Privacy & terms, in plain language.

When you request early access

Your email address, and anything else you choose to tell us (your name, your company, what you want to use Erius Phone for). We use it to contact you about early access. When you submit the request form on our homepage, we store your email address together with the time, your IP address and your browser's user-agent (to spot spam and abuse), and send ourselves an email notification so a person can follow up.

When you have an account

An account identifier and the contact details you gave us. For API keys, we store only a one-way hash of each key — never the key itself — so we can check a key without being able to read it back.

When you use the API

Every API request is recorded in an audit log so we can operate the service, investigate problems and detect abuse. Each entry contains:

• The time, your account, and a short fingerprint of the key used (not the key)
• The IP address the request came from
• The method, path, device and action (for example tap or install), the response status and how long it took
• For app installs, launches, stops and uninstalls: the app's package name, and for installs its version

The audit log does not contain request bodies — so no typed text, no URLs your agent opens, no intents — and no API keys. Failed authentication attempts are logged the same way, so we can spot someone trying keys.

Files you send us

APKs you upload are written to a temporary folder only your account can use, and deleted after they're installed. APKs you ask us to keep for repeated installs, and test artifacts such as step-by-step screenshots and reports, are stored in folders scoped to your account.

This website

Eight pages of this site (the homepage, Pricing, Docs, Security, About, Blog, Partners and this page) load Google tags: Google Tag Manager, Google Analytics 4 and a Google Ads tag. We use them to count visits and see which pages are read, to measure whether our ads lead to early-access requests, and to be able to show our ads to people who have visited the site (remarketing). Through these tags Google receives your IP address, your browser and device details, the address of the page and the site you came from, and, where cookies are allowed, a cookie identifier. Google handles that data under its own privacy policy. The cookies and your choices are listed under Cookies.

When you send the early-access form, the Google Ads tag records that a request was sent, so we can tell which ad worked. Your email address is not sent to Google.

The Blog page also loads a script from our blog provider, Soro (trysoro.com), which fetches the posts from Soro's own servers. The other pages load no third-party script.

Separately, our own server records a page-view count and a campaign tag (the utm_ parameter or the site you came from) so we can tell which of our announcements works; the tag is attached to a signup if you send one. That count holds no IP address and no visitor ID. Like any web server, ours may keep standard request logs (IP address, page requested, browser user-agent). If any of this changes, we'll update this page.

Each Erius Phone device is a full Android system with persistent storage. Whatever you and your agent put on it — installed apps, app data, accounts you sign into, photos, messages, browser history — is stored on that device so it's still there next session.

That content is yours, and you're responsible for it (see Your apps, accounts & content). We don't look through it, analyse it, or use it to train anything. To be straightforward about the limits of that: the device runs on servers we operate, and it isn't end-to-end encrypted from us. People operating the infrastructure have the technical ability to access it. We only do so when needed to keep the service running, to fix a problem you've asked us to look at, to investigate a clear breach of these terms, or when required by law.

Apps you install on your device — including Google Play and the apps you get from it — are run by their own publishers under their own privacy policies. When you sign into a third-party account on your device, that relationship is between you and that service.

• To run your devices and the API, and to keep your account isolated from everyone else's
• To contact you about early access, your account, or changes to these terms
• To troubleshoot problems, investigate abuse, and keep the shared infrastructure secure
• To understand, in aggregate, how the API is used, so we can improve it
• To comply with the law

We don't sell or rent your data to anyone. We don't use your account, your API activity or anything on your devices for advertising. The one advertising use is on this website: the Google Ads tag described under Cookies.

Only the people and providers we need to run the service — for example the hosting provider whose servers the devices run on, an email provider if we email you, and the third-party AI voice and avatar services that process a call's audio and video while the call is connected (so that the call persona can hear and answer). We don't name individual providers. They get only what's needed for that job. Google receives the website visit data described under Cookies, through the analytics and advertising tags on this site.

We'll disclose information if we're legally required to, or if it's genuinely necessary to protect people or the service from harm. If the business is ever sold or merged, your data would move with it under the same commitments, and we'd tell you.

The dashboard uses no cookies. This website does: the Google tags described under What we collect set the cookies below in your browser.

Cookie	Set by	What it is for	Kept for
_ga	Google Analytics 4	Tells one visitor from another, to count visits.	Up to 2 years
_ga_QGX2KG6QYJ	Google Analytics 4	Keeps the state of your current visit.	Up to 2 years
_gcl_au	Google Ads	Links an ad click to a later early-access request, and supports remarketing.	90 days
IDE, test_cookie	Google, on doubleclick.net	Google's own advertising cookies, used for ad measurement and remarketing. Only set if your browser allows third-party cookies.	Set by Google; up to 2 years

Google may also read cookies you already have on its own domains (such as google.com) when the tags load.

Your choice

In the EEA, the UK and Switzerland these cookies are off until you accept them. A banner asks you once, with Accept and Decline. Until you accept, and if you decline, no cookie is set; the tags still send Google a cookieless signal that a page was viewed (page address, time, browser details), which Google uses for aggregate counts. Elsewhere the cookies are set on your first visit.

Wherever you are, you can change your choice at any time: open the cookie settings. Declining there also removes the cookies above from your browser. Your choice is saved in your browser's local storage, not in a cookie. We recognise European visitors by Google's reading of your location and by your browser's time zone; if you are in Europe and saw no banner, use the link above.

The dashboard

The dashboard keeps you signed in without cookies: when you sign in with your API key, it's saved in your browser's local storage on your own device and sent with each dashboard request so we know it's you. The dashboard also keeps a couple of small preferences there — the labels you give your apps, and which crashes you've already cleared. Signing out removes the saved key, and clearing your browser's data for this site removes everything.

Account details are kept while you have an account. Audit logs are kept in rotating files and older entries are discarded as new ones are written; we haven't set a fixed retention period yet and will publish one before launch. Device data is kept until you, or we at your request, delete the device.

Every device runs in its own isolated container on its own network, API keys only reach their own account's devices, and logs are readable only by the people operating the service. The Security section describes this in more detail. If we ever learn of a breach affecting your data, we'll tell you promptly.

We don't hold any security or privacy certifications at this stage, and we don't claim compliance with any specific regulation. Where data-protection laws give you rights over your data, we'll honour them — just ask.

You can ask us for a copy of the account information and logs we hold about you, ask us to correct it, or ask us to delete your account and all of your devices. Email info@eriusphone.com from the address on your account. Deleting a device erases its storage, including every app, account session and file on it — that can't be undone, so copy anything you want to keep first.

Erius Phone isn't intended for children, and we don't knowingly collect information from anyone under 16.

Erius Phone is a pre-release product, available by invitation. Features, the API, limits and these terms evolve as we build it. We aim to tell you ahead of any breaking change to the API.

Your API key is how we know it's you. Keep it secret, don't share it outside your team, and tell us straight away if you think it's been exposed so we can revoke it and issue a new one. You're responsible for activity that uses your keys.

Every device is a real phone running on shared hardware, with a real connection to the internet. Please don't use it, or let your agent use it, to:

• Do anything illegal, or help anyone else do so
• Commit fraud, impersonate people, or create fake accounts at scale
• Send spam, or run bot farms that manipulate ratings, reviews, ads, votes or engagement
• Attack, scan or probe other systems — including our infrastructure, other customers' devices, or third parties
• Try to get around the isolation between devices, or between a device and the host it runs on
• Distribute malware, or content that's abusive, exploitative, or infringes someone else's rights
• Mine cryptocurrency, or otherwise use a device's resources in ways that degrade the service for others
• Break the terms of the apps and services you use on the device

Testing your own app's security, or testing how it handles hostile input, is fine — that's part of QA. If you're unsure whether something is allowed, ask us first.

We are not responsible for how you, your agent, or any AI system you operate uses the device. We do not monitor, review, approve, or control the purpose, content, or outcome of that use. Whether an action is taken directly by you or autonomously by an AI agent acting under your API key makes no difference: you bear full and sole responsibility for it, including any illegal, harmful, or unintended action your agent takes without your direct, real-time instruction.

You own what you put on your device, and you're responsible for it. That includes:

• The apps you install — whether from Google Play, another store, or your own APK — and having the right to install and use them
• The accounts you sign into. Sign-ins are done by you, by design. Make sure your use of each account, including by an automated agent, is allowed by that service's own terms
• What your agent does on the device, in those apps and on those accounts, as if you'd done it yourself
• Your data. Devices are not a backup. Keep your own copies of anything important

You give us only the permission we need to store and run that content on your behalf in order to provide the service. We don't claim any ownership of it.

Some apps refuse to run on virtualized or uncertified devices, or restrict automated use. That's their choice, not something we can change, and it isn't a fault in the service.

During early access the service is provided "as is" and "as available". The availability figures on the pricing page for Team and Enterprise are service targets we work toward. A service-level agreement with service credits is on the roadmap; until it is in place, these terms do not include one and the targets carry no credit. Devices may be restarted, moved or rebuilt for maintenance, and the API may be unavailable at times. We work to keep your device's data intact; keep your own copy of anything important.

To the extent the law allows, we make no warranties — express or implied — including that the service will be uninterrupted, error-free, or fit for a particular purpose.

Current preview prices are published on Pricing: $39/mo (Starter, 1 phone) and $129/mo (Team, 3 phones), with a tablet option at $59/mo and $189/mo respectively. These are early-access preview prices and may still change before general availability — we'll announce it here and on the pricing page if they do. Enterprise terms are agreed directly with you. We won't charge you for anything you haven't agreed to in advance, and paid terms will be set out clearly before they apply.

To the extent the law allows, we aren't liable for indirect or consequential losses — such as lost profits, lost data, lost accounts, or business interruption — arising from your use of the service, including anything an agent does on your device or anything a third-party app or service does in response.

We disclaim all liability for the purpose, content, or consequences of any action taken on or through a device — by you, by your agent, or by any AI system acting under your account or API key — regardless of whether that action was supervised, automated, or autonomous. The device and API are tools; how they are used is entirely your decision and your risk.

To the extent the law allows, our total liability to you for any claim related to the service is limited to the amount you paid us for it in the three months before the claim. During free early access, that may be nothing. Nothing in these terms limits liability that can't legally be limited.

If your use of the service, your content, or your agent's actions breaks these terms or the law and that leads to a claim against us, you're responsible for it.

You can stop using Erius Phone at any time and ask us to delete your account and devices.

We may suspend or revoke access — immediately, if needed — if you break these terms, if your use puts other customers or the infrastructure at risk, or if we're required to by law. Where it's reasonable to, we'll tell you why and give you a chance to fix it first. We may also end the early-access programme; if we do, we'll give you notice and time to copy off what you need.

These are early-access terms and they will change — most notably when they're replaced by reviewed terms before commercial launch. We'll update the date at the top of this page and, for meaningful changes, tell early-access users by email. If you keep using the service after a change, the new terms apply.