VOX SOLUTIONS

How we collect, use and protect your data at VOX Solutions.

1. INTRODUCTION

This Privacy Policy explains how personal data is collected, used, disclosed, retained and protected in connection with TrueShield, a mobile protection application and related mobile SDK components that help detect scam text messages, phishing links and fraudulent websites in real time (the “App”, “TrueShield” or the “Service”).

TrueShield is designed to protect users from smishing, phishing and similar communication-based fraud while giving users clear control over device permissions and marketing choices.

TrueShield may be offered in two service options:

Paid No-Marketing Plan: protection is provided for a fee and your use of the Service is not conditional on receiving marketing communications. You may still receive essential service, security, subscription, legal or transactional notices.

Free Marketing-Supported Plan: protection is provided at no monetary charge, where permitted by law, on the basis that you give and maintain consent to receive marketing communications or promotional content as described in this Policy.

2. WHO WE ARE

The App is provided by Vox Solutions group (“Vox Solutions”, “we”, “us” or “our”). Vox Solutions provides anti-fraud, anti-smishing and communication-protection technology to mobile network operators, businesses and end users.

Where TrueShield is made available through, or in cooperation with, your mobile network operator, that operator may separately process personal data under its own privacy notice and may act as an independent controller, joint controller or service partner depending on the implementation. The applicable operator privacy notice will apply to the operator’s own processing activities.

For questions about this Policy or our privacy practices, please contact us using the details in Section 16.

3. SCOPE OF THIS PRIVACY POLICY

This Policy applies to personal data processed through the TrueShield App and related SDK components for protection, service operation, user support and subscriptions management.

This Policy does not apply to third-party websites, app stores, mobile operators’ independent services, or third-party applications that may be accessed from your device or through links. Those services are governed by their own privacy notices.

4. SERVICE OPTIONS AND MARKETING CHOICE

4.1 Free Marketing-Supported Plan

If you choose the Free Marketing-Supported Plan, TrueShield protection is provided without a monetary subscription fee. In exchange, and where permitted by applicable law, you agree to receive marketing communications or promotional content from Vox Solutions, your mobile operator, or selected partners through channels such as in-app messages, push notifications, SMS, email, operator messaging channels or other channels made available to you.

Marketing in the Free Marketing-Supported Plan is based on your consent or other legal basis available under applicable law. We will present the relevant consent notice before enabling marketing-based processing. You can withdraw marketing consent at any time through the App settings, the unsubscribe instructions included in the relevant message, your device settings or the contact details in this Policy.

If you withdraw or do not provide marketing consent while using the Free Marketing-Supported Plan, we will stop using your data for the relevant marketing purpose. Subject to applicable law and product availability, we may invite you to switch to the Paid No-Marketing Plan or may limit or discontinue access to the Free Marketing-Supported Plan if marketing consent is a condition of that plan.

4.2 Paid No-Marketing Plan

If you choose the Paid No-Marketing Plan, your use of the Service is not conditional on receiving marketing communications. We will not use your TrueShield protection data to send marketing communications under this plan. You may still receive non-marketing messages that are necessary for the Service, such as security alerts, protection warnings, subscription notices, payment confirmations, product updates, legal notices and support communications.

5. Personal Data We Collect

The personal data we collect depends on the Service option you choose, the features you use, your device settings, and the permissions you grant. We request access only where it is relevant to a user-facing feature, and you remain in control of device permissions through your device settings.

5.1 Data used to protect you

To provide scam-message and phishing protection, the App may process the following categories of personal data:

• Incoming SMS message data: message content, sender information, timestamp and links contained in incoming text messages, processed to detect smishing, phishing, malicious links and fraud indicators.
• Web address and link data: URLs, domains or link fingerprints from messages or websites you open, processed to check whether a site or link is suspicious or malicious.
• Browser or on-screen URL data: where you enable the relevant Android permission, the active URL displayed in supported browser applications, processed to provide real-time phishing protection. The App does not collect keystrokes, passwords, screen recordings or full screen content for this purpose.
• Threat-detection events: local protection status, alerts, threat type, time of detection, action taken, and protection-history information shown in the App.
• Device, SIM and network information: limited technical information such as device model, operating system version, app version, network operator, SIM country, connection type, app instance identifiers and similar information needed to operate, secure and improve the Service.
• Approximate location: where you grant location permission, approximate country or region-level location used as a supplementary fraud-detection signal. If you enable background location, the App may use location when the App is closed or not in use to help detect region-based scams and provide protection alerts. Location is not used for advertising or audience-building.
• Foreground app context: where you grant the relevant permission, limited information about which app is active when a potential threat is detected, used to assess warning relevance and severity.
• Notification data: push token and notification status, used to deliver threat alerts, service notices and, in the Free Marketing-Supported Plan only where consent applies, marketing communications.

SMS and similar message content may include information that is personal or sensitive depending on what the sender includes. TrueShield processes this content only for protection purposes and does not use it for marketing.

5.2 Android permissions and device access summary

Permission / access	Why TrueShield uses it	User control and effect of refusal
SMS access	Core anti-smishing protection. The App analyses incoming SMS messages and links to detect scam messages and warn you before you act on them.	You may deny or revoke access. If you do, SMS-based scam-message protection will not work, but other available protections may continue.
Accessibility Service / on-screen URL access	Real-time anti-phishing protection in supported browsers by detecting the active URL and checking whether it is malicious.	Optional. If disabled, browser-level URL interception and warnings may be reduced or unavailable. The App does not collect keystrokes, passwords or screen recordings.
Location, including background location where enabled	Supplementary fraud signal used to identify location-related scam indicators and provide protection alerts. This App may collect location data to enable location-based fraud detection and protection alerts even when the App is closed or not in use.	Optional. If disabled, the App continues to provide other protections, but some location-based fraud indicators may not be available.
Phone state / SIM and network information	Helps assess fraud indicators such as claimed carrier identity, SIM country or network mismatch.	Where permission is required, you may deny or revoke it. Some fraud-detection signals may be less accurate.
Usage access / foreground app context	Helps understand the context of a detected threat, for example whether a suspicious link is being opened in a browser or another app.	Optional. If disabled, threat warnings may have less context.
Notifications	Used to send real-time protection alerts, important service notices and user-controlled marketing messages in the Free Marketing-Supported Plan.	Optional. If disabled, you may not receive immediate alerts or messages outside the App.

5.3 Data used for the Free Marketing-Supported Plan

If you use the Free Marketing-Supported Plan, we may process the following data to manage consent, deliver marketing communications, measure whether messages were delivered and keep appropriate records:

• consent status, consent source, consent timestamp, withdrawal status and marketing preferences;
• contact or delivery identifiers such as push token, phone number, email address, operator subscriber identifier or app instance identifier, depending on how the Service is offered to you;
• device advertising identifier or similar identifier, only where permitted by your device settings and applicable law;
• basic campaign data, such as message delivery status, opt-out status, clicks or interactions with marketing communications, where measured; and
• plan status, eligibility and subscription status needed to distinguish the Free Marketing-Supported Plan from the Paid No-Marketing Plan.

Protection data described in Section 5.1 is not used to target marketing communications.

5.4 Account, subscription, support and diagnostic data

We may also process data you provide or generate when you use the App, including:

• account or registration details, if account creation is required;
• subscription status, purchase confirmation, billing status and app-store transaction references. Payment card details are normally processed by the app store or payment provider and are not stored by us unless expressly stated at the point of purchase;
• support requests, communications with us, feedback and complaint information;
• diagnostic logs, crash reports, performance data and security logs needed to operate, troubleshoot and secure the App.

5.5 Data we do not collect or use for unrelated purposes

Unless clearly disclosed at the point of collection and permitted by law, TrueShield does not:

• use SMS content, phishing-detection data, Accessibility Service data or location data for advertising or marketing targeting;
• sell SMS message content, location data or other protection data to advertising networks or data brokers;
• record keystrokes, passwords, calls, screen recordings or full device screens for the phishing-protection feature;
• access call logs unless a separate feature, permission and disclosure is provided; or
• use device or SIM information for device fingerprinting or cross-app advertising tracking.

6. HOW WE USE PERSONAL DATA

We use personal data for the following purposes:

• to detect, classify, block or warn about scam messages, phishing links, fake websites and related fraudulent activity;
• to display warnings, protection status, threat history and other user-facing security information;
• to operate, maintain, troubleshoot, secure and improve the App and its detection quality;
• to manage user permissions, consent records, subscription plans and service eligibility;
• to send service, security, transactional and legal communications;
• for the Free Marketing-Supported Plan, to send marketing communications and measure related delivery and engagement, subject to consent and applicable law;
• to respond to support requests, complaints and user-rights requests;
• to prevent abuse, protect our rights, comply with legal obligations and enforce applicable terms.

7. LEGAL PROCESSING BASIS

Where EU, UK or similar data protection laws apply, we rely on one or more of the following legal bases:

Legal basis	Examples of processing
Performance of a contract	Providing the TrueShield protection service you request, managing your chosen plan, subscriptions, service notices and support.
Consent	Accessing permissions where consent is required by law or platform rules; receiving marketing communications in the Free Marketing-Supported Plan; use of device advertising identifiers where applicable.
Legitimate interests	Operating, securing and improving the App; detecting fraud and abuse; maintaining records; protecting users and our systems, where our interests are not overridden by your rights.
Legal obligation	Complying with applicable laws, lawful requests, accounting, tax, regulatory, consumer-protection and data-protection obligations.
Vital interests / public interest, where applicable	Responding to urgent security incidents or threats where legally permitted and necessary.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing carried out before withdrawal. Some features may stop working if the permission or consent needed for that feature is withdrawn.

8. PERSONAL DATA SECURITY

We share personal data only where necessary for the purposes described in this Policy and subject to appropriate contractual, technical and organisational safeguards. Depending on the implementation, we may share personal data with:

• service providers and processors that host, support, secure, analyse, classify or operate the App and related infrastructure;
• threat-intelligence, security and anti-phishing providers used to verify whether URLs, domains or indicators are malicious;
• mobile network operators where TrueShield is made available through an operator partnership, for service delivery, eligibility, customer support, consent management or marketing delivery in the Free Marketing-Supported Plan;
• app stores, subscription platforms and payment providers for subscription, billing, refund and entitlement management;
• marketing delivery partners for the Free Marketing-Supported Plan, limited to data necessary to deliver or measure marketing communications and only where permitted by law and your choices;
• professional advisers, auditors, insurers and corporate service providers;
• competent authorities, regulators, courts or law-enforcement bodies where required by law or necessary to protect rights, safety and security; and
• successors or acquirers in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business, subject to appropriate protections.

We do not share SMS content, Accessibility Service data, detected URLs, location used for protection, or threat-detection data with advertising partners for marketing targeting. If a law treats certain marketing or advertising activities as a “sale” or “sharing” of personal data, we will provide the choices required by that law.

9. INTERNATIONAL TRANSFERS

We operate internationally and may process personal data in countries other than the country where you are located. Where personal data is transferred internationally, we use safeguards required by applicable law, such as adequacy decisions, standard contractual clauses, contractual commitments, access controls and technical protections. Where TrueShield is provided with a mobile network operator, the locations of processing and applicable transfer safeguards may also depend on the operator’s implementation and agreements.

10. DATA RETENTION

We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention periods may vary depending on the data type, legal requirements, security needs and whether you use the Free Marketing-Supported Plan or the Paid No-Marketing Plan.

Data category	Typical retention approach
Ordinary SMS message content	Processed only for threat detection and not retained after analysis, unless retention is required for security, abuse prevention or legal reasons.
Suspicious-message indicators, threat signatures or templates	Retained for the period needed to improve detection and prevent similar threats. 24 MONTHS.
URLs, domains and threat-detection events	Retained for security, audit, product-quality and threat-history purposes. 24 MONTHS.
Location used for fraud detection	Used for the detection purpose and not retained longer than necessary. Recommended placeholder: NOT STORED AFTER DETECTION EVENT”.
Consent and marketing records	Retained for as long as needed to evidence consent, respect opt-outs and comply with legal obligations. Recommended placeholder: CONSENT TERM + 3 YEARS.
Account, subscription and support records	Retained for the duration of the account or subscription and for a reasonable period after closure for legal, tax, dispute and support purposes. SUBSCRIPTION TERM + 3 YEARS.
Technical logs and diagnostics	Retained for security, troubleshooting and operational purposes. 12 MONTHS.

When personal data is no longer needed, we delete it, anonymise it or securely isolate it until deletion is possible.

11. SECURITY

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include encryption in transit, access controls, role-based access, secure development practices, monitoring, logging, vulnerability management and contractual controls for service providers. No system is completely secure. You should also protect your device with a screen lock, keep your operating system and apps up to date, and use caution when opening links or sharing personal information.

12. YOUR CHOICES AND RIGHTS

12.1 Device permissions and App settings

You can grant, deny or revoke device permissions through your device settings. You may also manage available settings inside the App. If you revoke a permission, the feature that depends on that permission may stop working or operate with reduced accuracy.

12.2 Marketing choices

You can withdraw marketing communications at any time through the App. If you are on the Free Marketing-Supported Plan, withdrawal will require switching to the Paid No-Marketing Plan or will affect access to the Free Marketing-Supported Plan.

12.3 Data protection rights

Depending on your location and applicable law, you may have rights to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• withdraw consent where processing is based on consent;
• request portability of certain data;
• opt out of certain “sale”, “sharing” or targeted advertising activities where applicable law provides that right; and
• lodge a complaint with a competent data protection authority.

To exercise your rights, contact us using the details in Section 16. We may need to verify your identity before responding. Some rights may be limited by applicable law, security obligations, fraud-prevention needs or legal-retention requirements.

13. COOKIES AND SIMILAR TECHNOLOGIES

The App does not use traditional browser cookies in the same way as a website. It may use SDKs, local storage, app instance identifiers, push tokens, device identifiers, advertising identifiers where permitted, analytics tools and similar technologies to operate the App, secure the Service, remember preferences, measure performance, manage subscriptions and, for the Free Marketing-Supported Plan, deliver or measure marketing communications subject to your choices.

You can manage many of these technologies through the App settings, device permission settings, advertising ID controls, notification controls and app-store settings.

14. CHILDREN’S PRIVACY

The App does not use traditional browser cookies in the same way as a website. It may use SDKs, local storage, app instance identifiers, push tokens, device identifiers, advertising identifiers where permitted, analytics tools and similar technologies to operate the App, secure the Service, remember preferences, measure performance, manage subscriptions and, for the Free Marketing-Supported Plan, deliver or measure marketing communications subject to your choices.

You can manage many of these technologies through the App settings, device permission settings, advertising ID controls, notification controls and app-store settings.

15. UPDATES TO THIS PRIVACY POLICY

We may update this Policy from time to time to reflect changes in the App, our practices, legal requirements or technology. The latest version will be made available in the App and through the relevant publication channel. Where required by law, we will provide additional notice or request consent before material changes take effect.

16. CONTACT US

Privacy contact: privacy@voxsolutions.co
TrueShield is a mobile protection application and related SDK technology designed to help detect scam text messages, phishing links and fraudulent websites. The TrueShield Privacy Policy explains how personal data is processed in connection with scam-message protection, phishing-link detection, device permissions, service options, subscriptions, marketing choices and user controls.

Click here for the overall Privacy Policy.

***

Thank you for taking the time to review our TrueShield Privacy Notice. We understand the importance of transparency and trust in handling your Personal Data. Your privacy is paramount, and we are committed to ensuring that your data is protected and used responsibly.