Implemented the Play Store readiness pass.

docs/PLAY_STORE_DATA_SAFETY.md

@@ -0,0 +1,37 @@
+# Play Console Data Safety Notes
+
+Use this as a starting point for the Play Console Data safety form. Review it before submission because the final answers are your legal responsibility.
+
+## App Data Flow
+
+NGX Monitor is a client for monitor endpoints configured by the user. The developer does not operate a backend for this app.
+
+Stored locally on the device:
+
+- Server names, base URLs, tags, fallback LAN IPs, and alert thresholds
+- Monitor API tokens and optional Basic Auth credentials, encrypted with Android Keystore
+- Metric samples, alert history, route diagnostics, and widget preferences
+
+Transmitted by the app:
+
+- HTTP(S) requests to user-configured monitor endpoints
+- Authentication headers only for the specific endpoint configured by the user
+- Notification content generated locally on the device
+
+Not used by the app:
+
+- Advertising ID
+- Location APIs
+- Contacts, photos, camera, microphone, calendar, or SMS
+- Developer-operated analytics or crash reporting SDKs
+
+## Suggested Data Safety Answers
+
+- Data collected by developer: No
+- Data shared with third parties by developer: No
+- Data is encrypted in transit: Yes, when users configure HTTPS monitor endpoints
+- Users can request data deletion: Data is local; users can delete server profiles in-app or clear app data
+- App type: utility/productivity
+- Account creation: Not required
+
+Important note for the form: the app allows user-configured HTTP endpoints for private LAN monitoring. If you publish with HTTP support enabled, disclose that encryption in transit depends on the endpoint configured by the user.