FAFO Security Privacy Policy
FAFO Security is an anti-theft alarm for your own Android phone. It has no ads, no analytics, no sign-up and no server run by the developer. The developer does not receive any of your data. This policy explains what the app accesses on your phone, what can leave your phone, and when.
What stays on your phone
- Settings (alarm, countdown, sensitivity, theme and similar) are stored on the phone.
- Trigger photos. When the alarm starts, the app uses the camera to take photos, then more at the interval you choose while the alarm continues. They are saved in app-private storage on the phone with a small record of time, camera used, battery level and charging state. No location is recorded. Photos are pruned under the storage limit you set, and you can view, share or delete them in the app at any time.
- Paired devices and circles. Names you give your devices, their public keys and circle permissions are stored on the phone. Private keys are kept in Android Keystore.
- Email settings (if you turn on photo email): the recipient list, the mail server, port and login you enter. A mail password is stored encrypted with a key held in Android Keystore.
App data is excluded from Android cloud backup. Uninstalling the app deletes all of it from the phone.
What can leave your phone, and when
| Data | Where it goes | When |
|---|---|---|
| Trigger photos and the sending address | The email server you set up, or Gmail if you sign in with Google, and from there to the addresses on your list | Only if you turn on photo email and the alarm goes off. Sent over an encrypted connection (TLS/HTTPS). If there is no connection the email waits on the phone and is sent later. |
| Alerts and reset or disarm commands | Your own paired devices on the same Wi-Fi network or over Bluetooth | When this phone's alarm goes off, or when you send a command. End-to-end encrypted with the paired keys. Never sent over the internet. |
| Intercom and push-to-talk audio | Your own paired devices on the same Wi-Fi network or over Bluetooth | Only while someone holds push-to-talk in the open app, or while room mode is turned on by the person at that phone. A notification and the system microphone indicator show the whole time. End-to-end encrypted. Nothing is recorded or stored. |
| Anything you share yourself | Where you choose | Only when you use the share button. |
The developer never receives any of this. Email you send is handled by your email provider under its own terms and privacy policy, and copies stay in the mailboxes involved until their owners delete them.
Deleting your data
FAFO Security keeps your data only on your phone, so you delete it yourself. There is no account to close and nothing to request from the developer.
- Trigger photos: open the app, go to Incidents, and delete single photos or a whole incident.
- Email settings and the saved mail password: open Settings, Photo email, and turn it off or clear the fields.
- Gmail permission (Google Play version): sign out in Settings, Photo email, or remove FAFO Security in your Google Account under Security, Third-party apps and services.
- Everything at once: uninstall the app, or use Android Settings, Apps, FAFO Security, Storage, Clear storage. This deletes all photos, settings, paired devices and keys from the phone.
The developer holds no copy, so nothing is kept after you delete it. Photos already emailed stay in the mailboxes they were sent to until those mailbox owners delete them. Questions: fafo@crandell.ws.
Google sign-in and Gmail (Google Play version)
If you choose to send photo email through Gmail, the app asks Google for permission to send email
on your behalf (scope gmail.send). It uses that permission only to send the trigger-photo
emails you set up, to the addresses you chose. It cannot read, delete or change your email. The app keeps
no copy of your Google data off the phone and shares it with no one. You can remove the permission at any
time in your Google Account under Security, Third-party apps and services.
FAFO Security's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Permissions
- Camera: trigger photos during an alarm. Camera flash as an alarm light, if turned on.
- Microphone: intercom and push-to-talk only, asked when you first use them.
- Nearby devices (Bluetooth, Wi-Fi): pairing and talking to your own devices. Not used to find your location.
- Notifications and full-screen alerts: the armed notification and the alarm screen over the lock screen.
- Network access: your local network for paired devices, and the internet only for photo email if you turn it on. If you approve it, the app may suggest an open Wi-Fi network to send queued photo email when no other connection exists.
- Battery optimization exemption, Do Not Disturb access, run at startup: keep the alarm running and audible, and resume it after a restart.
Children
The app is not directed to children under 13 and collects no data from anyone for the developer.
Security
Keys are kept in Android Keystore, device-to-device traffic is end-to-end encrypted and authenticated, and email is sent only over encrypted connections. No method is perfect; keep a secure screen lock on your phone.
Changes
If this policy changes, the new version is posted at this address with a new effective date. A change that sends any new kind of data off your phone will be shown in the app before it takes effect.
Contact
Questions: fafo@crandell.ws