سياسة الخصوصية — Shieldra

Privacy Policy — Shieldra (English)

Last updated: 2026-10-14 · App: Shieldra (phone security) · Package: com.shieldra.app · version 0.1.0

1. The short version

Shieldra guards your phone: while armed it watches for unauthorised unlocks or unexpected movement and records the event for you. No accounts and no server of ours. Everything is stored on the device, encrypted, and anything that leaves the phone goes only to you, through a channel you configured yourself.

2. What Shieldra records on your device

• Security events: kind (panic, motion, failed unlock, SIM change, battery, tracking, test), timestamp, and the number of failed unlock attempts.
• Encrypted evidence: a front-camera photo (plus a back-camera photo if dual capture is on), a short audio clip if you enable it, and a single location fix when the event calls for one.
• Your settings: alert thresholds, the chat or mailbox you chose to receive alerts, and your Telegram bot token and mail app-password.

Retention: evidence and quarantined media are deleted automatically after 30 days, event metadata after 90 days, encryption keys rotate every 90 days, and exporting evidence out of the app is disabled by default.

3. Encryption

Photos and audio are encrypted with AES/GCM/NoPadding using a 256-bit key held in the Android Keystore (aliases shieldra_evidence_v1 / _v2), bound by additional authenticated data to the item it protects. The Telegram bot token and the mail app-password are sealed under a separate Keystore key and never written as plain text; if a secret can no longer be opened the field reads as "not set up" rather than a guess. Your biometric or lock-screen credential can be required before monitoring can be stopped.

4. What leaves the device — and who receives it

Nothing leaves except to a channel you added in Settings, carrying the alert itself:

• Telegram — if enabled, the app posts the alert to your own chat through the bot you created, over HTTPS to api.telegram.org, optionally with the camera photo, audio clip or your location.
• Email — if enabled, the app sends mail through the SMTP server you specify, from your account and your own app-password, to your own address, with the photo and location when available.
• Remote commands (optional) — while protection is armed and only if you turn this on, the app listens for commands from your Telegram chat alone: /locate, /photo, /alarm, /stopalarm, /status, /lost, /found.
• Channel providers: Telegram or your mail provider (Google/Outlook/Yahoo…) process whatever passes through their service under their own policies. We run no server and see none of it.

If you enable no channel, alerts stay on the screen inside the app.

5. Permissions and why

• CAMERA + FOREGROUND_SERVICE_CAMERA — capture a photo as evidence on a confirmed event, only during a declared foreground service.
• RECORD_AUDIO + FOREGROUND_SERVICE_MICROPHONE — a short audio clip as evidence, when you enable it.
• ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION + FOREGROUND_SERVICE_LOCATION — one position fix on a confirmed event, not continuous tracking. Its age, accuracy and provider travel with it, and no position is invented when a fix fails.
• INTERNET, ACCESS_NETWORK_STATE — deliver your alerts through the channel you chose, and check whether a connection is possible.
• POST_NOTIFICATIONS — show alerts, and the "this phone is lost" notice on the lock screen when you turn it on.
• READ_PHONE_STATE — detect a SIM change or loss of service so the guard can react. It never reads messages, call logs or contacts.
• RECEIVE_BOOT_COMPLETED — resume scheduled guarding after a restart.
• WAKE_LOCK, REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — stop the system killing the guard in the background; you grant this after an explanation.
• SCHEDULE_EXACT_ALARM, USE_EXACT_ALARM — the countdown and alerts that must fire at their exact time.
• FOREGROUND_SERVICE_SPECIAL_USE — keep protection alive while armed.
• Device administration (BIND_DEVICE_ADMIN on the lock-guard receiver) — lets Shieldra put a guard on the lock screen. The app does not wipe your device on its own, and you can deactivate it in system Settings › Security › Device admin apps.
• Biometrics — your fingerprint or lock credential is required before monitoring can be switched off.

6. What Shieldra does not collect

No name, email or phone number is required (there is no account) · no contacts · no call log or messages · no list of installed apps · no ads and no advertising identifier · no analytics, tracking or crash reporting · no in-app purchases or subscriptions · no cloud backup (allowBackup=false with backup content excluded entirely).

7. Deletion

• You delete events and evidence inside the app, or you let retention expire (30/90 days) and they are removed automatically.
• Clearing app data or uninstalling erases everything on the device permanently. We hold no copy, so there is nothing on our side to delete.
• Alerts you sent to Telegram or your mailbox are stored by those services; delete them there.

8. Children

Shieldra is an adult's own-device protection tool, is not directed at children under 13, and is not designed to collect anyone's data about them.

9. Transparency

There is no personal profile on our side to hand over, so no data-access request is needed: everything exists on your device or in the channel you chose. Any material change to what is collected or transmitted is announced here, with an updated date, before the release that depends on it ships.

10. Contact

www.toufik.bendjeddah@gmail.com, or open an issue in the app's repository.