DeviceSweep

English

Privacy Policy

Last updated: 2026-10-15

DeviceSweep ("the app", "we") is a phone security checkup that detects stalkerware, spyware and surveillance abuse. This policy explains what data the app handles — and the short answer is: your scan data never leaves your device, and the only thing we ever receive is a subscription purchase token, if you choose to buy one.

1. What the app does NOT do

• We do not collect, transmit, or sell personal data. There is no account system, no analytics SDK and no advertising SDK.
• Scan results, the list of installed apps, file hashes, and DNS events are stored only on your device and only for the app's own functions.
• Cloud backup is disabled (allowBackup="false"). Uninstalling the app deletes everything it has stored.
• Sharing is always user-initiated: exports (report, CSV, STIX 2.1) leave the device only when you choose a destination in the Android share sheet.

2. Network activity

2.1 Downloads — public threat intelligence

The app downloads public threat-intelligence data from public sources such as the Echap stalkerware-indicators dataset, abuse.ch feeds, and the CISA Known Exploited Vulnerabilities catalog. These requests:

• carry no user identifier, no device identifier, and no scan data;
• are ordinary HTTPS GET requests to public hosts;
• are integrity-checked, and the app works fully offline if they fail (a smaller bundled dataset is built into the app).

2.2 Uploads — the Pro subscription, and nothing else

If you buy the optional Pro subscription, the app sends your Google Play purchase token to our subscription-verification service, which asks Google whether that purchase is genuine and still active. While a subscription is active this happens once per app launch. It is the only request that carries anything about you.

• What is sent: the Google Play purchase token for your subscription.
• What is not sent: your name, your email address, your Google account, any device identifier, and any scan result.
• Our service stores a one-way hash of that token, together with the subscription's status and expiry date. It is used for nothing except answering "is this subscription active?" and detecting refunds.
• If you never subscribe, nothing about you is ever uploaded.

To have that record deleted, email support@vowsec.com.

Separately, the app sends one small request before each scan to check a usage allowance. It carries only the name of the operation — no scan data, and no identifier we can read. That allowance check is currently switched off on our side, so the request fails and the scan simply runs unmetered.

3. Optional DNS monitor — not included in this release

The app includes an optional DNS monitor that would use Android's VPN service locally to observe DNS queries (domain names only). It is not part of the version currently published: this release ships without it, so no VPN service is used and no DNS query is observed. This policy will be updated before any release that turns it on.

For completeness, when it is enabled: there is no tunnel to any remote server — queries are forwarded to your device's own configured DNS resolvers; matched domains are blocked and logged on-device; you can decline the permission and every other feature still works; and queries sent over encrypted DNS (DoT/DoH) are not visible to the app or to any scanner. Android allows only one active VPN, so enabling the monitor disconnects any VPN you already run, and disabling it does not restore that VPN automatically.

4. Permissions

• QUERY_ALL_PACKAGES — required to scan installed apps for known-bad indicators. Declared to Google Play as core functionality; details in our permission declaration.
• Usage access (PACKAGE_USAGE_STATS) — a special access you grant yourself in system settings (Settings > Apps > Special access > Usage access). It lets the app read app foreground/background events for the on-device forensic timeline. Without it the timeline simply has less to show; nothing else changes. The data is read and kept on your device only.
• Bluetooth / Wi-Fi permissions — not used by this app.
• All-files access (MANAGE_EXTERNAL_STORAGE) — not requested. The file-artifact check therefore cannot read shared-storage (/sdcard) paths; the app reports those as "could not be checked" rather than counting them as clean.
• System logs (READ_LOGS) — not requested. The report's log capture reads only this app's own process.
• VPN (VpnService) — not declared in this release. It is reserved for the optional DNS monitor in section 3 and will be declared, together with the required Google Play VPN-service declaration, in the release that enables it. Device posture and root indicators are read from standard system APIs.

5. Detection data & attribution

Threat indicators are sourced from the Echap stalkerware-indicators dataset (CC BY 4.0), with modifications — github.com/AssoEchap/stalkerware-indicators — as well as other public sources named in the app. Indicators are informational, may be incomplete, and change over time.

6. Open source

The app is based on AndroDR (Apache License 2.0).

7. Contact

Questions about this policy: support@vowsec.com

8. Changes

We will update this page when the policy changes and update the "last updated" date above.

9. Data deletion

What we hold about you. DeviceSweep has no user accounts. The only record linked to you is the subscription-verification record described in section 2.2: a one-way hash of your Google Play purchase token, your subscription's product, status and expiry date, and whether it has been acknowledged to Google. There is nothing else — no name, no email address, no advertising ID.

How to request deletion.

1. Email support@vowsec.com with the subject line Data deletion request.
2. Include the Google Play order number from your purchase confirmation (it looks like GPA.1234-5678-9012-34567). It lets us find the record without guessing. If you no longer have it, tell us the Google account email used for the purchase.
3. We reply within 7 days and delete the record within 30 days of your request.

What this does not do. It does not cancel your subscription and does not stop Google billing you — cancel that in the Google Play app (Menu > Subscriptions). While a subscription is active the app re-creates the record on its next launch, because that is how it knows you paid.

How long we keep it otherwise. A purchase record is kept for as long as the subscription can still be used or refunded; quota records are kept for abuse accounting. Once neither applies, the record has no further use and is removed on request.

Data on your own device. Scan results, the installed-app list, file hashes and the forensic timeline live only on your phone and are unaffected by this request. Uninstalling the app deletes all of them.

---

简体中文

隐私政策

最后更新：2026-10-15

DeviceSweep（下称"本应用"）是一款手机安全自检工具，用于发现跟踪软件 （stalkerware）、间谍软件与监控滥用行为。本政策说明本应用处理哪些数据——简短答案是： 你的扫描数据不会离开设备；我们唯一会收到的，是你自愿订阅时产生的购买令牌。

1. 本应用不做什么

• 我们不收集、不传输、不出售个人数据。本应用没有账号体系、没有统计分析 SDK、 没有广告 SDK。
• 扫描结果、已安装应用清单、文件哈希与 DNS 事件仅存储在你的设备本地， 且仅用于本应用自身功能。
• 云备份已关闭（allowBackup="false"）。卸载本应用即删除其存储的全部数据。
• 分享始终由你发起：导出内容（报告、CSV、STIX 2.1）仅在你于 Android 分享面板中选择 目标后才会离开设备。

2. 网络行为

2.1 下载 —— 公开威胁情报

本应用从公开来源下载公开威胁情报数据，例如 Echap stalkerware-indicators 数据集、abuse.ch 情报源，以及 CISA 已知被利用漏洞（KEV）目录。这些请求：

• 不携带任何用户标识符、设备标识符或扫描数据；
• 是指向公开主机的普通 HTTPS GET 请求；
• 经过完整性校验；若请求失败，本应用可完全离线工作（内置一份较小的兜底数据集）。

2.2 上传 —— 仅限 Pro 订阅，别无其他

如果你购买了可选的 Pro 订阅，本应用会把 Google Play 购买令牌发送到我们的订阅校验服务， 由后者向 Google 确认该笔购买真实且仍在有效期内。订阅有效期间，每次启动应用会发送一次。 这是唯一一个会携带与你相关信息的请求。

• 发送的内容：你订阅对应的 Google Play 购买令牌。
• 不发送的内容：你的姓名、邮箱地址、Google 账号、任何设备标识符，以及任何扫描结果。
• 我们的服务仅存储该令牌的单向哈希，以及订阅状态与到期日期；除回答"该订阅是否有效" 与识别退款外，不作他用。
• 如果你从不订阅，我们不会收到任何与你有关的数据。

如需删除该记录，请发邮件至 support@vowsec.com。

另外，每次扫描前本应用还会发送一个小请求以查询使用额度。它只携带操作名称，不含扫描数据， 也不含任何可被我们读取的标识符。该额度校验目前在我们这一侧处于关闭状态，因此请求会失败， 扫描直接以不计额方式运行。

3. 可选的 DNS 监控 —— 本版本不含此功能

本应用包含一个可选的 DNS 监控功能，开启后会在本地使用 Android 的 VPN 服务 观察 DNS 查询（仅域名）。该功能不在当前发布的版本中：本版本不含它，因此不会使用 任何 VPN 服务，也不会观察任何 DNS 查询。若未来某个版本开启该功能，我们会在发布前更新本政策。

为完整起见，该功能开启时的行为是：不存在通往任何远端服务器的隧道——查询被转发至你设备自身 配置的 DNS 解析器；命中的域名会在设备本地被拦截并记录；你可以拒绝该权限，其余所有功能不受影响； 通过加密 DNS（DoT/DoH）发出的查询对本应用、对任何扫描器都不可见。Android 仅允许一个 VPN 处于 活动状态，因此开启监控会断开你原有的 VPN，且关闭监控不会自动恢复它。

4. 权限

• QUERY_ALL_PACKAGES —— 用于扫描已安装应用是否命中已知恶意指标。已作为 核心功能向 Google Play 申报；详见我们的权限申报材料。
• 使用情况访问（PACKAGE_USAGE_STATS）—— 需你在系统设置中自行授予 （设置 > 应用 > 特殊应用权限 > 使用情况访问）。它让本应用读取应用的前后台事件， 用于本机取证时间线。未授予时只是时间线内容更少，其余行为不变。数据仅在本机读取与保存。
• 蓝牙 / Wi-Fi 权限 —— 本应用不使用。
• 所有文件访问（MANAGE_EXTERNAL_STORAGE）—— 未申请。 因此文件痕迹检查无法读取共享存储（/sdcard）下的路径；应用会把这类路径如实 标为"无法检查"，而不会算作干净。
• 系统日志（READ_LOGS）—— 未申请。报告中的日志捕获只读取 本应用自身进程。
• VPN（VpnService）—— 本版本未声明。它保留给第 3 节所述的 可选 DNS 监控，将在开启该功能的版本中声明，并同时完成 Google Play 要求的 VPN 服务申报。 设备姿态与 root 指标通过标准系统 API 读取。

5. 检测数据与署名

威胁指标来源于 Echap stalkerware-indicators 数据集（CC BY 4.0），并有修改 —— github.com/AssoEchap/stalkerware-indicators —— 以及应用中列明的其他公开来源。指标仅供参考，可能不完整，且会随时间变化。

6. 开源

本应用基于 AndroDR（Apache License 2.0）。

7. 联系方式

关于本政策的疑问：support@vowsec.com

8. 变更

政策变更时我们会更新本页面，并同步更新上方的"最后更新"日期。

9. 数据删除

我们持有哪些与你相关的数据。本应用没有用户账号。唯一与你关联的记录，是 第 2.2 节所述的订阅校验记录：Google Play 购买令牌的单向哈希、订阅的商品与状态、到期日期， 以及是否已向 Google 确认。除此之外没有别的——没有姓名、没有邮箱地址、没有广告 ID。

如何请求删除。

1. 发邮件至 support@vowsec.com， 标题写「Data deletion request」。
2. 附上购买确认中的 Google Play 订单号（形如 GPA.1234-5678-9012-34567）， 便于我们准确定位；若已找不到，请告知购买时使用的 Google 账号邮箱。
3. 我们会在 7 天内回复，并在收到请求后 30 天内删除该记录。

该请求做不到的事。它不会取消你的订阅，也不会停止 Google 扣款——请在 Google Play 应用内（菜单 > 订阅）自行取消。订阅仍然有效时，应用下次启动会重新创建该记录， 因为它正是靠这条记录判断你已付费。

其他情况下的保留期限。购买记录会在订阅仍可使用或仍可退款的期间内保留； 额度记录用于滥用核算。两者都不再适用时，该记录对我们不再有任何用途，将按请求删除。

你自己设备上的数据。扫描结果、已安装应用清单、文件哈希与取证时间线 只存在于你的手机本地，不受本请求影响；卸载应用即全部删除。