Project PRINCE AI
PLAIN-LANGUAGE PRIVACY

What PRINCE can see — and why

PRINCE protects people who are often taken advantage of. So we owe you total honesty about what it can access. Here it is, in plain words — no legal fog.

The complete list of every power PRINCE holds, and every company your information can reach, is kept in one file that PRINCE's build checks against the app itself: What PRINCE can do.

The one rule that governs all of this: PRINCE looks only when you ask it to — when you tap the crown, share something, start a scan, or switch on Mama Mode (the one feature that keeps watch for you, described below, off by default). It does not record you in the background, and does not sell or share your personal information. What it reads to answer your question is used for that answer and then let go. If you deliberately record a Solomon life-story original, nothing is stored until you tap Keep this original recording; that private original stays user-exportable and user-deletable and is never used to clone your voice.

On your computer — the browser scanner

The PRINCE scanner is a browser extension. Browsers require it to ask for broad permissions so it can check any page you're worried about. Here's what each one is actually for:

See the page you're on (all websites)
So when you run a scan, PRINCE can read the text, links, and page you asked about — whether it's your bank, an email, or a suspicious site. It reads a page only when you run a scan on it, or, while Mama Mode is on, the pages you open.
Read a screenshot of the current tab
Some scam pages are images with no readable text. With your action, PRINCE can look at a picture of the page to find hidden text — then discards it.
Tabs
To know which page you're asking about when you click Scan, and to open your results.
Tab audio (only when you start it)
For Lingua's live captions, PRINCE listens to the tab you started and stops when you stop it or close the tab. Lingua's Captions, Hold to talk and Live interpreter buttons can also use your browser's own speech recognition, which listens through your microphone only while one of them is on and only if your browser allows it.
Mama Mode in the browser (only if you switch it on)
This is the one feature that watches with you, because you asked Mama to. While Mama Mode is on, each time a page changes PRINCE checks a small sample of its visible text and links for danger, so Mama can step in and say STOP before you tap anything. Each check covers only that moment's page, follows the same never-keep rules as every scan, and ends the instant you switch Mama Mode off. It is off by default.

On your phone — the PRINCE app

Microphone
For Lingua (translate what you hear) and Echo Ears (listen for pressure on a speakerphone call). Only while you start it, and a visible light shows when it's on.
The floating helpers (accessibility service)
The crown and Lingua float over other apps so you can check anything, anywhere. They read your screen only at the moment you tap them — never before, never in the background. This is the same kind of permission a screen reader uses.
Keep running / battery exemption
So your phone doesn't put PRINCE to sleep and quietly turn your protection off.
Mama Mode (only if you switch it on)
While Mama Mode is on, Mama protects in two narrow ways, and a third if you turn on message watch (below). 1) When a scan you started finds real danger, Mama steps in front of everything with a clear STOP card. 2) If you also grant call screening (a separate Android permission you approve), incoming call numbers are checked on your phone. Numbers verified as scams are blocked before your phone rings; a number reported but not yet verified still rings — Mama just warns you to be careful. No single report can ever silence a caller. Your phone vibrates and beeps so Mama reaches you even if you can't see the screen, Mama's voice speaks only when you press the button, and the crown glows softly whenever Mama Mode is on so you always know. The Play app does not inspect browser pages or addresses in the background. Mama Network Protection is the separate, user-controlled VPN described below. Switch Mama Mode off and those protections stop. If someone is in crisis and reaching out for help, Mama never treats them like a scam.
Message watch (only if you switch it on, inside Mama Mode)
Uses Android's notification-access permission, a separate grant you make in Android's settings. When a new notification arrives from a texting, chat or email app, PRINCE reads its sender and text on your phone, checks it against scam signs built into the app, and then drops the words. If it looks like a scam, Mama speaks up and shows a warning; nothing is sent anywhere unless you tap that warning to have your guardians check the message. To catch scams that build over days, the phone keeps only which scam signs each conversation showed and when, for up to 14 days, never the words. Switch message watch or Mama Mode off and that memory is erased. PRINCE never replies to, deletes or acts on your messages.
Mama Network Protection (optional)
By invitation while it is in pilot; in the Play app from version 1.0.92. This is a separate control you turn on yourself. It routes this phone's network traffic through a private PRINCE VPN gateway. The gateway processes destination domain names, IP addresses, connection timing, and data volume only as needed to route connections and block verified scam destinations. When Mama stops a destination from the signed warning list, PRINCE rechecks the current warning evidence, does not store the raw destination, and keeps only a keyed, unreadable security event. It stops contributing after 30 days and scheduled cleanup removes it. If you separately choose a Trusted Circle member, they can see only seven-day protection totals — never sites, messages, calls, contacts, or browsing history — and you can stop sharing immediately. PRINCE does not decrypt protected HTTPS content and does not keep a browsing history. Allowed system DNS lookups go through the encrypted tunnel to Cloudflare 1.1.1.1; Cloudflare may keep limited resolver logs for up to 25 hours and may keep combined statistics. This network data is not sold or used for advertising. Some browser Secure DNS, direct-IP, and encrypted-name connections may be outside this protection. You can pause it at any time. If you cut off an app, PRINCE reads the list of apps on this phone so you can choose, and checks on this phone which app opened each new connection, so Mama can refuse the ones you cut off. If you turn on the family lock and choose to hold remote-control apps, PRINCE checks on this phone whether they are installed and notices new ones. None of this leaves the phone. Family lock (optional): with your agreement, someone you trust sets a PIN needed to restore a held app or pause protection, and Mama can hold known remote-control apps offline when they are installed and tells you. Android's VPN settings can always turn protection off.
PRINCE never: watches or records you in the background (the one exception you control is Mama Mode, described above — off by default) · reads your screen unless you tap or have Mama Mode on · keeps the raw content of your private scans — the message, image, or full web link you scanned is discarded once you have your answer · sells or shares your personal information · sends your scans to the public feed unless you switch on "Help others" (and even then, only a sanitized threat record — never your name, email, or personal details).
One thing PRINCE always does, said plainly: when any scan finds a real threat, the threat's identifiers — the scam site's address, the scammer's number or email, never anything about you — strengthen the shared shield that protects every PRINCE family. That's how a scam aimed at one person becomes protection for everyone. A threat reported once only produces a warning on other phones; blocking requires verification or reports from several independent families, and a human can always undo it.

What your command center does keep: a private record of what each scan found — the verdict, how serious it was, the website's domain (never the full link), which guardian answered, and the date. Never the message, image, or full link you scanned. It's yours alone, deletes itself after 90 days, and you can clear it anytime.

One exception, only if you choose it: when you tap "Help improve PRINCE" on a result, or leave "Help others" on and hit a real scam, the raw example may be kept in a de-identified training set for up to 30 days to make the guardians smarter, then it auto-deletes. It's tied to a one-way hash, never your name, and never shown publicly. Don't share, and none of it is kept.

When a scam is confirmed real: if something you chose to share turns out to be confirmed — matched to a known-scam list, reported by several unrelated families, or verified by our team — a scrubbed copy of just the scam's wording may be kept with no set expiry date, so the guardians never forget how that trick works (the way antivirus never forgets a virus). Before it's stored, every personal detail is blanked out: names, emails, numbers, links, and amounts all become placeholders like [NAME] or [LINK]. What's left is the scam's pattern and who it pretended to be — never anything about you, and never the raw message. It's tied to a one-way hash, never your name, never sold, and never shown publicly. If it was shared on or after October 12, 2026, an automatic check on PRINCE's servers may use it to test whether a new detection pattern catches it; it is never sent to an AI model. If you don't share, nothing of yours is ever added.

Questions? See our full Privacy Policy and Terms.  •  ← Back