PLAIN-LANGUAGE PRIVACY

What PRINCE can see — and why

PRINCE protects people who are often taken advantage of. So we owe you total honesty about what it can access. Here it is, in plain words — no legal fog.

The one rule that governs all of this: PRINCE looks only when you ask it to — when you tap the crown, share something, start a scan, or switch on Mama Mode (the one feature that keeps watch for you, described below, off by default). It does not record you, and does not sell or share your personal information. What it reads to answer your question is used for that answer and then let go.

On your computer — the browser scanner

The PRINCE scanner is a browser extension. Browsers require it to ask for broad permissions so it can check any page you're worried about. Here's what each one is actually for:

See the page you're on (all websites)

So when you run a scan, PRINCE can read the text, links, and page you asked about — whether it's your bank, an email, or a suspicious site. It reads a page only when you run a scan on it.

Read a screenshot of the current tab

Some scam pages are images with no readable text. With your action, PRINCE can look at a picture of the page to find hidden text — then discards it.

Tabs

To know which page you're asking about when you click Scan, and to open your results.

Downloads

So a guardian can save a plain report of a scan if you ask for one.

Microphone (only when you start it)

For Lingua's live captions and Echo's pressure alarm — only while you turn listening on, with a visible indicator. Never in the background.

Mama Mode in the browser (only if you switch it on)

This is the one feature that watches with you, because you asked her to. While Mama Mode is on, each time a page changes PRINCE checks a small sample of its visible text and links for danger, so Mama can step in and say STOP before you tap anything. Each check covers only that moment's page, follows the same never-keep rules as every scan, and ends the instant you switch Mama Mode off. It is off by default.

On your phone — the PRINCE app

Microphone

For Lingua (translate what you hear) and Echo Ears (listen for pressure on a speakerphone call). Only while you start it, and a visible light shows when it's on.

The floating helpers (accessibility service)

The crown and Lingua float over other apps so you can check anything, anywhere. They read your screen only at the moment you tap them — never before, never in the background. This is the same kind of permission a screen reader uses.

Keep running / battery exemption

So your phone doesn't put PRINCE to sleep and quietly turn your protection off.

Mama Mode (only if you switch it on)

While Mama Mode is on, Mama watches for known danger in three narrow, specific ways — and only these. 1) When a scan you started finds real danger, she steps in front of everything with a clear STOP card. 2) She checks the website address in your browser (just the address — never the page, never what you type) against a list of known scam sites kept on your phone; if it matches, she shows a full-screen warning. Nothing about your screen is sent anywhere for this. 3) If you also grant call screening (a separate Android permission you approve), incoming call numbers are checked the same way, on your phone. Numbers verified as scams are blocked before your phone rings; a number reported but not yet verified still rings — Mama just warns you to be careful. No single report can ever silence a caller. Your phone vibrates and beeps so she reaches you even if you can't see the screen, her voice speaks only when you press the button, and the crown glows softly whenever Mama Mode is on so you always know. Switch it off and no watching of any kind happens. If someone is in crisis and reaching out for help, Mama never treats them like a scam.

PRINCE never: watches or records you in the background (the one exception you control is Mama Mode, described above — off by default) · reads your screen unless you tap or have Mama Mode on · keeps the raw content of your private scans — the message, image, or full web link you scanned is discarded once you have your answer · sells or shares your personal information · sends your scans to the public feed unless you switch on "Help others" (and even then, only a sanitized threat record — never your name, email, or personal details).

One thing PRINCE always does, said plainly: when any scan finds a real threat, the threat's identifiers — the scam site's address, the scammer's number or email, never anything about you — strengthen the shared shield that protects every PRINCE family. That's how a scam aimed at one person becomes protection for everyone. A threat reported once only produces a warning on other phones; blocking requires verification or reports from several independent families, and a human can always undo it.

What your command center does keep: a private record of what each scan found — the verdict, how serious it was, the website's domain (never the full link), which guardian answered, and the date. Never the message, image, or full link you scanned. It's yours alone, deletes itself after 90 days, and you can clear it anytime.

One exception, only if you choose it: when you tap "Help improve PRINCE" on a result, or leave "Help others" on and hit a real scam, the raw example may be kept in a de-identified training set for up to 30 days to make the guardians smarter, then it auto-deletes. It's tied to a one-way hash, never your name, and never shown publicly. Don't share, and none of it is kept.

When a scam is confirmed real: if something you chose to share turns out to be confirmed — matched to a known-scam list, reported by several unrelated families, or verified by our team — a scrubbed copy of just the scam's wording may be kept with no set expiry date, so the guardians never forget how that trick works (the way antivirus never forgets a virus). Before it's stored, every personal detail is blanked out: names, emails, numbers, links, and amounts all become placeholders like [NAME] or [LINK]. What's left is the scam's pattern and who it pretended to be — never anything about you, and never the raw message. It's tied to a one-way hash, never your name, never sold, and never shown publicly. If you don't share, nothing of yours is ever added.

Questions? See our full Privacy Policy and Terms. • ← Back