TetherDroid Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how TestsTrakt ("we," "us," or "TestsTrakt") handles information in connection with the TetherDroid software, desktop and mobile clients, website, and related services (collectively, the "Service"). It applies to the TetherDroid Android app, the Mac and Windows desktop clients, and the TestsTrakt web portal. By using the Service, you agree to the practices described here. This Policy supplements, and is incorporated into, the TetherDroid User Agreement.

1. Our Core Privacy Commitment — We Do Not Collect Your Sensitive Data

TetherDroid is designed as a private relay between devices you own and control. We deliberately built the Service so that we cannot see the personal content it carries. Specifically:

• We do not read or store your message content. The text of your SMS/RCS messages and your message reactions are encrypted on your device and are only ever readable on your own paired devices.
• We do not record your calls or call audio. Call control and call information stay between your paired phone and desktop.
• We do not harvest your contacts. Contact names and numbers used to display your conversations are encrypted and are not mined, sold, or retained by us in readable form.
• We do not capture your notifications. Notification content mirrored to your desktop is relayed in encrypted form and is not stored or inspected by us.
• We do not watch or record your screen. Screen-mirroring video streams directly between your paired devices; we do not record, buffer, or retain it.
• We do not sell or rent any of your data to advertisers, data brokers, or any third party, and we do not use your content for advertising or profiling.

Because this content is end-to-end encrypted (see Section 5), even where data transits our relay infrastructure, it passes through as opaque ciphertext that we do not have the keys to decrypt.

2. Information We Do Process

To operate the Service we process a limited set of information — the minimum needed to run your account, keep your session secure, and deliver the product:

2.1 Account information

• Your account email/username and an encrypted credential ("TestsTrakt key") used to sign in.
• Two-factor authentication codes, used momentarily to verify a sign-in and not retained afterward.
• License and purchase status (e.g. whether you are on a free trial or hold a paid license, and expiry dates), so we can provide the features you are entitled to.

2.2 Device & pairing information

• A per-install device identifier and a per-machine identifier used to pair your phone with your desktop, to bind a free trial or license to your hardware, and to prevent abuse.
• Non-content connection metadata needed to route encrypted traffic between your paired devices (for example, that a device is online), which is transient and not used to profile you.

2.3 Payment information

• Purchases are processed by our payment processor (PayPal). We do not receive or store your full card number; card data is handled by the processor under its own security and privacy terms. We retain a record of the transaction (such as a reference and amount) for accounting and receipts.

2.4 Diagnostic information

• Limited operational logs (such as error events and timestamps) used to keep the Service reliable and secure. We aim to keep these free of message, call, contact, notification, or screen content.
• If you contact support and choose to attach logs, you control what you send us; we use them only to help resolve your issue.

3. How We Use Information

We use the limited information described in Section 2 only to:

• Create and secure your account and authenticate your sign-ins;
• Pair your devices and relay your encrypted content between them;
• Provide, maintain, troubleshoot, and improve the Service;
• Process payments, manage licenses and trials, and send transactional communications (such as receipts, security notices, and important service updates);
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our User Agreement;
• Comply with legal obligations.

We do not use your data for behavioral advertising, and we do not build advertising profiles.

4. What We Do Not Do

• We do not sell, rent, or trade your personal information.
• We do not read the content of your messages, calls, contacts, notifications, or screen.
• We do not store your communications on our servers in a form we can decrypt.
• We do not use your content to train models or to profile you.

5. Device Encryption & Security

Security and privacy are foundational to how TetherDroid is built, not features added on top. This section describes the protections that keep your data private.

5.1 End-to-end encryption

Content relayed between your paired phone and desktop — messages, reactions, call information, contacts, notifications, and screen data — is encrypted end-to-end using strong, industry-standard authenticated encryption (AES-256 in GCM mode). Encryption and decryption happen on your own devices. The payload key is derived from a pairing secret that is exchanged out-of-band during setup (for example, by scanning a QR code) and never transits our servers. As a result, our relay infrastructure carries only ciphertext that we cannot read.

5.2 One-time secure pairing

Your phone and computer are paired once using a secret that establishes the shared encryption key. This secret is stored locally on your devices, protected by the operating system, and is used to re-derive the key on later sign-ins without sending it over the network.

5.3 Encryption at rest on your devices

• On the phone, credentials and sensitive settings are held in encrypted, OS-backed secure storage.
• On the desktop, any locally cached conversation history is encrypted at rest with your per-phone key and locked to your user account with owner-only file permissions, so it is unreadable without your pairing secret. This cache lives only on your machine and is size-limited and periodically pruned; removing a phone deletes its local cache.

5.4 Encryption in transit

Connections to the TestsTrakt web portal and to our relay endpoints use HTTPS/TLS. This protects data in transit in addition to the end-to-end encryption applied to your device-to-device content.

5.5 Account security

• Sign-in is protected by your credential plus two-factor verification.
• Requesting a password reset locks the account and signs out active sessions as a safety measure.
• We apply access controls, transport security, and abuse protections to our infrastructure.

5.6 Your role in security

No system is perfectly secure. You help keep your data safe by protecting your account credentials, pairing only devices you control, keeping your operating system and the app up to date, and signing out of shared or lost devices. Please tell us promptly if you suspect unauthorized access.

6. Data Retention

We keep account, license, and transaction records for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, resolve disputes, and enforce our agreements. We do not retain your message, call, contact, notification, or screen content on our servers in readable form. Locally cached content on your own devices is controlled by you and is removed when you delete the cache, remove a paired phone, or uninstall the app. When information is no longer needed, we delete or de-identify it.

7. How We Share Information

We do not sell your personal information. We share the limited information we process only in these circumstances:

• Service providers who process data on our behalf under contract (for example, our payment processor and infrastructure/hosting providers), limited to what they need to perform their function;
• Legal and safety reasons — to comply with applicable law, valid legal process, or to protect the rights, property, or safety of our users, the public, or TestsTrakt. Because your communications content is end-to-end encrypted, we cannot produce readable copies of it;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

8. Third-Party Services

The Service interoperates with third-party platforms — for example, Google Messages, the Android operating system, your web browser, and our payment processor. Your use of those services is governed by their own privacy policies, which we do not control. We encourage you to review them.

9. Children's Privacy

The Service is not directed to children and is intended for users who are at least 18 years old (or the age of majority in their jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Because we do not hold your communications content in readable form, some requests will apply only to the limited account and transaction data we process. To exercise your rights, contact us using the details in Section 13. We will not discriminate against you for exercising these rights, and we will respond as required by applicable law.

11. International Data Transfers

We are based in the United States, and information we process may be handled in the United States or other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers. By using the Service, you understand your information may be processed in these locations.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date and, where appropriate, additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

Questions or requests about this Privacy Policy or your data? Reach us through the Contact Us form on our home page.