<?xml version="1.0" encoding="utf-8"?>
<!--
  Android 12+ backup rules. Exclude everything from both cloud backup
  and device-to-device transfer. The app handles PHI-adjacent data
  (Keychain/Keystore-backed auth token, cached web content) that must
  not leave the device via Google's automatic backup system.
-->
<data-extraction-rules>
    <cloud-backup>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </cloud-backup>
    <device-transfer>
        <exclude domain="root" />
        <exclude domain="file" />
        <exclude domain="database" />
        <exclude domain="sharedpref" />
        <exclude domain="external" />
    </device-transfer>
</data-extraction-rules>
