Phone Audit Privacy Policy

What stays on your phone

Your security settings, the list of apps on your phone and what they can access, signing fingerprints, link checks, file fingerprints, malware-scan results, blocking choices, vault copies, saved history and your questions to Ask AI are all processed on your phone. We never upload them to Samos or to any AI provider, and they are never added to your account.

History is saved only when you choose Save snapshot, keeps up to 20 snapshots and can be deleted in the app. It never includes your app list, files, links or AI questions. Scans may use private temporary storage, which is cleared when the scan ends or the next time the app starts.

Your account

Phone Audit needs a free account with a verified email address. When you register, Google Firebase sends a verification email, and the app opens once your address is verified and you have agreed to the terms.

To run your account, Firebase processes your email address, your password credential, account and session identifiers, whether your email is verified, and security and anti-abuse data such as IP address and device or app information. The Firebase SDK keeps you signed in on your phone. We use this only to provide the account, verify your email, keep you signed in, reset your password and delete the account.

When you agree to the terms, we store a record in Google Cloud Firestore, linked to your account ID, of the terms version, the app version and the time you agreed. We keep it as proof of your agreement while your account exists, and delete it with your account on request.

Firebase processing follows Google Firebase privacy information and may take place outside your country.

Reporting an AI answer

Ask AI runs on your phone. If you choose Report an AI concern, you can edit or remove the answer excerpt, pick a reason and add a note. Nothing is sent until you agree and tap Send report. Your question, results, files, app list and account email are never attached.

A report sends the excerpt, reason, note, app and model versions and a server time to Samos through Google Firebase Authentication and Cloud Firestore, under a separate pseudonymous reporting identity. Firebase also processes normal network data such as IP address. Reports are stored in the United States, are visible only to authorised Samos staff, and are kept only as long as needed to investigate unsafe or wrong answers.

After a report is accepted you get a receipt. To delete a report, email us its receipt. Deleting your account does not delete reports, because they are not linked to it.

Downloads and links

The Ask AI model downloads from official Qwen hosting on Hugging Face only when you ask for it; that host sees normal request data such as your IP address. The model's integrity is checked before use, and it then runs on your phone. Links to security bulletins and these pages open in your browser and never include your results.

Permissions and blocking apps

Phone Audit uses Android's file picker to open files you choose. It asks for notification permission to show the blocking notification, and Android asks for your consent before blocking starts.

Block internet uses Android's VPN feature only on your phone. The chosen apps' traffic is discarded locally; it is never read, stored, logged or sent to a server, and your other apps stay online. Phone Audit does not ask for camera, microphone, contacts, SMS or location permission.

Private vault and exports

The vault encrypts copies and file names with an Android Keystore key that stays on your phone (AES-256-GCM). There is no cloud backup or recovery. Adding a file leaves the original unchanged. Exporting writes a normal, unencrypted copy to the place you choose, so protect it. Uninstalling the app or losing the key permanently loses vault copies.

Advertising

Ads are switched off. The app includes Google's ads and consent libraries for possible future use, but in this version it does not start them, makes no ad or consent requests, and does not request your advertising ID. If we turn ads on, we will update this policy first and show any required privacy choices in the app. Your results, app list, files, vault, AI questions and account email will never be used for ad targeting. We do not use a separate analytics SDK, and we do not sell your personal information.

Keeping and deleting your data

History, vault copies and the AI model each have their own delete controls in the app. Clearing app data or uninstalling removes Phone Audit's private data on your phone, but not files you exported and not your account. Signing out or deleting your account leaves your local data on the phone; you need to sign in again to open the app.

You can delete your account in the app (Account, then Delete account), or request deletion here without the app. We delete the account, its sign-in record and its terms record after confirming it is yours. Firebase may keep limited security logs or backups for a short time under its own practices.

You can ask us to access, correct or delete your data, or exercise other privacy rights that apply to you. We use support emails only to handle your request and keep them only as long as needed.

Changes

We update this page whenever the app's data practices change, and show the date at the top.