SENSOR WATCH runs entirely on your phone. It reads where your traffic goes, never what it contains. Nothing goes to CYBERINE. There is no account, no analytics, no crash reporting and no server; its only connections of its own are two downloads of public files, described in section 5, and neither sends anything about you. Your traffic goes to a VPN provider only if you set one up. Everything the app records stays on the phone, is excluded from Android's cloud backup, and is removed when you uninstall the app.
SENSOR WATCH is made by CYBERINE LLC, a West Virginia limited liability company ("CYBERINE", "we"). This policy explains what the app does with information on your phone. It is written to be checked: every statement below describes something you can see in the app or in Android's own settings.
We do not collect, receive, store or transmit any information about you or your phone. Specifically, the app never sends CYBERINE:
The app has no account, no sign-in and no way to identify you. The support export described in section 7 is created only when you ask for it and goes only where you send it.
Microphone and camera. Android tells apps when the microphone or a camera comes into use and when it stops. SENSOR WATCH records those moments: which sensor, for how long, and whether the screen was on, off or locked. Android does not say which app is using the sensor, so the app names the app that was on screen at the time, when you have allowed usage access, and words it as the likely app. It is a timing link, never proof.
Connections. With your consent, SENSOR WATCH sets up a local VPN interface on your phone. This lets the app see each connection other apps make: the app that made it, the destination, the amount of data and the time. The app forwards every connection unchanged; it does not block, slow or alter anything.
What is read from traffic. The app reads where your traffic goes, never what it contains. To name a destination it reads the destination's name from the start of each connection: from DNS answers, from the server name at the start of a TLS connection, and, for QUIC connections, from the first packet, whose protection is removed using keys that are public and computed from the packet itself under the published standard. It reads nothing after the first packets and never reads the content of a page, message, call or file. Where a site hides its name with Encrypted Client Hello, the app goes no further.
Lining the two up. The app matches sensor uses with data that left the phone during the use or in the minute after, and shows you the match. A match says likely, never proof, and says nothing about what the data held.
What it cannot see. Not everything passes through the monitor: carrier voice calls and texts, Wi-Fi calling, hotspot traffic and some system traffic cannot. The app shows what went through and what went around it, from Android's own counters, and small amounts under the detection allowance may go unreported.
| Permission | Why |
|---|---|
| VPN (local monitor) | Sets up the local interface described in section 3. The app shows its own disclosure first and runs the monitor only after you agree to it and to Android's VPN prompt. Backing out of either is not consent. |
| Notifications | The monitoring notification Android requires while the monitor runs, and the alerts you choose to receive. |
| Local network (Android 17 and later) | The monitor carries other apps' connections, and some of those go to things on your own network: a printer, a speaker, a media box, a drive, your router's own page. From Android 17 Android asks separately before the monitor may carry them. SENSOR WATCH looks for no devices of its own and reads no device names; it carries only the connections other apps make, and a connection to your own network is logged like any other, by address. Refuse it and those connections are refused while the monitor runs; everything else is carried as before. |
| Access | Why |
|---|---|
| Usage access | To know which app was on screen when a sensor started, and whether the app that made a connection was the one you were using. The app keeps a yes or no for "was on screen", never what you touched or where. |
| Display over other apps (optional, off by default) | To say whether a connection followed your own touch. When you allow it, the app keeps a one-pixel window that Android tells about touches landing anywhere on the screen. It learns the time of a touch and nothing else: not where it landed, not which app received it, not what you typed. The most recent times are held in memory only, never written to disk, and are gone when you Clear or close the app. Leave it off and such connections are shown as "Not known". |
| Permission | Why |
|---|---|
| Internet | The monitor opens connections on behalf of other apps so their traffic reaches its destination, and the two downloads in section 5. The app uploads nothing of its own. |
| Foreground service | Keeps the monitor running while the phone is in use. |
| Installed-app list | Names the app behind each connection and lists which apps hold microphone or camera permission. The list never leaves the phone. |
| Network state | Asks Android what each network is for, so paths that go around the monitor can be named. |
| Open uninstall confirmation | Lets the app open Android's own uninstall confirmation for an app you chose. The app removes nothing itself and keeps no record of what you removed. |
| Promoted notifications (Android 16 and later) | Lets the monitoring notification be shown as a status-bar chip while the monitor runs. You can turn this off for the app in Android's notification settings. |
| Start after restart | Lets the monitor start again after your phone restarts or the app is updated, only if you had left it on and your VPN consent still stands. It runs when you first unlock the phone and shows its notification at once. It never asks for consent on its own. |
| Fingerprint or screen lock | Lets you unlock your saved backup password with your fingerprint or screen lock through Android's own prompt, if you chose to save it. Android does the matching; the app never sees or stores any fingerprint data. |
No accessibility service, no device administrator rights, no notification listener, no keyboard or input method, no SMS or call log access, no location, no contacts, no camera or microphone permission of its own. The app watches the sensors through Android's public notifications of use; it never records audio or images. The local network permission in section 4.1 sits in Android's Nearby devices group, but the app uses no Bluetooth, no Wi-Fi scanning and no device discovery of any kind.
SENSOR WATCH makes two kinds of connection of its own. Both are downloads of a public file that is the same for every user, and neither sends anything about you or your phone.
The detection model, when you ask for it. When you tap Update detection model, the app downloads the latest version of the attribution model described in section 6. The file is digitally signed by CYBERINE and is checked against that signature before it is used. A model also ships inside every app update, so you never have to tap Update.
The suite list, at most once a day. The app downloads the list of CYBERINE suite apps that its CYBERINE Suite page shows, so that an app released after your copy of this one can appear there. This check runs while you have the app open and at most once a day; you can switch it off under Suite list in Settings, and the list that ships inside the app is used whenever it is off or the download fails.
The app runs no background job and no schedule for either download: it never wakes itself to reach the network. The hosting service (GitHub) sees each request as it sees any visit to a web page, including your IP address. There is no backend, no analytics, no crash reporting and no update beacon, and nothing the app records is ever uploaded. Everything else the app uses, such as owner names for well-known addresses, arrives inside app updates from the store.
The only other traffic that passes through the app is other apps' traffic, forwarded unchanged to its destination, or, if you set one up, to your VPN provider (section 8).
SENSOR WATCH uses two small models, both of which run only on your phone.
Attribution (AdaptEdgeML™ with DataiNetX™). When a sensor is used, DataiNetX™ gathers facts the phone already has (the app on screen, whether the screen was locked, which apps hold the permission, what the microphone was opened for, and which app sent data during the use) and AdaptEdgeML™ turns them into a likelihood for each candidate app, with the reasons. This model is trained by CYBERINE on its own test phones before release and ships inside the app. It does not learn from your phone and sends nothing anywhere.
Expectedness. A second model lives only on your phone and learns from your own answers (Expected, Seen before, Watch) what is normal there, so that repeated, accepted behaviour stops being raised. Your answers and what is learned from them never leave the phone and are never combined with anyone else's.
Both models produce a likelihood, never a finding of fact about another app or its maker.
Storage. The app's record (sensor uses, connections, matches, alerts, your answers and settings) is kept in an encrypted database on the phone, with the key held in the Android Keystore. Packet contents are never stored. The record is excluded from Android cloud backup and from device-to-device transfer.
Retention. The Alert Report keeps the last 30 days. The live stream of connections and sensor events is kept for the last 30 days and older lines are removed as new ones arrive; the connection summaries are kept until you clear them. The broom on the Status tab empties the lists; your settings and answers are kept until you forget them in Settings.
Export. You can create a support export from the Diagnostics screen. It is redacted by default and is shared only through Android's share sheet to a destination you choose. The app never uploads it. If you send it to CYBERINE for support, we use it only to answer your request and delete it when the request is closed.
Backup. You can write everything the app keeps — the record, its live stream, the 30-day summary and your Expected answers — to one file in a place you choose through Android's file picker, and put it back later on this or another phone. The file is locked with a password you choose and opens only with it; the app keeps no copy of the password and cannot recover a forgotten one. If you choose, the password is saved on this phone behind your fingerprint or screen lock, so a later backup or restore here needs a touch instead of typing; it can be forgotten in Settings. The app never uploads the file.
Deletion. Uninstalling the app removes everything it stored. Nothing remains with CYBERINE because nothing was ever sent.
The app embeds no third-party analytics, advertising or crash-reporting code.
If you configure a VPN provider inside the app, your traffic is sent to that provider's endpoint over an encrypted WireGuard tunnel. That provider then sees your traffic under its own privacy policy, which you should read. CYBERINE operates no VPN server, chooses no provider for you, and receives nothing from the tunnel. Until you set one up, your traffic goes to its destinations exactly as it would without the app.
Other apps on your phone are not asked for anything and nothing of theirs is collected. The app records what Android reports about them (sensor use, connections and bytes) in your own on-device record, and reads nothing from their store pages, policies or declarations.
Google Play processes your download and any payment under Google's policies; the app itself has no Google services inside it.
SENSOR WATCH is not directed at children under 13 and collects no personal information from any user. Because nothing is collected, there is nothing to delete at a parent's request; uninstalling the app removes its record from the phone.
The record is encrypted at rest with a key the Android Keystore holds, so it is readable only on your phone and only by this app. The app runs no server and exposes no network port. Because no data leaves the phone, the security of your record is the security of your phone: a lock screen and a current Android version are your main protections. Report a security concern to the contact in section 12.
When this policy changes we update the effective date and post the revised version at the same address, and note material changes in the app's release notes. We hold no contact information for you, so we cannot notify you individually; please check this page from time to time.
CYBERINE LLC
Bunker Hill, West Virginia, USA
Website: https://cyberine.us
Email: CSSW@cyberine.us