Privacy policy
Last updated 19 October 2026
This policy explains what information Spy-da collects through Guardian, Spy-da VPN, Spy-da phones and this website, why we collect it, and what you can do about it. If you have a question about this policy, email support@spy-da.com.
What Guardian does on your phone
Guardian reads the list of apps on your phone and the permissions each one holds, scans your storage for duplicate photos and documents, checks photos for stored locations, and lets you browse and delete files. These checks happen on your phone. Guardian does not have Android's internet permission, so the results, your photos, your documents and the contents of your Secure Vault cannot be uploaded by Guardian.
Guardian asks for the Android permissions it needs to do this, such as access to your photos and files and usage access. You can withdraw any permission in your phone's settings at any time; the features that rely on it will stop working until you allow it again.
Secure Vault
Files you move into the Secure Vault are encrypted and stored on your phone. Spy-da cannot see or recover them. If you lose access to your vault lock, we cannot unlock it for you.
Spy-da VPN
When you set up Spy-da VPN, the app creates a private key on your phone and registers the matching public key with our VPN server. The server needs this, and the internet address your phone connects from, to send your traffic. We don't log the websites you visit or the content of your traffic. If you choose ad and tracker blocking, the names of the sites your phone looks up are checked against a blocklist by the DNS provider you chose (AdGuard DNS or Quad9). If you remove a server in the app, your phone's key is deleted from it.
Spy-da phones
If you reserve or buy a phone, we keep your name, email, delivery address and order details so we can deliver it, handle returns and keep the records the law requires. Spy-da OS checks our update server for security updates; that check doesn't include your personal information.
Your account and subscription
If you subscribe, we keep the email address on your account and the state of your subscription (which plan you're on and when it renews) so we can give you the features you've paid for. Payments are handled by our payment providers, such as Google Play or Stripe. We don't receive or store your full card details.
This website
If you join the waitlist or reserve a phone, we store your email address, the date and anything you chose (such as a phone model) so we can contact you about it. We use it for nothing else, and we delete it if you ask us to.
Our web server keeps standard access logs, including your IP address and browser type, for security and to fix problems. These logs are deleted on a rolling basis. This website doesn't use advertising or tracking cookies.
Who we share information with
We don't sell your information. We share it only with the companies that help us run our service, such as our hosting, delivery and payment providers, and only as much as they need. We'll also share information if the law requires it.
How long we keep it
- Waitlist and reservation emails: until we've told you about launch or your reservation, or until you ask us to delete yours.
- Orders, account and subscription details: while your account is open, and afterwards for as long as we're legally required to keep sales records.
- VPN keys: until you remove the server in the app or close your account.
- Server logs: a short rolling period.
Your rights
Under UK and EU data protection law you can ask us for a copy of the information we hold about you, ask us to correct or delete it, or object to how we use it. Email support@spy-da.com and we'll respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Our products aren't directed at children under 13, and we don't knowingly collect information from them.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. If a change affects how we use information we already hold, we'll tell you in the app or by email first.