Vigil Privacy Policy

Last updated: July 19, 2026

Vigil is an on-device SMS safety app that helps you identify scam, phishing, and harassing text messages. This policy explains what Vigil does — and, more importantly, what it does not do — with your data.

The short version

Vigil processes everything on your device. It has no internet access, no servers, no accounts, and no analytics. Your messages never leave your phone.

Data we collect

None. Vigil does not collect, transmit, sell, or share any personal data. No data of any kind is sent to the developer or to any third party.

Permissions Vigil uses and why

SMS access (RECEIVE_SMS, READ_SMS)

Vigil reads incoming text messages solely to analyze them for signs of scams, phishing, and harassment. The analysis runs entirely on your device using a local machine-learning model bundled inside the app.

Display over other apps (SYSTEM_ALERT_WINDOW)

Used to show a warning chip when a suspicious message is detected, so you can see the alert no matter which app you are using. The overlay is generated locally and involves no data collection.

Usage access (PACKAGE_USAGE_STATS, optional)

If you grant this optional permission, Vigil checks which app is currently on screen so that alert chips appear only while you are in your messaging app, instead of over every app. This check happens on-device and in the moment; Vigil does not record, store, or transmit any app-usage information.

Network access

Vigil does not request the internet permission. Android therefore prevents the app from making any network connection — it is technically incapable of sending data off your device.

Data stored on your device

Vigil stores two things, both locally and only on your phone:

This data stays in the app's private storage on your device. Vigil opts out of Android's cloud backup and device-transfer features, so this data is never uploaded to any backup service. Uninstalling the app permanently deletes all of it.

Third parties

Vigil uses no third-party analytics, advertising, tracking, or crash-reporting services. No data is shared with anyone, because no data leaves the device.

Children's privacy

Vigil does not collect personal data from anyone, including children under 13. All processing is local to the device, and the app has no ability to transmit information about any user.

Data deletion

There is nothing to delete on our end — Vigil holds no data about you. You can erase the detection history at any time with the Clear history button on the Logs tab, and uninstalling the app removes all locally stored settings and history.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new "Last updated" date. Because Vigil collects no data, any future change that introduced data collection would be accompanied by a clear in-app notice and consent request.

Contact

Questions about this policy: kevintheliao@gmail.com