Privacy Policy
Aegiss · Last updated 13 August 2026
Aegiss has no servers. It reads your phone's security settings on the device, shows you what it found, and sends none of it anywhere. There is no account to create, no analytics, no advertising and no third-party tracking.
An app that reads your phone's security posture and then uploaded it would be the exact thing it warns you about.
What Aegiss reads from your phone
When you run a check, Aegiss asks the operating system about the state of the device. Depending on your platform and OS version, that includes:
- Whether a screen lock is set, whether biometrics are enrolled, and how long the screen stays unlocked
- Whether the lock screen shows notification contents
- Your OS version and security patch level
- Whether storage is encrypted
- Whether the device appears rooted, jailbroken, emulated, or has a debugger attached
- Whether developer options or USB debugging are on
- Whether Google Play Protect, encrypted DNS and cloud backup are on
- Whether a VPN is active, and whether the Wi-Fi network you are currently on is encrypted
- The names of apps you have granted accessibility access, notification access, or device-administrator rights
- Your device model
All of it is read, scored and displayed on the device. None of it is transmitted, and Aegiss contains no networking code to transmit it with.
What Aegiss does not read
Aegiss does not access your location, contacts, photos, messages, call history, files, microphone, camera or browsing history. It does not read the name of your Wi-Fi network or anything that passes over it — only whether that network is encrypted. It does not enumerate the apps you have installed; it sees only the ones the system reports as holding one of the elevated permissions listed above.
What is stored, and where
Aegiss keeps a small amount of state in your phone's own app storage, in the private area the operating system reserves for it. That is:
- Your most recent score, the number of issues found, and when the scan ran
- Your best score so far
- Answers you have given to questions the app cannot measure itself
- Apps you have marked as reviewed and trusted
- Whether you have finished the welcome screen
- Your own invite code, the code of whoever invited you if you arrived through a link, and how many invites you have sent
- Which milestones have already been celebrated
Invite codes are eight random characters. They are not derived from you, your device or your account, and they are not registered anywhere.
This data is never uploaded. It is removed when you uninstall the app, and you can erase it at any time from Settings → Erase what Aegiss remembers.
Permissions
On Android, Aegiss declares two permissions:
ACCESS_NETWORK_STATE and ACCESS_WIFI_STATE. Both are
read-only, are granted at install time, and are used solely to tell whether a
VPN is active and whether the current network is encrypted. On iOS, Aegiss
requests no permissions at all.
When you share
Nothing leaves the app unless you tap share. When you do, Aegiss hands your phone's own share sheet an image of your score card and a link containing your invite code and score number — nothing else about your device, and none of the individual findings. You choose who receives it. Once it is sent, it is governed by the privacy policy of whichever app you sent it through, not by this one.
If someone opens one of those links in a web browser, the server hosting the page receives the request the way any website does, including the IP address and browser the visitor is using. That is a property of the web, not something Aegiss reports.
Third parties
Aegiss embeds no advertising networks, no analytics SDKs and no crash reporting. No third party receives data from the app. If you installed Aegiss from Google Play or the App Store, that store collects its own information about the download under its own policy; Aegiss neither controls nor receives it.
Children
Aegiss is safe for all ages and collects nothing from anyone, including children. It has no account system, no profile and no way to identify a user.
Your rights
Regulations such as the GDPR and CCPA give you rights to access, correct, export and delete the personal data a company holds about you. Aegiss holds none: there is no server, no database and no record of you anywhere outside your own phone. The data described above sits in your device's storage under your control, and the erase option in Settings deletes all of it immediately. There is nothing for us to sell, and we have never sold or shared any user data.
Changes to this policy
If Aegiss ever changes what it reads or stores, this page is updated before that version ships, and the date at the top changes with it. Its full revision history is public in the project repository.
Contact
Questions about this policy or about what the app does: ahmeddevfy@gmail.com.