TrustPhone

Privacy Policy

Effective date: June 8, 2026 · Previous version: June 1, 2026

Plain-language summary: TrustPhone performs its core security analysis locally on your Android device. Notification previews, APK file contents, installed-app information, and usage information are not uploaded to TrustPhone servers. The optional Contacts Backup feature stores a copy of your contacts on Google Firebase, protected in transit using TLS — this is clearly disclosed before you enable it and requires your consent. The optional Premium cloud scam detection feature sends anonymized message signals to Google Gemini for AI analysis — this is also opt-in and disclosed before use. The free tier may use Google AdMob, and purchases use Google Play Billing.

What changed in this update (June 8, 2026): Added sections covering the optional Contacts Backup feature (Section 9), optional Premium cloud AI scam detection (Section 10), and subscription billing details (Section 11). Updated Section 12 to reflect that contacts access is now available as an optional feature. Updated Section 14 to reflect that a cloud feature is now live rather than future-planned.

1. Who We Are

TrustPhone is an Android security-tools application provided by YS Ventures LLC, Pittsburgh, Pennsylvania, USA. This Privacy Policy explains how TrustPhone accesses, uses, stores, and shares information when you use the app.

Questions can be sent to support@trustphone.app.

2. Local Security Analysis

TrustPhone provides tools that help you review warning signs and make informed decisions. TrustPhone does not guarantee that an app, file, website, sender, or notification is safe or unsafe.

Core security analysis runs locally on your device using an on-device TensorFlow Lite machine learning model. TrustPhone does not upload notification text, APK file contents, installed-app inventory, or usage information to TrustPhone servers.

3. Optional Notification Access

If you enable Notification Access in Android settings, TrustPhone can review readable notification previews locally on your device to identify warning signs such as suspicious links, impersonated brands, repeated website alerts, and related context across messages from the same sender.

Notification Access is optional.
TrustPhone does not read your SMS inbox directly.
TrustPhone does not upload notification text to TrustPhone servers.
TrustPhone does not automatically remove the original notification.
Verified messages from known carriers (T-Mobile, Verizon, AT&T, Jio, Airtel) are recognized and not flagged.

To explain warnings inside the app, TrustPhone may temporarily store a shortened notification snippet locally. Stored snippets are limited in length. If a link is detected, TrustPhone stores only the website domain needed to explain the warning sign, not the full URL or private query tokens.

4. Installed-App Information

TrustPhone reviews installed apps to show useful Android-reported facts, including app name, package name, installation source, requested permissions, and certain special-access settings.

Android treats installed-app inventory as sensitive information. TrustPhone uses this access only to provide its app-review features. Installed-app inventory is processed locally and is not uploaded to TrustPhone servers.

TrustPhone may also detect when an app is installed or removed so that you can review recent changes on your device.

5. Optional Usage Access

If you enable Usage Access in Android settings, TrustPhone uses aggregated device usage information locally to show recent app activity and richer storage estimates. This permission is optional. TrustPhone does not upload usage information to TrustPhone servers.

6. Optional Media and File Access

If you choose to grant media access, TrustPhone uses the files Android allows it to read to estimate storage categories on your device. TrustPhone can work with limited media access.

When you use the APK file-check feature, Android's file picker allows you to choose an APK file or an allowed folder. TrustPhone reads only the file or folder access that you select. APK analysis is performed locally. APK files are not uploaded to TrustPhone servers.

7. Sender-Source Checks

TrustPhone includes a local registry of sender information for commonly impersonated brands and carriers. If a message claims to come from a known source, TrustPhone compares the sender ID and website domain with locally stored reference information to verify authenticity.

Messages from verified senders using official domains are recognized as safe automatically. Messages from unverified senders or with unofficial domains continue through normal threat analysis. Sender-source checks run entirely on your device.

8. Local Storage and Encryption

Warning history is stored locally in an encrypted SQLCipher database. The database passphrase is protected using Android Keystore AES-256-GCM.

Notification warning alerts auto-delete after 7 days.
Sender review history auto-deletes after 90 days.
Short-lived context used to connect related alerts is pruned after 30 minutes.
You can clear locally stored warning history from inside the app at any time.
Uninstalling TrustPhone removes its locally stored app data.

9. Optional Contacts Backup Optional Feature

TrustPhone offers an optional paid Contacts Backup feature called the Independent Contacts Vault. This feature is disabled by default. Before it is enabled, TrustPhone will display a clear disclosure screen explaining exactly what data is collected and how it is used. Your consent is required before any contacts data is uploaded.

What is collected:

To create and verify your secure backup credentials, we collect:

Your first name and last name
Your date of birth (used to verify your identity during restoration)
Your chosen 8–16 digit security PIN
Your backup phone number and email address (optional)

To back up your address book, we collect:

Contact names from your device address book
Phone numbers from your device address book
Email addresses associated with your contacts

How it is used:

To allow you to restore your contacts on a new or replacement device using a secure PIN you choose.
To maintain a backup independent of your Google account, so your contacts remain accessible even if your Google account is locked or suspended.

How it is stored:

Your contacts are securely stored on Google Firebase, protected in transit using TLS.
The backup is stored on Google Firebase, governed by Google Firebase's privacy terms.
Your contacts are never shared with third parties.
Your contacts are never used for advertising or profiling.

Deletion:

You can request deletion of your contacts backup at any time by contacting support@trustphone.app. Your backup will be deleted within 30 days of a verified request. Uninstalling the app does not automatically delete your cloud backup — you must request deletion explicitly if you want the cloud copy removed.

10. Optional Premium Cloud AI Scam Detection Premium Feature

TrustPhone Premium subscribers can enable optional cloud-assisted scam detection powered by Google Gemini. This feature is disabled by default and requires your opt-in consent before activation.

When enabled, messages that the on-device model cannot confidently classify may be escalated to Google Gemini for additional analysis. Only the message text and sender type (not your identity or contact information) are sent for analysis.

Cloud escalation is triggered only for uncertain cases — clear scams and clearly safe messages are handled on-device.
Your name, phone number, and contact list are never sent to Google Gemini.
Escalated message content is not stored on TrustPhone servers.
Google Gemini processes data under Google's Privacy Policy.
You can disable cloud escalation at any time in TrustPhone settings.

11. Subscriptions and In-App Purchases Updated

TrustPhone offers optional subscriptions (monthly, 6-month, and annual) and one-time purchases processed through Google Play Billing. Google processes payment information under its own privacy policies. TrustPhone does not receive your full payment card details.

TrustPhone receives only the purchase status needed to unlock Premium features. Subscription management, cancellation, and refund requests are handled through the Google Play Store.

Learn more through Google's Privacy Policy.

12. Ads and Advertising ID

The free tier may display limited ads through Google AdMob. AdMob may process information such as the device advertising ID, IP address, device information, ad interactions, and diagnostic information where permitted by Android, Google policies, and applicable law.

This information is handled by Google under its own policies. TrustPhone does not send notification text, installed-app inventory, APK file contents, contacts, or usage information to AdMob.

Learn more through Google's Privacy Policy.

13. User-Initiated Sharing

Some app screens may allow you to share selected information using Android's share menu. Sharing occurs only when you choose it. Information you share is handled by the app or service you select and is subject to that service's privacy policy.

14. Information TrustPhone Does Not Collect

TrustPhone does not collect or request access to:

Your SMS inbox (notification access reads previews only, not your inbox)
Your call history
Your precise location
Your microphone
Your camera
Accessibility Service control
Contacts data — unless you explicitly enable and consent to the optional Contacts Backup feature (Section 9)

15. Accounts and Deletion

TrustPhone does not require a user account for its core features. If you use the optional Contacts Backup feature, a backup record is associated with your name, date of birth, and security PIN to identify and recover your data safely on replacement devices. This information is stored on Google Firebase and is used solely for backup authentication and restoration — not for advertising, profiling, or any other purpose.

To delete your locally stored warning history, use the clear option inside the app. To delete your contacts backup, contact support@trustphone.app. To remove all local TrustPhone data, uninstall the app or clear its storage in Android settings.

16. Website Privacy

The TrustPhone website is hosted using GitHub Pages. Standard connection information, such as IP address and browser request details, may be processed by the hosting provider when you visit this website.

This website loads Google Fonts. Loading those fonts may cause standard connection information, such as your IP address, to be sent to Google. The website does not require an account and does not use a TrustPhone analytics service.

Learn more through GitHub's Privacy Statement and Google's Privacy Policy.

17. Children

TrustPhone is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through TrustPhone, please contact us at support@trustphone.app and we will delete it promptly.

18. Pennsylvania Law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, USA, without regard to its conflict of law provisions. Users in the European Union, United Kingdom, or other jurisdictions with applicable privacy laws may have additional rights regarding their personal data. To exercise any such rights, contact support@trustphone.app.

19. Changes to This Policy

We may update this Privacy Policy when TrustPhone changes. The effective date at the top of this page will be revised when an update is published. Material changes — particularly those affecting how personal data is collected or used — will be disclosed in the app and on this page before taking effect.

20. Contact

For questions about this Privacy Policy or TrustPhone's data practices, contact:

YS Ventures LLC
Pittsburgh, Pennsylvania, USA
Email: support@trustphone.app