OS permission for DeviceAdminReceiver. Required to implement Device Owner mode, apply enterprise security policies, and manage device locking.
android.permission.INTERNET
Normal
Allows encrypted HTTPS TLS 1.3 heartbeat communication with centralized management console at https://eye.ztxai.in.
android.permission.ACCESS_NETWORK_STATE
Normal
Monitors network connectivity status to queue telemetry sync requests efficiently.
android.permission.RECEIVE_BOOT_COMPLETED
Normal
Restarts background policy enforcement and security compliance watchdog after device restart.
Google Play Protect classifies apps according to its Potentially Harmful Applications guidelines. ZTXEYE has been architected to adhere strictly to these rules:
NOT Ransomware: The device lock feature (is_locked) is a standard Android Enterprise DevicePolicyManager.lockNow() implementation intended for corporate asset security, anti-theft recovery, and retail financing collateral security under express agreement. The lock screen prominently displays the authorized retailer support phone number, retailer ID, device IMEI/UUID, and contact assistance. It does not solicit cryptocurrency or unauthorized ransoms.
NOT Spyware / Stalkerware: The application does NOT monitor private communications, record microphone audio, take unauthorized camera captures, track personal browsing habits, or log keystrokes.
NOT a Backdoor / Trojan: The application contains zero dynamic code loading (no external DEX/JAR/SO loading), zero obfuscation bypasses, and connects exclusively to the authorized enterprise domain https://eye.ztxai.in.
NOT SMS Fraud: The app declares NO SMS permissions and does not send premium SMS messages.
Transparent Enrollment: Provisioning occurs through Android Enterprise's standard 6-tap QR setup wizard at device boot, or explicit admin activation.
✉️ Complete Pre-Filled Google Play Protect Appeal Letter
Subject: Google Play Protect Appeal / Whitelist Request for Enterprise DPC Application (ZTXEYE)
Application Name: ZTXEYE Enterprise Device Policy Controller
Package Name: com.ztxeye.dpc
Target SDK: 36 (Android 16) | Min SDK: 24 (Android 7.0)
Version Name: 1.0.0 | Version Code: 1
Developer / Organization: ZTXEYE Technologies
Official Management URL: https://eye.ztxai.in
Live Privacy Policy URL: https://eye.ztxai.in/privacy.html
Direct APK Download URL: https://eye.ztxai.in/downloads/ztxeye-dpc-v1.apk
Signing Certificate Signatures:
- SHA-256 Fingerprint: 06:0B:69:21:53:3C:C3:E2:35:76:49:A0:2E:EE:C8:91:26:74:3F:35:48:96:10:62:66:04:79:A8:D8:32:67:1F
- SHA-1 Fingerprint: B3:1B:41:FF:B5:9B:9B:41:26:B8:59:EB:6C:BB:90:0B:82:EF:8E:4C
- MD5 Fingerprint: 18:35:8D:15:C8:3E:2E:FF:EC:31:0A:6E:64:35:72:1F
- Android Enterprise Checksum: BgtpIVM8w-I1dkmgLu7IkSZ0PzVIlhBiZgR5qNgyZx8
- Certificate Subject & Issuer: CN=Android Debug, O=Android, C=US
Description & Legitimate Justification:
The application "ZTXEYE" (com.ztxeye.dpc) is a legitimate enterprise Device Policy Controller (DPC) developed strictly for company-owned device management, retail device financing collateral compliance, and kiosk security under Android Enterprise standards.
1. Android Enterprise Architecture:
The application implements standard Android Enterprise DeviceAdminReceiver, DevicePolicyManager, and ProvisioningActivity supporting ACTION_GET_PROVISIONING_MODE and ACTION_ADMIN_POLICY_COMPLIANCE for 6-tap QR provisioning during the initial setup wizard.
2. Declared Permissions & Safety:
Declared permissions are strictly limited to BIND_DEVICE_ADMIN, INTERNET, ACCESS_NETWORK_STATE, RECEIVE_BOOT_COMPLETED, WAKE_LOCK, POST_NOTIFICATIONS, and FOREGROUND_SERVICE_DATA_SYNC. No intrusive permissions (SMS, mic, call log, contacts, external storage) are requested.
3. Non-PHA Compliance:
The application is NOT ransomware, spyware, or a trojan. The remote lock capability is a standard enterprise DevicePolicyManager security feature for lost/stolen protection and retail financing default notice. The screen displays clear retailer contact details, IMEI, and customer support contact numbers.
4. Privacy & Transparency:
A complete, publicly accessible Privacy Policy is hosted at https://eye.ztxai.in/privacy.html. The application displays an ongoing foreground service notification on the device to maintain full user transparency.
We kindly request that Google Play Protect review and whitelist this application package (com.ztxeye.dpc) and its signing certificate fingerprint so that enterprise enrollment proceeds without false-positive security warnings.
Contact: security@ztxai.in | support@ztxai.in
Official Declaration: https://eye.ztxai.in/declaration.html