Privacy Policy

This policy applies to all users of the GuardianCircle mobile application (Android), the web dashboard at guardiancircle.ca, and any related services.

When you create an account: your email address and, optionally, your name. If you sign in with Google, we receive your Google account email and display name.

When the person uses the mobile app: incoming SMS and MMS messages from unknown senders are analyzed for scams by default. We collect the sender's phone number or email address and the full message body. Messages from anyone saved in that person's contact list are skipped by default and stay on the phone. The person can choose to check all texts.

When using call protection: the person turns on call forwarding so calls from unknown numbers go to a Guardian Circle phone number at our phone partner, Twilio. Live calls are never recorded. While the call is live, the audio passes through Twilio and is turned into words by Google's speech service. Those words are checked for scam patterns. We store the transcript text and the scam result in History. Unanswered calls from unknown numbers can leave a voicemail. Twilio records that voicemail. We download it, turn it into words, check it, and copy the audio to our servers in Toronto. Then we delete it from Twilio. If that delete fails, we retry automatically. The person can play the voicemail in the Guardian Circle app. Family members can play it on the website only if the person chose to let family read messages. Calls from saved contacts are not checked by default. The person can choose to check all calls.

Call and voicemail audio is turned into words by Google's speech service in Montreal, with Google's global service as a backup if Montreal is unavailable. Scam checking of the written words runs on Google Gemini in Montreal. Twilio's network is outside Canada.

When using the notification listener (optional): only what Android shows in the notification is read for apps you enable (for example WhatsApp, Messenger, Telegram, Signal, TikTok, Gmail, Outlook, Yahoo Mail, or Proton). We never open the inbox or chat history. For a short message the notification often contains the whole message. Unknown senders only by default. The person can choose to check all previews per app.

Check a message or Share: anything the person pastes or shares into the app is checked, even from a saved contact, because they asked.

Saved contact numbers: phone numbers from the contact list (not names or photos) may be sent to our server so call screening can skip people they know.

Usage data: standard server logs (IP address, browser/app version, request timestamps). Retained for up to 90 days for security and debugging.

• Messages from saved contacts by default (the person can choose to check all texts)
• Inbox or chat history inside messaging or email apps (notifications only)
• Outgoing messages or calls
• Device location or GPS data
• Photos, files, or media on the device (unless the person shares them into the app)
• Passwords or financial account numbers
• A recording of a live conversation (transcript text only)

Message content, call transcripts, and notification previews are used solely to detect scams in real time and generate caregiver alerts. We do not use that content for advertising, profiling, or any purpose other than scam detection.

Account information (email, name) is used to authenticate you, link caregivers to the person they watch over, and send security notifications (sign-in links, OTP codes).

Twilio Inc.: Phone numbers for call protection, live call audio in transit, and temporary voicemail recordings. Twilio's network is outside Canada. When an unknown caller leaves a voicemail, Twilio records it. We copy the audio to our servers in Toronto, then delete it from Twilio. If that delete fails, we retry automatically.

Google (Speech-to-Text): Call and voicemail audio is turned into words by Google's speech service in the Canada (Montreal) region. If the Montreal service is unavailable, Google's global service is used as a backup so calls are still checked, and that backup may process audio outside Canada.

Google Cloud (Gemini AI on Vertex AI): The written words from messages, notification previews, and call transcripts (sender or caller details plus text) are sent to Vertex AI in the Canada (Montreal) region for scam analysis. Gemini does not hear the call audio. Data processed through Vertex AI is not used to train Google's AI models. Google Cloud is SOC 2 Type II and ISO 27001 certified.

Fly.io: Our servers and database run on Fly.io's infrastructure in the Toronto (yyz) region. Account data, History (checked messages, transcripts, and results), and voicemail audio are stored there.

Resend: Sign-in email (magic links and one-time codes) is sent through Resend.

We do not sell, rent, or trade personal information to any third party.

Scam analysis results (event records) are retained until you delete your account or request deletion. You can delete your account and the data we keep for it in the Android app under Advanced settings, on this website at guardiancircle.ca/delete-account, or by emailing [email protected]. Deletion removes your account, History (including message content and caller or sender numbers), voicemail recordings we still have, the blocked-caller list, synced known-contact numbers, family links, and call-quality diagnostics. Deleting the account on the protected phone also removes what linked family members can see for that person. Deletion is permanent.

Voicemail audio is kept on our servers in Toronto for 30 days, then deleted. The written transcript and the scam result stay in History until you delete them or delete your account. Deleting your account deletes the voicemail audio right away.

Server logs are retained for 90 days. Our phone partner and other service providers may keep records they are required to keep by law. We cannot delete those records on your behalf.

A caregiver can only see scam alerts for a person who has explicitly linked them using a 6-digit code generated on that person's phone. That person is the sole gatekeeper of their own data.

By default, caregivers see only the scam type and a redacted sender (e.g., "***4321"). Seeing full message content requires that person to turn on the "Share full messages" toggle in Settings for that specific caregiver.

All data in transit is encrypted using TLS 1.2+. Data at rest is encrypted at the database level. Authentication uses one-time codes and short-lived JWT tokens stored in secure on-device storage. We do not store plaintext passwords.

If you believe there has been a security incident, please contact us immediately at [email protected].

You have the right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and all associated data
• Withdraw consent at any time (by deleting your account)
• File a complaint with the Office of the Privacy Commissioner of Canada

To delete your account, use the Android app under Advanced settings, open guardiancircle.ca/delete-account, or email [email protected]. To exercise any other right on this list, email the same address.

We will notify users of material changes to this policy by email and by a notice in the app at least 14 days before the changes take effect.

GuardianCircle
Email: [email protected]
Website: guardiancircle.ca