一句话：提出首个可部署的 Android 上下文隐私政策 SDK PrivScan，通过实时截图识别个人数据相关 GUI 元素并按需展示简洁隐私政策。
移动应用的隐私政策冗长且法律化，用户难以理解个人数据如何被收集与处理。已有上下文隐私政策（CPP）尝试在对应界面上下文中展示简短政策片段，但流水线难以在真实移动环境中部署。本文提出 PrivScan，首个可部署于 Android 的 CPP 软件开发工具包。它捕获实时应用截图，识别与个人数据类型相关的 GUI 元素，并以简洁的面向用户格式展示 CPP；同时提供轻量悬浮按钮，实现低摩擦的按需控制。其架构通过远程部署将多模态后端流水线与移动客户端解耦，客户端包含五个模块化组件，从而降低设备资源需求并便于跨平台移植。面向可行性的评估显示平均执行时间为 9.15 秒，表明该方法具有实用性。
Lengthy and legally phrased privacy policies impede users’ understanding of how mobile applications collect and process personal data. Prior work proposed Contextual Privacy Policies (CPPs) for mobile apps to display shorter policy snippets only in the corresponding user interface contexts, but the pipeline could not be deployable in real-world mobile environments. In this paper, we present PrivScan, the first deployable CPP Software Development Kit (SDK) for Android. It captures live app screenshots to identify GUI elements associated with types of personal data and displays CPPs in a concise, user-facing format. We provide a lightweight floating button that offers low-friction, on-demand control. The architecture leverages remote deployment to decouple the multimodal backend pipeline from a mobile client comprising five modular components, thereby reducing on-device resource demands and easing cross-platform portability. A feasibility-oriented evaluation shows an average execution time of 9.15 s, demonstrating the practicality of our approach. The source code of PrivScan is available at https://github.com/buyanghc/PrivScan and the demo video can be found at https://www.youtube.com/watch?v=ck-25otfyHc.
DOI 原文 ·
@inproceedings{paperbot9354,
title = {Towards Context-aware Mobile Privacy Notice: Implementation of A Deployable Contextual Privacy Policies Generator},
author = {Haochen Gong and Zhen Tao and Shidong Pan and Zhenchang Xing and Xiaoyu Sun},
booktitle = {ASE},
year = {2025},
doi = {10.1109/ase63991.2025.00361}
}