ASE 2025
Sun 16 - Thu 20 November 2025 Seoul, South Korea

Lengthy and legally phrased privacy policies impede users’ understanding of how mobile applications collect and process personal data. Prior work proposed Contextual Privacy Policies (CPPs) for mobile apps to display shorter policy snippets only in the corresponding user interface contexts, but the pipeline could not be deployable in real-world mobile environments. In this paper, we present PrivScan, the first deployable CPP Software Development Kit (SDK) for Android. It captures live app screenshots to identify GUI elements associated with types of personal data and displays CPPs in a concise, user-facing format. We provide a lightweight floating button that offers low-friction, on-demand control. The architecture leverages remote deployment to decouple the multimodal backend pipeline from a mobile client comprising five modular components, thereby reducing on-device resource demands and easing cross-platform portability. A feasibility-oriented evaluation shows an average execution time of 9.15s, demonstrating the practicality of our approach. The source code of PrivScan is available at~\url{https://github.com/buyanghc/PrivScan} and the demo video can be found at~\url{https://www.youtube.com/watch?v=ck-25otfyHc}.