Privacy Policy — NetEchoApp

Effective date: 21-09-2025

NetEchoApp is an enterprise and parental control application designed to help organizations and families manage devices securely and responsibly. This Privacy Policy explains what information the app may access or process, how that information is used, and how privacy is protected.

1. Summary

The app processes limited device and network information only when necessary to enforce administrator or parental policies (for example: blocking apps, filtering URLs, or applying device restrictions). Administrators may configure remote logging or reporting in enterprise deployments; any such uploads should be governed by your organization's policy and consent.

2. Information We May Access or Process

The app may access or process the following categories of information for policy enforcement and management purposes:

• Installed apps (to enforce app blocking/whitelisting)
• Active URLs or domains visited (to enforce URL filtering and safe-browsing policies)
• Basic device identifiers used for enrollment/management
• Network traffic metadata (when VPN filtering is enabled) — processed to enforce URL policies and safe-browsing
• Call / Contact Logs Access ( Blocking unwanted or restricted phone numbers. )
• SMS Logs Access ( Filtering inappropriate or unsafe SMS messages. )
• Location Logs Access ( Background location to periodically record latitude and longitude )

3. Permissions & Why They Are Required

NetEchoApp requests the following permissions to provide its core functionality:

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
<uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
<uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW" />
<uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
<uses-permission android:name="android.permission.READ_CONTACTS" />
<uses-permission android:name="android.permission.READ_SMS" />
<uses-permission android:name="android.permission.READ_CALL_LOG" />
<uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION" />
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
<uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" />
<uses-permission android:name="android.permission.BIND_NOTIFICATION_LISTENER_SERVICE" />
<uses-permission android:name="android.permission.READ_MEDIA_IMAGES" />
<uses-permission android:name="android.permission.READ_MEDIA_VIDEO" />


    

Explanation of key permissions:

• VPN Service: used to filter and route network traffic for safe browsing and URL filtering policies (traffic inspection is limited to metadata needed for policy enforcement).
• Media Projection (Screen Capture): used only with explicit consent to allow authorized administrators or parents to review device activity for safety or compliance purposes.
• POST_NOTIFICATIONS: required to display a persistent notification that NetEchoApp is running and protecting the device.
• SYSTEM_ALERT_WINDOW: used to display blocking or informational overlays when a blocked app or website is accessed (used judiciously and only for clear user-facing messages).
• RECEIVE_BOOT_COMPLETED: used so NetEchoApp can resume protection automatically after device reboot.
• READ_CALL_LOG: Blocking unwanted or restricted phone numbers..
• READ_SMS: Filtering inappropriate or unsafe SMS messages.
• ACCESS_BACKGROUND_LOCATION: Background location to periodically record latitude and longitude.
• READ_MEDIA_IMAGES & READ_MEDIA_VIDEO:To detect inappropriate or harmful media on the child’s device, monitor screenshots, allow parental review of device content, and provide photo backup functionality.
• BIND_NOTIFICATION_LISTENER_SERVICE: NetEcho requires Notification Access to monitor device notifications for parental supervision features such as detecting inappropriate messages or blocked content. No data is sold or shared with third parties.

Why NetEchoApp Needs Device Administrator Permission?

To ensure continuous protection and prevent a child or employee from disabling required safety features, the app needs Device Administrator permission. This permission allows:

• Preventing unauthorized uninstallation
• Ensuring app-blocking, URL filtering, SMS scanning, and location tracking remain active
• Maintaining the integrity of monitoring services even if the user attempts to disable them

Why NetEchoApp Needs Accessibility Servicesr Permission?

To enable deeper app usage tracking, blocking and screen time enforcement for a better experience and enhanced safety. This permission allows:

• Block access to apps that parents mark as restricted
• Detect unsafe SMS content based on parent-defined keywords
• Monitor screen activity only for safety and compliance purposes
• Support features such as app usage control, screen safety alerts, and web filtering

This permission is used strictly to protect the managed device from bypassing parental or enterprise restrictions. NetEchoApp does not perform any device-wipe, lock, or factory-reset actions.

Why does the app need READ_MEDIA_IMAGES and READ_MEDIA_VIDEO?

To detect inappropriate or harmful media on the child’s device, monitor screenshots, allow parental review of device content, and provide photo backup functionality. Only media that is automatically classified as potentially unsafe is uploaded to the parent’s dashboard for review.

Media is scanned on-device using local detection. Only media flagged as inappropriate is uploaded and made visible to parents. The app shows a persistent notification indicating monitoring is active. The child is clearly informed that media monitoring occurs.

4. How Data Is Used & Stored

Whenever possible, NetEchoApp processes data locally on the device. Administrators may enable secure log upload or centralized reporting; in that case, logs are transmitted to the configured management server using secure channels.

• Local processing is preferred for privacy and responsiveness.
• If logs are uploaded, they are sent only to the administrator’s configured endpoint.

5. Data Retention & Deletion

Logs and local data retention times are configurable by the administrator. Users on managed devices should contact their administrator for details. Administrators should provide users with mechanisms for data access, correction, or deletion where required by law.

6. User Controls & Rights

For managed devices, administrators administer policies and have tools to manage enrolled devices. For parental deployments, parents control policies and settings. If you are a user who believes data has been collected or processed improperly, contact your administrator or the organization that manages your device.

7. Security

NetEchoApp follows industry-standard practices to protect data, including encrypted channels for data transmission and secure local storage where applicable. However, security depends on correct configuration and secure handling by the administrator.

8. Changes to This Policy

We may update this Privacy Policy to reflect changes in the app or legal requirements. Changes will be published on this page and, when relevant, via in-app notices.

9. Contact

For privacy questions, please contact the administrator or the company responsible for your NetEchoApp deployment: