Privacy Policy
Caught In The Act is an anti-theft app for your own phone. When it is armed and someone picks the phone up, it takes a photo and a short video with the front camera, can sound an alarm, and can email that evidence to an address you have confirmed. This policy explains exactly what that involves.
The app is operated by Dante Jackson ("we"). Questions: djackson@invisionthat.com.
The short version
- The camera is only used while you have armed the app, and only captures when it is triggered.
- Photos and videos stay on your phone unless you set up email alerts.
- If you do, the photo and video pass through our server on the way to your inbox and are not stored there. They are discarded as soon as the email is handed off.
- No audio is ever recorded. The app does not use your location, contacts, or advertising IDs, and contains no ads or analytics.
What stays on your phone
Captured photos and videos, your settings, your PIN, a custom alarm sound if you choose one, and a diagnostic log of what the app did (for example "photo saved", "email sent"). None of this leaves the phone except as described below, or when you choose to share a capture yourself. Deleting a capture in the app, or uninstalling the app, deletes it from the phone.
Email alerts (optional)
Email alerts are off until you enter an address and open the confirmation link we send to it. No alert is ever sent to an address that has not been confirmed.
| What we receive | Why | How long we keep it |
|---|---|---|
| Your email address | To send the confirmation link and your alerts | Until you remove the address in the app |
| A random identifier for your installation, created by our server | To know which confirmed address an alert belongs to | Until you remove the address in the app |
| Your phone's model name (for example "Samsung SM-S947U") | To say which phone was picked up, in the email | Until you remove the address in the app |
| The photo and video from a trigger, and the time it happened | To attach them to your alert email | Not stored. Discarded once the email is handed to our email provider |
| A record that an alert was sent (the time and your installation, never the content) | To limit how many alerts one installation can send | About 30 days |
| The IP address and email address used when setting up alerts | To stop the setup form being used to spam other people | About 30 days |
Service providers
We use two providers to run email alerts. They process data only to provide that service to us.
- Cloudflare hosts our server and its database. Like any web host, it handles the network connection, including your IP address, and keeps short-lived request logs for operating and securing the service.
- Resend delivers the emails, including the attachments. It may keep delivery records under its own privacy policy.
Once an alert reaches your inbox, it is held by your own email provider like any other email.
We do not sell your data, share it for advertising, or give it to anyone else, unless the law requires us to.
Security
Everything sent between the app and our server is encrypted in transit (HTTPS). The app holds no password or key that could be used to send email; only our server can.
Your choices
- Remove your email address in Settings → Email alerts. This deletes your address, installation identifier and phone name from our server immediately. Rate-limit records expire on their own after about 30 days.
- Delete captures in the app's Evidence screen.
- Revoke camera access at any time in your phone's settings. The app cannot capture anything without it.
- To ask about or delete any other data, email djackson@invisionthat.com.
People who are photographed
The app captures whoever picks up the phone. It is intended only for protecting a phone you own. It records video without sound, because recording someone's voice without consent is unlawful in many places. You are responsible for using it lawfully where you live. Using it to monitor another person is not permitted.
Children
The app is not directed at children under 13, and we do not knowingly collect their information.
Changes
If this policy changes, we will update the effective date above, and for significant changes we will say so in the app.
Contact
Dante Jackson · djackson@invisionthat.com