Privacy & terms, in plain language.

When you request early access

Your email address, and anything else you choose to tell us (your name, your company, what you want to use Erius Phone for). We use it to contact you about early access. When you submit the request form on our homepage, we store your email address together with the time, your IP address and your browser's user-agent (to spot spam and abuse), and send ourselves an email notification so a person can follow up.

When you have an account

An account identifier and the contact details you gave us. For API keys, we store only a one-way hash of each key — never the key itself — so we can check a key without being able to read it back.

When you use the API

Every API request is recorded in an audit log so we can operate the service, investigate problems and detect abuse. Each entry contains:

• The time, your account, and a short fingerprint of the key used (not the key)
• The IP address the request came from
• The method, path, device and action (for example tap or install), the response status and how long it took
• For app installs, launches, stops and uninstalls: the app's package name, and for installs its version

The audit log does not contain request bodies — so no typed text, no URLs your agent opens, no intents — and no API keys. Failed authentication attempts are logged the same way, so we can spot someone trying keys.

Files you send us

APKs you upload are written to a temporary folder only your account can use, and deleted after they're installed. APKs you ask us to keep for repeated installs, and test artifacts such as step-by-step screenshots and reports, are stored in folders scoped to your account.

This website

This site doesn't currently use analytics, advertising trackers or third-party scripts, and doesn't set cookies. Like any web server, ours may keep standard request logs (IP address, page requested, browser user-agent). If that changes, we'll update this page first.

Each Erius Phone device is a full Android system with persistent storage. Whatever you and your agent put on it — installed apps, app data, accounts you sign into, photos, messages, browser history — is stored on that device so it's still there next session.

That content is yours, and you're responsible for it (see Your apps, accounts & content). We don't look through it, analyse it, or use it to train anything. To be straightforward about the limits of that: the device runs on servers we operate, and it isn't end-to-end encrypted from us. People operating the infrastructure have the technical ability to access it. We only do so when needed to keep the service running, to fix a problem you've asked us to look at, to investigate a clear breach of these terms, or when required by law.

Apps you install on your device — including Google Play and the apps you get from it — are run by their own publishers under their own privacy policies. When you sign into a third-party account on your device, that relationship is between you and that service.

• To run your devices and the API, and to keep your account isolated from everyone else's
• To contact you about early access, your account, or changes to these terms
• To troubleshoot problems, investigate abuse, and keep the shared infrastructure secure
• To understand, in aggregate, how the API is used, so we can improve it
• To comply with the law

We don't use your data for advertising, and we don't sell it or rent it to anyone.

Only the people and providers we need to run the service — for example the hosting provider whose servers the devices run on, and an email provider if we email you. They get only what's needed for that job.

We'll disclose information if we're legally required to, or if it's genuinely necessary to protect people or the service from harm. If the business is ever sold or merged, your data would move with it under the same commitments, and we'd tell you.

Account details are kept while you have an account. Audit logs are kept in rotating files and older entries are discarded as new ones are written; we haven't set a fixed retention period yet and will publish one before launch. Device data is kept until you, or we at your request, delete the device.

Every device runs in its own isolated container on its own network, API keys only reach their own account's devices, and logs are readable only by the people operating the service. The Security section describes this in more detail. No system is perfectly secure, and we don't claim ours is; if we learn of a breach affecting your data, we'll tell you promptly.

We don't hold any security or privacy certifications at this stage, and we don't claim compliance with any specific regulation. Where data-protection laws give you rights over your data, we'll honour them — just ask.

You can ask us for a copy of the account information and logs we hold about you, ask us to correct it, or ask us to delete your account and all of your devices. Email info@eriusphone.com from the address on your account. Deleting a device erases its storage, including every app, account session and file on it — that can't be undone, so copy anything you want to keep first.

Erius Phone isn't intended for children, and we don't knowingly collect information from anyone under 16.

Erius Phone is a pre-release product, available by invitation. Features, the API, limits and these terms can change as we build it, sometimes without much notice. We'll try to tell you before breaking changes to the API, but during early access we can't promise to.

Your API key is how we know it's you. Keep it secret, don't share it outside your team, and tell us straight away if you think it's been exposed so we can revoke it and issue a new one. You're responsible for activity that uses your keys.

Every device is a real phone running on shared hardware, with a real connection to the internet. Please don't use it, or let your agent use it, to:

• Do anything illegal, or help anyone else do so
• Commit fraud, impersonate people, or create fake accounts at scale
• Send spam, or run bot farms that manipulate ratings, reviews, ads, votes or engagement
• Attack, scan or probe other systems — including our infrastructure, other customers' devices, or third parties
• Try to get around the isolation between devices, or between a device and the host it runs on
• Distribute malware, or content that's abusive, exploitative, or infringes someone else's rights
• Mine cryptocurrency, or otherwise use a device's resources in ways that degrade the service for others
• Break the terms of the apps and services you use on the device

Testing your own app's security, or testing how it handles hostile input, is fine — that's part of QA. If you're unsure whether something is allowed, ask us first.

You own what you put on your device, and you're responsible for it. That includes:

• The apps you install — whether from Google Play, another store, or your own APK — and having the right to install and use them
• The accounts you sign into. Sign-ins are done by you, by design. Make sure your use of each account, including by an automated agent, is allowed by that service's own terms
• What your agent does on the device, in those apps and on those accounts, as if you'd done it yourself
• Your data. Devices are not a backup. Keep your own copies of anything important

You give us only the permission we need to store and run that content on your behalf in order to provide the service. We don't claim any ownership of it.

Some apps refuse to run on virtualized or uncertified devices, or restrict automated use. That's their choice, not something we can change, and it isn't a fault in the service.

During early access the service is provided "as is" and "as available". We don't offer a service-level agreement or any uptime guarantee. Devices may be restarted, moved or rebuilt for maintenance; the API may go down; things may not work the way the docs say. We do our best to keep your device's data intact, but we can't guarantee it won't be lost.

To the extent the law allows, we make no warranties — express or implied — including that the service will be uninterrupted, error-free, or fit for a particular purpose.

Plan prices haven't been set yet — see Pricing. Early-access teams get preview pricing, agreed with each team as they're onboarded. We won't charge you for anything you haven't agreed to in advance, and paid terms will be set out clearly before they apply.

To the extent the law allows, we aren't liable for indirect or consequential losses — such as lost profits, lost data, lost accounts, or business interruption — arising from your use of the service, including anything an agent does on your device or anything a third-party app or service does in response.

To the extent the law allows, our total liability to you for any claim related to the service is limited to the amount you paid us for it in the three months before the claim. During free early access, that may be nothing. Nothing in these terms limits liability that can't legally be limited.

If your use of the service, your content, or your agent's actions breaks these terms or the law and that leads to a claim against us, you're responsible for it.

You can stop using Erius Phone at any time and ask us to delete your account and devices.

We may suspend or revoke access — immediately, if needed — if you break these terms, if your use puts other customers or the infrastructure at risk, or if we're required to by law. Where it's reasonable to, we'll tell you why and give you a chance to fix it first. We may also end the early-access programme; if we do, we'll give you notice and time to copy off what you need.

These are early-access terms and they will change — most notably when they're replaced by reviewed terms before commercial launch. We'll update the date at the top of this page and, for meaningful changes, tell early-access users by email. If you keep using the service after a change, the new terms apply.