Privacy Policy

1. Information We Access and Process

To provide security features such as scam detection, phishing protection, and secure payment monitoring, PayShield accesses specific permissions on your device only when granted by you:

• SMS & MMS Access (READ_SMS, RECEIVE_SMS, SEND_SMS): Used exclusively to scan incoming SMS messages for malicious links, financial fraud, and phishing attempts, and to enable secure messaging management.
• Call Logs & Phone State (READ_CALL_LOG, READ_PHONE_STATE): Accessed to detect spam callers, financial impersonation calls, and potential voice-phishing threats.
• Contacts Information (READ_CONTACTS): Used locally to verify whether incoming callers and SMS senders are trusted contacts, reducing false positive fraud alerts.
• Camera (CAMERA): Used strictly on-demand when you open the QR Scanner feature to scan payment and URL QR codes for security validation. No images or videos are recorded or saved.
• Installed Application List (QUERY_ALL_PACKAGES): Used to scan your device for potentially malicious apps, fraudulent payment clones, or side-loaded applications with dangerous permissions.
• Location Data (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Used to evaluate local network security (e.g., untrusted Wi-Fi detection) and location-bound security risks.
• Notification Access & System Overlays (SYSTEM_ALERT_WINDOW, POST_NOTIFICATIONS): Used to deliver real-time security warnings and display protective alerts during sensitive payment activities.

2. How We Use Your Data

Your data is processed strictly for the following purposes:

• To identify and block fraud, malware, spam calls, and phishing attempts in real-time.
• To analyze payment safety risks and alert you before sensitive transactions occur.
• To provide you with security insights and diagnostic reports regarding your device safety.

No Commercial Data Sale: We do NOT sell, rent, or trade your personal data, call logs, contacts, or messages to advertisers or third-party data brokers.

3. Data Storage & Security

We prioritize on-device processing wherever possible:

• Local Processing: Machine learning models and security scans for SMS and installed apps operate primarily on your device.
• Data Encryption: Any security metadata transmitted for threat analysis (such as suspicious URL hashes) is protected using industry-standard HTTPS/TLS encryption.
• Security Safeguards: We implement administrative and technical security measures to prevent unauthorized access, loss, or disclosure of data.

4. Data Sharing

We do not share your personal information with third parties, except in the following limited circumstances:

• Service Providers: Standard backend service providers (e.g., threat intelligence lookup APIs, cloud hosting) operating under strict confidentiality obligations solely to verify security threats.
• Legal Requirements: If required by law, regulation, or legal process to protect user safety and security.

5. Data Retention & User Control

• You can revoke any permission (SMS, Contacts, Camera, Location, Call Logs) at any time through your Android Device Settings.
• Local security logs and scan histories can be cleared from within the application settings.
• If you wish to request deletion of any stored backend threat report data associated with your account, please contact us at the email provided below.

6. Children's Privacy

PayShield is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

7. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates or regulatory requirements. We encourage you to review this page periodically.

8. Contact Us