Privacy Policy — Egidio
1. About us
Egidio is a service published by a French sole proprietorship registered under SIREN 105 960 389 (R.C.S. Strasbourg), referred to as "we" or "the publisher." Full publisher identification is available in the Legal Notice.
Contact: contact@egidio.app
Privacy: privacy@egidio.app
Registration: SIREN 105 960 389, R.C.S. Strasbourg
2. Core principle: your communications never leave your device
The content of your communications — numbers, contacts, calls — is analyzed exclusively on your device and is never transmitted, sold, or shared. There is no user account, no server processing your communications, and no advertising network. The protection functions (call filtering) depend on no network connection.
The only data that ever leaves your device is: anonymous, aggregated usage statistics (details in §3.5), enabled by default but disableable at any time in the app's privacy settings; and, only if you activate Le Cercle (family mode, an optional subscription-sharing feature, details in §3.6), a device identifier and your purchase token. None of this data ever includes the content of your communications, your phone numbers, or your contacts.
3. Data processed locally on your device
Egidio stores the following information in a local encrypted database on your device (SQLite via Room). This data never has internet access.
3.1 Protection data (retained until deleted by user)
| Data | Purpose | Access |
|---|---|---|
| Blocked phone numbers | Display in history screen | You only |
| Whitelist and blacklist entries | Applying your rules | You only |
3.2 Behavioral analysis data (automatic purge)
| Data | Purpose | Retention |
|---|---|---|
| Anonymized risk scores | Calibration of the detection engine | 30 days maximum |
| Event signals (type, timestamp) | Temporal pattern detection | 30 days maximum |
| Internal engine calibration history | Internal engine improvement | 7 days maximum |
| Adversarial patterns (no content) | Spoofing attack detection | 30 days maximum |
3.3 Cognitive engine state (persistent, non-identifiable)
The decision engine maintains a floating-point state vector of 4 values (scores between 0 and 1). This vector contains no personally identifiable information. It represents a statistical estimate of the device's threat environment.
3.4 What is never stored
- Content of voice calls
- Phone numbers of allowed contacts (point-in-time lookup only for matching)
- Biometric data
- Location data
- Advertising identifiers
3.5 Anonymous usage statistics (enabled by default, disableable)
To measure feature adoption and improve the application, Egidio transmits anonymous, aggregated usage statistics via PostHog, whose servers are located in the European Union. Transmission is encrypted (HTTPS).
| Transmitted | Never transmitted |
|---|---|
| Event type (e.g. "call blocked", "paywall shown") | Phone numbers |
| Detected country, language, and app version | Content of SMS and calls |
| Subscription tier (FREE / PREMIUM...) | Contacts |
| A random, resettable install identifier (UUID) | Device identifier (IMEI, ANDROID_ID, advertising identifier) |
This install identifier is randomly generated, stored locally, not linked to any identity, and can be reset (which severs any link to prior measurement history).
You stay in control: this collection is enabled by default, but you can disable it entirely in the app's privacy settings. Collection then stops immediately.
Legal basis: legitimate interest in improving the service, limited to non-identifying data. You have a right to object, exercisable via the setting above.
3.6 Le Cercle (family mode) — the only data transmitted, and only if you activate it
Le Cercle lets you share your subscription with up to 4 people. This feature is optional: if you do not activate it, nothing in this paragraph applies to you. If you activate it (as the buyer inviting family members, or as a member joining a Cercle), the application transmits the following to our servers, over HTTPS:
| Transmitted (only if Le Cercle is activated) | Never transmitted |
|---|---|
The Google Play purchase token (purchaseToken), to verify your subscription and manage family slots | Card numbers or payment details (handled exclusively by Google Play Billing) |
| A random, resettable device identifier, generated locally, to identify which device occupies which slot | Content of calls, SMS, or messages; contacts; phone numbers |
You stay in control: you can revoke a device's access to Le Cercle at any time from the app (which deletes its identifier from our servers), or uninstall the app to erase the local identifier.
Legal basis: performance of the family subscription contract you explicitly requested by activating this feature.
4. Required permissions and justification
In accordance with Google Play policy, we justify each requested permission:
READ_PHONE_STATE
Why: detect incoming calls in real time to analyze their risk before they reach the user.
Use: reads call state (RINGING, IDLE). No data is transmitted.
READ_CONTACTS
Why: identify calls from your contacts to automatically allow them (implicit whitelist).
Use: local matching only. Contact phone numbers are never stored by the application.
CallScreeningService role (caller ID / spam blocking)
Why: enable active blocking of incoming calls via the Android CallScreeningService API (Android 10+), without which Egidio cannot identify or filter any call.
Use: silent reject or accept only. No audio content is accessible or recorded.
Notification access (BIND_NOTIFICATION_LISTENER_SERVICE)
Why: detect fraud attempts received through your messaging apps (WhatsApp, Telegram, Messenger, etc.), whose content is not exposed through standard Android permissions.
Use: Egidio reads only the text of incoming messaging notifications, on-device, for immediate local analysis. This text is never transmitted, never stored beyond the time needed for that analysis, and never shared. You can revoke this access at any time in Android Settings (Apps → Special access → Notification access).
INTERNET and ACCESS_NETWORK_STATE
Why: transmission of the anonymous usage statistics described in §3.5, verification of your subscription status with Google Play, fetching encrypted detection database updates, and — only if you activate Le Cercle — transmission of the data described in §3.6.
Use: no communication data (call, SMS, message) ever travels over the network. Only the data listed in §3.5 and, where applicable, §3.6 is transmitted.
POST_NOTIFICATIONS
Why: inform the user of blocked calls.
Use: local notifications only.
FOREGROUND_SERVICE and FOREGROUND_SERVICE_SPECIAL_USE
Why: maintain the protection service active in the background, required by Android 12+ for communication protection applications.
RECEIVE_BOOT_COMPLETED
Why: automatically restart the protection service when the device boots.
5. No audio recording
Egidio does not record calls, does not request microphone access, and does not store audio files. Call protection uses Android call-screening metadata only.
6. In-app purchases and billing
Purchases are processed exclusively by Google Play Billing. Egidio does not collect, store, or process any payment information. Please consult Google's Privacy Policy for applicable terms.
Subscription status (FREE / PREMIUM / FAMILY / LIFETIME) is verified with Google Play and stored locally in the application's encrypted preferences.
If you activate Le Cercle (family mode), the purchase token is also transmitted to our servers to manage family slots — see §3.6.
7. Your rights under the Australian Privacy Act 1988
As an Australian resident, your personal information is handled in accordance with the Australian Privacy Principles (APPs). Because Egidio's architecture is on-device-only, the amount of personal information we actually hold about you is minimal — but you retain the following rights:
Access
All your data is viewable directly in the application: History screen for blocked calls, Settings screen for lists.
Correction
You can modify or delete any entry individually from history, whitelist, or blacklist.
Deletion
Settings → Clear all data immediately and permanently deletes:
- All blocked calls
- All decision logs
- All behavioral signals
- Engine calibration history
- Adversarial pattern history
Data not deleted by this action: your whitelist and blacklist (data you voluntarily created), and application settings.
Restriction of processing
Disabling protection in settings immediately stops all processing of incoming calls.
Data portability
Settings → Export CSV generates a local file containing your blocking history in CSV format, which you can share or back up.
Objection
The application can be uninstalled at any time, which deletes the entire local database.
If you have unresolved concerns about how your personal information is handled, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au.
8. Data security
- Room database protected by Android default encryption (AES-256)
- User preferences stored in DataStore (Android Keystore encryption)
- No network communication for protection functions (call filtering is 100% local)
- Network exceptions: anonymous usage statistics (§3.5), enabled by default and disableable, transmitted over HTTPS; and, only if you activate Le Cercle (§3.6), transmission of your purchase token and a device identifier, over HTTPS
- Code reviewed before each update release
9. Children
Egidio is not intended for children under 16 and collects no data concerning them. If you believe a child has used the application, contact us for data deletion.
10. Changes to this policy
Any material changes will be notified in the application's update notes on Google Play. The last updated date is indicated at the top of this document. Continued use of the application after modification constitutes acceptance of the new version.
11. Contact
For any questions regarding this policy or your data:
Email: privacy@egidio.app
Publisher: Egidio — SIREN 105 960 389, R.C.S. Strasbourg
Australian residents may also contact the OAIC. EU users may contact their national data protection authority — in France, the CNIL.
See also: Terms of Use · Legal Notice