Slycup MDM ("we", "our", "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.
This platform is used to manage Android devices on behalf of account holders. By using the Service, you agree to the practices described in this policy.
A device enrolled in the Service is very often used by someone other than the account holder — an employee, a family member, or a minor child. This policy describes what we collect and do as the platform operator. The account holder, not Slycup MDM, is responsible for obtaining any consent or notice required from the device's actual user before enrollment — see "Acceptable Use" in our Terms of Use. The app installed on an enrolled device always shows a visible icon and cannot be hidden from that device, regardless of configuration — it is not designed to operate covertly.
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email address, hashed password, phone number | Provided by you at registration |
| Device information | Device name, model, manufacturer, Android version, serial number, IMEI, battery level, storage, Wi-Fi SSID, IP address, installed apps | Reported automatically by enrolled devices |
| Camera (enrollment only) | Used only to scan the enrollment QR code when setting up a device. No photo or video is ever captured, stored, or transmitted. | Device camera, momentarily, during enrollment |
| Payment information | Last 4 digits of card, card brand, billing schedule ID | Payment processor (Cardknox/Sola) — full card numbers are never stored |
| Usage and activity logs | Login times, commands sent, policy changes, audit events | Generated automatically as you use the Service |
| Network activity (optional) | DNS queries, domain names, VPN traffic metadata | Reported by enrolled devices when DNS filtering or VPN is enabled |
| Location data (optional) | Device GPS coordinates used to evaluate geofence boundaries | Reported by enrolled devices when a geofence policy is configured |
| App store / Google Play data | App search queries, install requests and history; for Play-sourced installs, either the account holder's own linked Google account (its access token, stored encrypted) or a shared, non-personal session used to fetch public app listings | Generated by your use of the app store, or provided by you if you link a Google account |
| Support messages (optional) | Free-text messages typed into the app's "Report a problem" screen | Submitted voluntarily from an enrolled device |
We use the information we collect solely to provide and operate the Service:
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
We only send transactional emails — messages triggered directly by your account activity:
All emails are sent via Amazon SES from a verified sender address. We do not send newsletters, promotions, or unsolicited messages of any kind.
Data is stored on Cloudflare's cloud infrastructure (Workers, Durable Objects, and R2 object storage) rather than on a server we run ourselves. We implement the following security measures:
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify affected account holders and any regulator whose law requires it, without undue delay, as required by applicable law.
Our infrastructure — Cloudflare, AWS, and our payment processor — operates data centers in the United States and other countries. If you access the Service from the European Economic Area, the UK, or another region with its own data-transfer rules, your information will be transferred to and processed in countries that may have different data-protection laws than your own, including the United States. Where required, we rely on our providers' standard contractual clauses or other approved transfer mechanisms to protect that data.
The Service is intended to be registered and operated by an adult account holder — for example, a parent, guardian, or employer — not by a child directly. We do not knowingly collect personal information directly from a child under 13 through account registration, and a minor's device is only enrolled, and its data only collected, because the adult account holder set it up and takes responsibility for the consent that enrollment requires (see "Acceptable Use" in our Terms of Use). If we learn that a child has created an account directly without a parent or guardian's involvement, we will take steps to close it. A parent or guardian who believes their child has submitted personal information to us directly, outside of a device their own account enrolled, can contact us at 9631768@gmail.com to request its deletion.
We retain your data for as long as your account is active. When you delete a device or account, associated data is removed from our database. Audit logs are retained for the lifetime of the account to support accountability and security review.
If your account was created by a reseller, or sits under an operator or fleet account, those parties can see and manage account and device data within the scope they administer — this is how the Service's reseller model works, not a third-party data sale. See "Resellers and Multi-Tenant Accounts" in our Terms of Use.
The portal uses a single httpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics on the portal.
You have the right to:
If you are located in the European Economic Area, the UK, or a US state with its own privacy law (e.g. California), you may have additional rights under that law, including the right to know what categories of data we hold, to request deletion, and to not be discriminated against for exercising these rights. We do not sell personal information. To exercise any of these rights, contact us at 9631768@gmail.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority at any time.
We may update this Privacy Policy from time to time. We will notify account holders of material changes via email. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.
Slycup MDM is operated by the Slycup MDM team. Questions or concerns? Contact us at 9631768@gmail.com.