Privacy Policy — ThiefSnap

Last updated: June 16, 2026

The short version. ThiefSnap protects your own phone. Everything it captures — your PIN, settings, and intruder selfies — stays on your device by default and is deleted when you uninstall the app. The microphone is only used, on-device, to hear a clap or whistle when you start “Find my phone”; audio is never recorded or sent anywhere. The data that leaves your device is limited to ads (Free version, via Google AdMob; upgrading to Pro removes them) and anonymous crash reports and app-usage analytics (via Google Firebase) that help us fix bugs and improve the app. Intruder selfies stay on your phone and are never uploaded. We never track other people. Questions: hieu.dtvt10@gmail.com.

1. Who we are

2. What the app does

ThiefSnap sounds a loud alarm when your phone is moved, taken from your pocket, unplugged, or its headphones/Wi-Fi are changed while protection is on; it can capture a selfie of whoever sets off the alarm (and on a wrong PIN), saved on your device; and it can ring on a clap or whistle to help you find a misplaced phone. It is designed to protect the owner’s own device.

3. Data we handle

3.1 On your device only (never sent to us)

All of the above is removed when you uninstall the app.

3.2 Microphone (clap / whistle)

When you start “Find my phone”, the app listens through the microphone on the device only to detect a clap or whistle. The audio is analysed in memory and immediately discarded. No audio is recorded, stored, or transmitted. Listening stops when you stop it or after a short timeout.

3.3 Ads (Free version)

The free version shows banner ads via Google AdMob. AdMob may collect and use a device advertising identifier (AD_ID) and related data to serve and measure ads, as described in Google’s privacy policy. Upgrading to Pro removes ads. See Google’s policy linked in section 6.

3.4 Purchases

Pro is a one-time purchase processed by Google Play Billing. Google handles the payment and tells the app whether you own Pro. We do not receive your payment details.

3.5 Crash reports & analytics (Firebase)

The app uses Google Firebase Crashlytics and Google Analytics for Firebase to understand stability and usage so we can fix bugs and improve the app. These collect, on our behalf: crash and error reports, basic diagnostics (device model, OS version, app version, app state at the time of a crash), anonymous app-usage events (e.g. which screens are opened), and app-instance / device identifiers (including the advertising ID). This data is processed by Google and is not used to identify you personally and is never sold. It does not include your PIN, selfies, history, or any audio. See Google’s policy in section 6.

3.6 What we do NOT collect

4. Permissions and why

PermissionWhy
CameraTake the intruder selfie when the alarm fires or a wrong PIN is entered (only if you enable it).
Microphone (record audio)Detect a clap/whistle for “Find my phone” — on-device, not recorded.
NotificationsShow the ongoing “protecting” notification and the alarm notification.
Foreground service (+ camera / microphone / special use)Keep protection running (and take the trigger-time selfie), or run the clap/whistle listener, while active.
VibrateVibrate during the alarm.
Biometric / fingerprintLet you disarm the alarm with biometrics (only if you enable it).
Internet, network state (auto-added by Ads/Billing)Serve ads and talk to Google Play Billing.
Advertising ID (AD_ID)Used by Google AdMob (free version) and Firebase Analytics (see sections 3.3 and 3.5).

5. Where your data goes

6. Third-party services

7. Your rights

7.1 Everyone

7.2 Vietnam (Decree 13/2023/ND-CP on Personal Data Protection)

If you are in Vietnam, you have the rights to be informed, to access, to correct, to withdraw consent, to delete, and to object to the processing of your personal data, and to lodge complaints with the competent authority. Contact us to exercise these rights.

7.3 EU / EEA (GDPR)

You have the rights of access, rectification, erasure, restriction, objection, and portability. Legal bases: performing the purchase contract (Pro), and your consent (ads). You may complain to your local Data Protection Authority.

7.4 California (CCPA/CPRA)

We do not sell or “share” your personal information. You have the rights to know, to delete, and to non-discrimination. The advertising ID used by AdMob may be treated as personal information; you can limit it in Android settings or remove ads by upgrading to Pro.

8. Children’s privacy

The app is not directed at children under 13 and we do not knowingly collect children’s personal information. If you believe a child has provided personal information, contact us.

9. Data retention & security

On-device data lives only on your device until you delete it or uninstall. The PIN is stored as a salted hash. Intruder selfies are stored only in the app’s private storage and are never uploaded.

10. Changes to this policy

We may update this policy. Material changes will bump the “Last updated” date above and, where appropriate, be noted in the app. Continued use after the effective date constitutes acceptance.

11. Governing law

Vietnamese law applies as the primary jurisdiction. Where mandatorily applicable, the GDPR (EU) and CCPA/CPRA (California) rights in section 7 are respected.

12. Contact

hieu.dtvt10@gmail.com — best-effort response within 7 business days.