Privacy Policy for WristGuard: Find My Phone (WristGuard Pro, Watch Lock & Find)

Last Updated and
Effective Date:
October 22, 2026

This Privacy Policy describes how WristGuard: Find My Phone (WristGuard Pro, Watch Lock & Find) ("We", "Us", "Our", or the "Company") collects, processes, uses, and protects your personal data when you use our mobile application and related services.

We are committed to protecting your privacy in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, the Information Technology Act, 2000, and Google Play Data Safety guidelines.

1. Introduction & Core Privacy Pledge

WristGuard: Find My Phone (also shown as "WristGuard Pro" on the phone and "WristGuard Watch" on the watch, and previously called "Watch Lock & Find") lets you ring, lock and locate your own phone from your own Wear OS watch, and ring your watch from your phone. This Privacy Policy explains what the phone app and the watch app collect, why, who processes it and how you can delete it. We do not sell your data, we show no advertising, and the apps contain no analytics or crash-reporting SDKs. This policy is written to comply with the Digital Personal Data Protection Act, 2023 (DPDP, India), the General Data Protection Regulation (GDPR, EU), the California Consumer Privacy Act (CCPA) and Google Play's User Data policy.

1. Roles Under the DPDP Act, 2023

►
Data Fiduciary: Under the DPDP Act, 2023, we act as a Data Fiduciary and process your data only to provide the app's functions: linking your phone and watch, delivering the commands you send between them, showing a device's location when you ask for it, and managing your plan.
►
Data Principal: You act as the Data Principal. You can access, correct and erase your data, and withdraw your consent (for example for location) at any time.

2. Notice of Itemized Data Collection (Section 5, DPDP Act)

We collect and process the following specific categories of personal data with your explicit consent:

A. Account Data

►
What is collected: Your Google account email address, a sign-in identifier, and the display name and photo Google provides when you use Google Sign-In. We never receive your Google password. A very small number of reviewer or test accounts use an email address and password instead.
►
Purpose: To create your account, keep your phone and watch linked to the same account, and secure access to it.

B. Watch Pairing Data

►
What is collected: A watch you pair by code signs in anonymously and gets a random identifier. The one-time 8-character pairing code (valid for 10 minutes and deleted once used) links it to your account. When the watch is near, the code is also announced over Bluetooth to your own phone so it can offer one-tap linking.
►
Purpose: To link your watch to your account without typing a password on the watch. You can remove a watch from your account at any time.

C. Device Information & Status

►
What is collected: A device ID, device name and type (phone or watch), platform, battery level, online status, the time each device last checked in (about every 30 minutes), and whether the phone is currently ringing, locked or flashing its light.
►
Purpose: To show whether your watch and phone are online and to light up the matching buttons on your watch. Only the latest status is kept; it is overwritten at each check-in.

D. Commands

►
What is collected: The commands you send between your devices (ring, stop ringing, lock, unlock, SOS, flashlight, locate), their status and timestamps, and which device sent and received them. Commands not executed within 5 minutes are ignored.
►
Purpose: To deliver and run your commands. Commands sent over Bluetooth between your own phone and watch are delivered directly and do not pass through our servers.

E. Location Data

►
What is collected: Your watch's location, sent to your account at its periodic check-in while the watch app has location permission. Your phone's location is sent only when you ask for it from your watch. Only the most recent position is stored (no location history). The apps also keep the last position on the device so it can be shown quickly.
►
Purpose: To show where your watch or phone was last seen. The location is shown only to your own account and the watches you linked, and you can switch it off any time in your device settings.

F. Purchases & Plan

►
What is collected: Your plan (free or paid), the product you bought (monthly, yearly or lifetime), the activation time and the Google Play purchase token.
►
Purpose: To unlock Pro features for the length of your purchase. Payments are handled entirely by Google Play. We never receive your card or payment details.

G. Free-Trial Record

►
What is collected: The time your 7-day free trial started, plus one-way SHA-256 hashes of your email address and of your device ID.
►
Purpose: To stop the free trial being restarted repeatedly. The hashes cannot be turned back into your email or device ID, and they are kept after account deletion for this fraud-prevention purpose only (legitimate interest).

H. What We Do Not Collect

►
What is collected: No contacts, messages, call logs, photos, videos, audio recordings, files, advertising ID, or browsing history. The flashlight feature only turns your phone's light on and off; the apps never take photos or record video. We do not run analytics or crash-reporting services. Google's Firebase and Google Play services may process standard technical data such as IP address and device diagnostics to operate their services.
►
Purpose: Data minimization.

Device Permissions & Justifications

To perform its advertised core functionality as an advanced time tracker, mission countdown tool, and exact alarm clock, our application requests specific operating system permissions:

Location (precise and approximate)
Lets your watch and phone report where they are so you can find them. Used only when you have granted the permission, and the phone shares its position only when you ask for it.
Nearby devices / Bluetooth
To notice when your watch disconnects (so the phone can auto-lock), to send Find phone, Lock and SOS directly between your own devices without internet, and to link a watch with one tap.
Device Administrator (lock screen only)
Lets the app lock your phone's screen when you press Lock or SOS on your watch. It cannot unlock the phone, erase data or read anything on it. You can switch it off in system settings.
Do Not Disturb access, change audio settings
So Find phone can ring at full volume even when the phone is on silent or Do Not Disturb.
Foreground service, run at startup, ignore battery optimization
Keeps the listener running with a visible notification so lock and ring work when the app is closed, and restarts it after a reboot. Battery-optimization exemption is optional.
Notifications
Shows the required "WristGuard is active" notice and the "your watch is ringing" alert with a Silence button.
Internet, vibrate, wake lock
To reach our database, to vibrate and ring the watch, and to run a command while the screen is off.

3. Consent & Right to Withdraw Consent (Section 6, DPDP Act)

Our legal basis is the performance of a contract (providing the app's functions) and your explicit consent for location. We use legitimate interest only for the hashed free-trial record.

Right to Withdraw Consent (Section 6(4))

You have the absolute right to withdraw your consent at any time. You can withdraw consent by:

►
Turn off location, nearby devices, notifications or device-administrator access in your device's system settings at any time; the related features simply stop working.
►
Remove a watch or an old phone in Settings > Manage Devices.
►
Sign out, or delete your account in Settings > Delete Account.

Deleting your account, in the app or on the deletion web page, immediately and permanently deletes your account, your devices, commands, pairing data, last known locations and plan record from our database. Linked watches return to the pairing screen. The hashed free-trial record is kept, and Google keeps its own purchase records under its own policy.

4. Right to Erasure / Account Deletion (Section 12(3), DPDP Act & Google Play)

You can delete your account and data yourself at any time, instantly and automatically, in the app or on the web. No request or approval is needed. This section is our account and data deletion page for Google Play.

►
In-App Deletion: Open the phone app, go to Settings > Delete Account, enter your password (or confirm with Google) and tap Delete. Everything is removed immediately.
►
Manual Deletion: If you no longer have the app, go to https://privacypolicies-beta.vercel.app/delete-account, sign in with the same Google account and confirm. Your account and data are deleted immediately and automatically, with no waiting and no email needed. Deleted data cannot be recovered.

5. Third-Party Data Processors & Disclosure (Section 8 & Section 16)

We do not sell your personal data. We disclose your data only to the following vetted Data Processors who process data on our behalf under strict security obligations (Section 8(5)):

Data ProcessorService ProvidedData Shared
Google Firebase (Authentication and Cloud Firestore)
Google Sign-In and Google Play Billing
Google Play services (Wearable Data Layer)
Google Maps (only when you choose)

In the event of any data breach impacting your personal data, we will promptly notify both you and the Data Protection Board of India (DPBI) in compliance with Section 8(6) of the DPDP Act.

6. Sharing of Information

We do not sell your personal data and we do not share it for advertising. Your devices' data is readable only by your own account and the watches you linked. We may share information only in these situations: • Service providers listed above, to run the app. • Legal Obligations: if required by law, subpoena or other legal process, or to protect the rights, property or safety of our users or others. • Business Transfers: in connection with a merger, sale of company assets, financing or acquisition.

7. Remote Commands & Your Responsibility

The app lets a watch signed in to or paired with your account lock and ring your phone. Pair only watches you own, remove watches you no longer use, and keep your Google account secure. If a watch is lost, remove it in Settings > Manage Devices.

8. Data Security & Storage (Section 8(5))

Retention: your account data is kept while your account exists and is deleted when you delete it (device status and location keep only the latest value). Security: data is encrypted in transit (HTTPS/TLS) and at rest by Google Cloud. Database security rules limit access to your own account and the watches you paired, commands older than 5 minutes are ignored, and email sign-in is limited to approved reviewer accounts. No electronic transmission or storage is 100% secure.

9. Children's Privacy

Our Service does not target and is not intended for use by children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we discover we have inadvertently collected such data, we will delete it immediately.

10. Developer Contact & DPDP Act Compliance (Section 8(9) & Section 13)

In compliance with Section 8(9) and Section 13 of the Digital Personal Data Protection Act, 2023, the contact details of the Developer are published below:

►
Name: Data Protection/Grievance Officer
►
Role: Grievance Officer
►
►
Address: Uttar Pradesh, India
►
Response Timeline: Questions, privacy requests and grievances can be sent to the email above. We aim to reply within 7 days and always within the timelines required by the DPDP Act and GDPR.

Right to Approach the Data Protection Board (Section 13(3))

If your inquiry or grievance is not resolved to your satisfaction by the Developer, you have the statutory right to file a formal complaint with the Data Protection Board of India (DPBI).

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last Updated" date, and we may also notify you with an in-app notice or by email for material changes.

12. European Union (GDPR) & California (CCPA) Privacy Rights

►
GDPR Legal Basis: Under GDPR and DPDP, our legal basis for processing is the performance of a contract (providing the app's functionality), your explicit consent (for location), and legitimate interest (fraud prevention through the hashed free-trial record). You have the right to access and portability, rectification, erasure, restriction and objection, and to withdraw consent, and to complain to your data protection authority.
►
CCPA "Do Not Sell or Share My Personal Information": We do not sell or share your personal data for cross-context behavioral advertising. We will not discriminate against you for exercising your privacy rights.