Review required permissions

Currently the (Android) app requires lot of permissions - see this report

While I understand why we require most of them, we should review the list and decide whether all of these are necessary.

I will edit the list below as the situation evolves.

Ticked boxes below means the permission has been reviewed. Unticked boxes still need to be investigated.

trackers:

[x] Google CrashLytics - we use this to report app crashes
[x] Google Firebase Analytics - we use this to control behaviour of the app - disable old versions, etc.

permissions:

[ ] ACCESS_NETWORK_STATE
[ ] ACCESS_NOTIFICATION_POLICY
[ ] BROADCAST_CLOSE_SYSTEM_DIALOGS
[x] CAMERA - used when wants to take a photo to create an avatar
[ ] FOREGROUND_SERVICE
[x] INTERNET - used to communicate with the backend
[ ] POST_NOTIFICATIONS
[x] READ_CONTACTS - used to access contacts to build a social network
[ ] READ_EXTERNAL_STORAGE
[x] READ_MEDIA_IMAGES - used when user wants to use a photo from the gallery as avatar
[ ] READ_MEDIA_VIDEO
[ ] RECEIVE_BOOT_COMPLETED
[ ] SCHEDULE_EXACT_ALARM
[ ] SYSTEM_ALERT_WINDOW
[x] USE_BIOMETRIC - used to lock/unlock the app
[x] USE_FINGERPRINT - used to lock/unlock the app
[ ] USE_FULL_SCREEN_INTENT
[ ] VIBRATE
[ ] WAKE_LOCK
[x] WRITE_CONTACTS - used when user wants to add a vexl contact to system contacts
[ ] WRITE_EXTERNAL_STORAGE
[ ] RECEIVE
[ ] BIND_GET_INSTALL_REFERRER_SERVICE

vexl-it / vexl