Voice Lock - Privacy Policy

Privacy Policy for Voice Lock

Last Updated: September 28, 2026

BinaryScript Private Limited ("Binary Script," "we," "us," or "our") operates the Voice Lock mobile application (the "App"). This Privacy Policy explains what information the App handles and why.

1. Introduction

Voice Lock is a voice lock screen. You record a short unlock phrase in your own voice; the App then shows its own lock screen whenever the screen turns off, and unlocks when it hears that phrase in your voice. A backup PIN always works. Everything the App hears is recognised on your phone by on-device models; nothing is recognised in the cloud.

Voice Lock adds a layer on top of Android's own screen lock; it does not replace it. Voice matching can be fooled, for example by a recording or a very similar voice. If you need strong security, keep a PIN, pattern or fingerprint on Android's own lock as well. See our Terms of Service.

2. Permissions and Why the App Needs Them

Microphone, in a foreground service with an always-visible notification: to listen for your phrases, and for claps if you turn that on. Audio is analysed on your phone as it arrives and then discarded. It is never recorded to storage and never sent anywhere.
Display over other apps: to show the Voice Lock screen and the find-my-phone screen.
Device administrator, the "force lock" policy only: used only for "Lock by voice", to turn the screen off and lock the phone. It cannot wipe the phone, change passwords or see any data. To uninstall the App, first turn it off in Voice Lock's Settings, or in Android Settings > Device admin apps.
Notifications: for the "listening" notification, and a "tap to resume" notice after a restart.
Other: running in the background and ignoring battery optimisation (optional), starting at boot, vibration, a wake lock, and the torch, which is used only to flash while finding your phone.

3. Information Stored Only on Your Phone

The following is never sent to our servers:

Voice samples: stored as model features (numbers that describe your phrase and your voice), never as audio, in storage that Android backups exclude. They never leave your phone; on a new phone you record your phrase again.
Backup PIN: stored only as a salted hash, in storage that Android backups exclude.
Settings (switches, strictness, phrase labels): stored on your phone and included in your own Android device backup, which you control.
Everything the microphone hears: analysed in memory and discarded immediately.

4. Information We Collect

4.1 Analytics and app quality (Google Firebase)

We use Google Firebase, provided by Google LLC:

Firebase Analytics: app usage events, such as which features are used, the app instance ID, device and country information, and the advertising ID
Firebase Crashlytics: crash reports and device information
Firebase Performance Monitoring and Remote Config
Firebase App Check with Google Play Integrity, to check that requests come from a genuine copy of the App

None of this ever includes audio, voice data or anything you said.

4.2 Update check

The App asks our backend at api.binaryscript.com which version of the App is current, so it can offer updates. It sends only the App's package name and platform.

4.3 Purchases outside India (Google Play Billing)

Outside India, subscriptions and the lifetime purchase are processed by Google Play. We receive the purchase status, not your card or payment details.

4.4 Account and purchases in India

In India, you sign in with Google (through Firebase Authentication) to subscribe. Our backend at api.binaryscript.com then stores your account: your name, email address, Google account ID, device ID and model, country, language and subscription status. This account is used only to activate and restore your subscription.

Payment is made by UPI AutoPay through PhonePe. PhonePe processes the payment; we receive the order and subscription status, not your bank details. The Razorpay SDK is used only on your phone to find which UPI apps are installed; no payment goes through Razorpay.

5. How We Use Information

To provide and restore your subscription
To offer App updates
To fix crashes and improve the App
To understand which features are used
To respond to support requests

6. Third-party Services

Google Firebase and Google Play Billing (Google LLC): https://policies.google.com/privacy
PhonePe (UPI AutoPay payments in India): https://www.phonepe.com/privacy-policy/

7. Data Sharing

The App shows no ads. We do not sell, trade or rent your information. We share information only with the service providers listed above, as needed to run the App, or when required by law.

8. Data Security

Your voice samples and PIN hash stay on your phone, outside backups. Connections to Firebase and to our backend are encrypted. No method of storage or transmission is completely secure.

9. Data Retention

Data on your phone stays until you delete it, clear the App's data or uninstall the App. Analytics and crash data are kept according to Firebase's retention settings. In India, account and subscription records are kept while your account is active and as required by law for payments.

10. Your Choices and Rights

You can withdraw any permission at any time in Android Settings.
In the App, Settings > Retrain replaces your voice samples.
Uninstalling the App deletes your voice samples, PIN and settings from your phone.
In India, you can ask us to delete your account. See How to Delete Your Account.

11. Children's Privacy

The App is not directed at children and is intended for users aged 18 and over. We do not knowingly collect information from children.

12. International Transfers

Firebase may process analytics, crash and authentication data outside India, including in the United States, under Google's privacy practices.

13. Changes to This Policy

We may update this Privacy Policy. The "Last Updated" date above shows the latest version. Continued use of the App after a change means you accept the updated policy.

14. Contact Us

BinaryScript Private Limited
Email: support@binaryscript.com

We will respond within 30 days.