Review draft — not effective. Provider contacts, public URLs, vendor details, retention and operational workflows require verification before release.
Included components
Local persistence: SQLite/Drift and shared_preferences store local records and settings. flutter_secure_storage stores configured session secrets using platform facilities. Sign-in integrations: sign_in_with_apple and google_sign_in use Apple/Google authentication when enabled; email authentication uses the configured application gateways. dio performs configured API requests. Actual versions are recorded in pubspec.lock, which must be re-audited for each release.
System services
speech_to_text uses microphone/system speech services and may involve the system provider's network processing. flutter_local_notifications and timezone support local schedules. file_selector and share_plus handle user-selected files and sharing. Rive, Flame, audioplayers and rendering packages supply animation/audio; development-time native library downloads are not evidence of an in-app telemetry service. package_info_plus reads app version information.
Release inventory
Record each actual vendor/legal entity, SDK version, fields, purpose, collection mode, country, retention, onward sharing and policy URL. Cloud AI, hosting, email delivery, account services and optional sync vendors cannot be inferred from a client library. No ad or analytics SDK was identified in the reviewed dependencies; confirm runtime traffic, backend logs and all transitive SDKs before making store declarations. Third-party policies do not replace Sproutly's own privacy disclosure. No contact/address-book access is required by the current manual task features.