Privacy Policy

Data processing

Intrude processes camera frames locally on the device for motion detection. Video clips are saved locally on the device in app storage. A clip can also be exported as a still image, which is written wherever you send it and nowhere else.

When the Record sound setting is on, video clips also include audio from the device’s microphone. The microphone is only used while a watch session is recording, the audio is saved into the clip on the device, and it is handled exactly like the video: stored locally, never analysed off the device, and never uploaded. You can turn Record sound off in Settings › Clips, and clips then record without sound.

Camera frames, photos, video clips, and clip audio are never uploaded. We do not operate cloud sync, remote viewing, or server-side storage of captures for this app, and we cannot view any capture taken on your device.

Intrude does not require an account.

Diagnostics

Intrude sends anonymous crash reports so faults can be found and fixed. Apart from the purchase check described further down, this is the only data the app sends anywhere, and it never includes capture content.

One third-party service processes it. Sentry (Functional Software, Inc.) receives the error, the stack trace, the app version, and coarse device information such as the Android version and device model.

A crash report also carries a short trail of what the app was doing beforehand: which screen was open, that a watch session started or stopped, that a clip was recorded. It exists to make a crash reproducible and is only ever read alongside one.

Intrude contains no usage-analytics or product-analytics SDK. There is no measurement of how often the app is opened, no funnel, and no audience profile. Install and rating figures come from the Google Play Console, which reports them to every developer without anything being added to the app.

What is never included

• Camera frames, preview images, photos, video clips, microphone audio, and thumbnails.
• File names, file paths, and storage locations.
• Detection zone positions and geometry.
• Location data. Intrude does not request or use location permission.
• Names, email addresses, and account identifiers. Intrude has no accounts.
• Screenshots and view hierarchies, which are explicitly disabled in the crash reporter because they could capture the camera preview.

Session lengths and capture counts are reported as ranges rather than exact figures, so a report records that a session lasted between thirty minutes and two hours rather than exactly how long a particular camera watched a particular room.

The crash reporter generates a random installation identifier, so repeated reports from one installation can be recognised as the same one. It is not linked to a person, it is not shared with anyone else, and it goes when the app is uninstalled.

No advertising identifier is collected. Intrude does not request the Android advertising ID and holds no permission to read it.

Turning diagnostics off

Diagnostics are on by default. You can turn them off at any time in Settings › Privacy › Share diagnostics.

The switch is read every time the app is about to send something, so turning it off takes effect immediately rather than at the next launch. No further crash report is sent, and the trail gathered while it was on is discarded rather than held for a later one. The rest of the app works exactly the same either way.

Diagnostics are not sent from development builds of the app, only from the release published on Google Play.

Personal data sharing

Intrude does not sell personal data and does not share personal data for advertising. There is no advertising SDK, no attribution SDK and no analytics SDK in the app, and the app shows no ads.

Beyond the diagnostics described above, the app can export or share captures only when you start that action. Exported files then leave Intrude’s local app storage through the Android share or export destination you select, which is controlled by that destination app or service.

Purchases of Intrude Pro are processed by Google Play and by RevenueCat, which handles receipt validation. Payment details are handled by Google Play and are never seen by the app or by us.

The app asks RevenueCat whether this installation owns Pro when it starts, so the paid features are available without you signing in to anything. That check sends an anonymous installation identifier and basic device information, and it happens whether or not diagnostics are switched on, because it is how the app knows what you have paid for.

Permissions

Intrude may request these Android permissions:

• Camera: required for live preview, motion detection, clip recording, and background monitoring.
• Microphone: requested only when the Record sound setting is on, so clips can include the room’s sound. If it is denied, clips record without sound and everything else keeps working.
• Notifications: required so the background monitor can show persistent Stop and Open controls.
• Foreground service and its camera and microphone types: required by Android for visible background monitoring, and for the microphone to stay live in a background clip.
• Music and audio: requested only when you open the system picker to choose an alarm sound, so the chosen file can be played. If it is denied, a document picker is offered instead and alarms keep working.
• Ignore battery optimisation: offered once, when a watch session is handed to the background monitor. It is optional. Without it some phones stop the camera service after a while, so background monitoring may end early.

Intrude does not request location permission, and saving a clip into the phone’s albums needs no storage permission.

If required permissions are denied, related features may be unavailable or may fail to start.

Local storage, export, and deletion

Captures are stored locally. You can export or share captures from the app. Deleting captures in the app removes the local app copies that Intrude controls.

Files already exported or shared to another app, folder, cloud provider, or contact are controlled by that destination and must be managed there.

Uninstalling Intrude removes its app storage, including every capture that was not exported elsewhere.

Data retention

Crash reports are retained by Sentry under its own retention schedule. Captures are retained on the device until you delete them, until automatic cleanup removes the oldest as storage runs low, or until the app is uninstalled.

Children

Intrude is not directed at children and does not knowingly collect data from children.

Contact

For privacy questions, get in touch through the contact page.