<?xml version="1.0" encoding="utf-8"?>
<!-- 
    DATA EXTRACTION RULES - ALLOWLIST APPROACH
    
    Android 12+ backup/extraction rules for cloud backup and device transfer.
    Uses allowlist (whitelist) approach for security - only explicitly listed
    items may be backed up. Any new storage must be manually evaluated and
    added to this allowlist if backup is safe and desired.
    
    By default, no app data is backed up. Sensitive items like databases,
    shared preferences, and DataStore files are excluded.
    
    To add an item: add a <include> element with appropriate domain/path.
    To exclude an item: add an <exclude> element with appropriate domain/path.
-->
<data-extraction-rules>
    <cloud-backup>
        <!-- No items included by default - sensitive data only -->
        <!-- Explicit exclusions for all default storage types -->
        <exclude domain="database" path="." />
        <exclude domain="sharedpref" path="." />
        <exclude domain="file" path="." />
    </cloud-backup>
    
    <device-transfer>
        <!-- No items included by default - sensitive data only -->
        <!-- Explicit exclusions for all default storage types -->
        <exclude domain="database" path="." />
        <exclude domain="sharedpref" path="." />
        <exclude domain="file" path="." />
    </device-transfer>
</data-extraction-rules>
