Find her phone CS

Effective 8 September 2026

Privacy policy

Applies to the Find her phone app (package cz.eadg.findherphone).

The app exists so that one phone in a family can make another one ring and be found. It collects only what that takes, stores it in the European Union, and shows or sells it to nobody else. The app does not determine or store the phone's location.

What we process and why

DataPurposeRetention
The phone name you enter (e.g. “Pavel”)So the others in the family know which phone they are ringing and who is lookingUntil the phone leaves the family or is removed
An anonymous technical identifier (Firebase Auth)So the database knows the phone belongs to the family. No e-mail or password is ever entered.Uninstalling removes it from the phone; on the server it stays until a family member removes the phone's record or you ask for deletion
Device push token, language and the time the app was last openedDelivering the “ring” command to the right phoneUntil the phone's record leaves the family; dead tokens are removed automatically
Ring times (who asked, when it started, when it stopped, when the phone rang)So a ring can be stopped remotely and the person looking can see the phone rangOverwritten by the next ring
Hash (SHA-256) of the pairing codeOne-time joining of a phone to the familyValid for 10 minutes; the record is deleted automatically within 24 hours of expiry
Hash (SHA-256) of the Google Play purchase token, the product bought, the order number, the purchase time and the identifier of the buying phoneVerifying the one-off fee and tying it to the familyToken hash and order number permanently, as the record of purchase; the rest only while the unlock belongs to this family
Number of phones in the family and the allowed limit (2, 3 or 7)So the database knows whether another pairing code may be issuedAs long as the family exists; the limit only while the unlock belongs to it

Where the data lives

In a Google Firebase database (Firestore) in the europe-west3 (Frankfurt, EU) region. The processor is Google Ireland Ltd. as part of the Firebase services (database, sign-in, notification delivery). Transfers are always encrypted. Payment is handled by Google Play; the app never sees card details.

Who sees it

Only the phones in your family, in their app. Data is not passed on or sold to any third party. The app contains no advertising and no analytics or tracking tools. The operator, as database administrator, has technical access and uses it solely to resolve a problem at your request.

Permissions the app uses

PermissionWhy
NotificationsSo a Stop button appears while the phone rings.
Foreground service (special use)So the phone rings with the screen off, with a visible notification the whole time.
Vibrate, keep the processor awakeSo the ring and its two-minute limit keep running while the screen sleeps.
CameraNot requested. QR codes are read by the Google Play services scanner, which runs outside the app.

Security

Transport is encrypted (TLS); server-side security rules tie every read and write to the phones of one family. Pairing codes and purchase tokens are stored only as hashes (SHA-256). A ring command that would be delivered late is dropped by the server, so a phone never starts ringing an hour later.

Deleting your data

In the app: Family → Leave the family. This deletes this phone's record including its name and push token. Other family members can remove the phone too. Uninstalling alone does not delete the server record — it stays in the family as “unreachable” until someone removes it; leave the family before uninstalling, or write to us.

By e-mail: write to findherphone@eadg.cz and we delete the data within 30 days.

Your rights

Under the GDPR you have the right to access, rectify, erase and port your data, and to lodge a complaint with your data protection authority. Use the contact below.

Changes to this policy

If this policy changes, the new version is published on this page with a new effective date.

Contact

Operator of Find her phone
E-mail: findherphone@eadg.cz