CodeDroid Privacy Policy

CodeDroid LLC ("CodeDroid," "we," "us," "our") provides the CodeDroid Android app (the "App"), the CodeDroid MCP plugin (@codedroid/mcp), the CodeDroid servers they connect to, and the CodeDroid websites: www.codedroid.com, get.codedroid.com (where the App is downloaded), and the CodeDroid Skills Marketplace (together, the "Services"). The App lets an AI agent carry out tasks you ask for in the apps on your own Android phone.

This Privacy Policy explains what information we collect through the Services, how we use and share it, how long we keep it, and the choices you have. By using the Services you agree to this Policy and to our Terms of Use.

Account information. You sign in to the App with Google. We receive your name, email address, and Google account identifier, and we use your email address to identify your account.

Task content. When you start a task, we receive the instruction you type or dictate. While the task runs, the App sends our servers what the agent needs to see and do on your screen: the text and layout of the screen (read through Android's Accessibility Service), screenshots of the apps the agent is working in, the text it types, and the results of its actions. If you allow access to photos and videos, the App may include photos or videos that a camera app took during the task in the task's reply. When you use the MCP plugin, your computer's AI agent sends tool calls to your phone through our servers, including screen contents, screenshots, text to type, and clipboard reads and writes; pairing sends a one-time code, your computer's name, and its operating system.

Screens shown during a task may include personal information, such as messages, contacts, or account details, that appears in the apps the agent is asked to use. You choose which tasks to run and can stop a task at any time.

Voice input. If you allow microphone access and use voice dictation, the App records audio only while you are dictating and sends it to be transcribed into text. The transcript is then sent to an AI model to tidy punctuation and wording. We do not keep the audio or the transcript.

Device information. The device's manufacturer, model, Android version, screen size and density, the App's version, and a random identifier the App creates for your installation. We also receive the list of apps installed on your phone (each app's package name, display name, and version) so the agent knows which apps it can open for you.

Usage and diagnostic information. We use a product analytics service. The App reports events such as when it is opened, onboarding progress, and sign-in failures. Our servers report events such as sign-ins, the tasks you run and how they end (not their content), ratings, feedback, and invitations. These are linked to your installation identifier and, once you sign in, your email address. We use a crash reporting service, linked to your installation identifier. Screen recording, screenshots, and view hierarchies are turned off in both services.

Purchases. Paid plans and credit top-ups are processed by our payment processor. We receive records of your purchases, plan, and credit balance, but not your full card number.

Things you send us. Ratings and feedback you submit in the App, email addresses you ask us to send an App invitation to, and skills you create or share. If you contact us through the enterprise form on www.codedroid.com, we receive your name, work email, company, and message.

Website analytics. www.codedroid.com, get.codedroid.com, and the Skills Marketplace use analytics services, including Google Analytics on get.codedroid.com, to understand visits and downloads: the pages you view, the link or campaign that brought you, your browser and device type, and whether you download the App. Our product analytics service sets a cookie shared across codedroid.com sites. When you download the App and later sign in, we may link that visit to your account. Session recording is turned off.

What we do not collect. The App does not request access to your SMS messages, call log, contacts, calendar, or location. None of our websites use advertising cookies.

The App uses Android's Accessibility Service API, with your permission, so the agent can read what is on the screen and tap, scroll, and type in other apps to complete the tasks you ask for. It also provides an optional CodeDroid keyboard for typing text. The App uses these only while it is carrying out a request: a task you started in the App, or, if you paired a computer with the CodeDroid MCP plugin, a tool call from the AI agent on that computer. You can remove a paired computer at any time in the App under Settings > Computers. It does not use them to collect information in the background, and information read through them is used only to carry out your tasks and as described in this Policy. You can turn the Accessibility Service off at any time in Android's settings, after which the agent cannot operate your phone.

• To run the tasks you ask for and show you their results.
• To create and secure your account, and to process purchases and credits.
• To provide voice dictation and spoken audio you ask for.
• To diagnose crashes, fix problems, and understand how the Services are used.
• To improve the agent and the App, as described in Section 6.
• To respond to feedback and support requests and to send emails about the Services. You can opt out of non-essential emails through the link in each email.
• To detect and prevent abuse, and to comply with legal obligations.

We do not sell your personal information and do not use it for advertising.

Tasks are processed by AI models running in the cloud. We share information with service providers who process it on our behalf, only as needed to provide the Services:

• AI model providers: run the AI models that decide each step of a task. They receive your instruction and the screen contents and screenshots described above. They also tidy voice dictation transcripts and generate spoken audio when you ask for it.
• Speech recognition providers: transcribe voice dictation.
• Cloud hosting providers: host our servers, database, and stored files.
• Sign-in providers: Google, when you sign in with your Google account.
• Payment processors: process payments for plans and credits.
• Analytics and crash reporting providers: help us understand how the App and our websites are used, and diagnose crashes.
• Email and messaging providers: send emails such as App invitations and messages from the enterprise form, and deliver App feedback to our team.

Each provider receives only the information it needs for its part of the Services. To ask for the current list of providers, email info@codedroid.com.

We may also disclose information if required by law, to protect the rights, safety, or property of CodeDroid, our users, or others, or as part of a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information.

Our task records keep how a task went, how many steps it took, and what it cost, plus a one-way hash of the instruction. They do not keep the text of your instruction or the task's results. Our AI model providers may keep task conversations for a limited time under their own data policies.

While the Services are in beta, we may keep a record of tasks as the AI model saw them, including instructions, screen contents, screenshots, and the model's responses, to evaluate and improve the agent and the App. Access to these records is limited to CodeDroid staff who need it for that purpose.

We keep account, purchase, and device information while your account is open. Crash reports and analytics are kept for the periods set by those services.

• Delete your account in the App under Settings > Delete account, or by emailing info@codedroid.com from the address you sign in with. Deleting your account deletes your account and the information we have recorded for it, including stored task records and screenshots, and cancels any subscription. We may keep limited records where the law requires, such as payment records.
• Permissions. You can turn off the Accessibility Service, microphone, photos and videos, and notifications at any time in Android's settings. Features that rely on them will stop working.
• Cookies. You can block or delete cookies in your browser settings, or use Google's Google Analytics opt-out add-on. The websites work without them.
• Your rights. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict its processing. To make a request, email us. We will not discriminate against you for exercising these rights.

Information sent between the App, the MCP plugin, and our servers is encrypted in transit with TLS. API keys for AI providers stay on our servers and are never sent to your phone. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We are based in the United States and process information there and wherever our service providers operate. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

The Services are intended for people 18 years of age or older and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

We may update this Policy from time to time. We will post the updated Policy on this page and change the date at the top. If a change is material, we will give notice in the App or by email before it takes effect.

CodeDroid LLC, 2635 N First St #212, San Jose, CA 95134.

Questions or requests about this Policy or your information: info@codedroid.com.