PhantomGuard Privacy Policy

Last updated: August 20, 2026

PhantomGuard is a device-protection and lost-device recovery app intended for the owner of the protected device. It is not designed for secret monitoring of another person.

Data PhantomGuard may collect

• Account/contact data you provide: owner email, optional alert email addresses, and device name.
• Device data: model/manufacturer, Android version, a PhantomGuard device identifier, battery/charging status, network type, lock/screen status, and an optional Firebase push token.
• Location: precise or approximate location when protection is enabled. If you separately enable Android background location, location may be collected even when the app is closed or not in use so lost-device recovery can continue.
• Security events: failed-unlock or SIM-state events and commands issued from the authenticated dashboard.
• Photos/audio: only after a visible, one-time approval on the protected phone and the applicable Android camera or microphone permission is granted.

How data is used

Data is used to provide device protection, lost-device recovery, location history, security alerts, owner-requested commands, and the authenticated PhantomGuard dashboard.

Where data goes

The Android app sends protection data over HTTPS to the PhantomGuard server URL configured by the device owner. A deployment may use Cloudflare for application/database/object storage, Firebase for optional push delivery, and SendGrid for optional email alerts. The included PhantomGuard source contains no advertising SDK and does not implement sale of user data.

Camera and microphone

A remote request cannot silently activate either sensor. The protected phone displays a visible approval prompt. The sensor is used only after approval and Android permission, and sensor use occurs in a visible foreground-service flow.

Background location

PhantomGuard collects location data to enable lost-device recovery and location history even when the app is closed or not in use only when the device owner explicitly enables Android background location. The owner can leave background location disabled.

Security and retention

Device credentials are encrypted in release builds when Android secure storage is available. Backend requests use device credentials and HTTPS. Server-side retention is controlled by the operator of the configured PhantomGuard server; records should be deleted when no longer needed.

Your choices

You can disable Protection, revoke Android permissions, deny any camera/microphone request, disable Device Administrator access, and uninstall PhantomGuard.

Children

PhantomGuard is not directed to children under 13.

Contact

Use the developer support contact published with the PhantomGuard Google Play listing for privacy questions or deletion requests. If the Play listing uses a developer/entity name other than PhantomGuard, this page must be updated to identify that same entity before publication.