Aeon Frost Capsule Corp · Guelph, Ontario, Canada
Application: Jarvis Bodyguard (com.jarvisbodyguard.app)
Effective date: The date this application first became publicly available on Google Play (Version 1.0, September 2026)
Privacy contact: HelpdeskAFCC@outlook.com
In plain terms. This app runs on your phone. We do not receive your data, we cannot see it, and we cannot recover it for you. Nothing in this policy is a promise that the app will work — that is dealt with in the Terms of Service, and you should read them.
We do not collect your data. We cannot see it. We could not give it to anyone if we were asked, because we do not have it.
Jarvis Bodyguard runs entirely on your phone. Aeon Frost Capsule Corp operates no servers for this app. Your emergency contacts, recordings, location history, PINs and settings are stored on your device, encrypted, and they never reach us.
There are exactly three ways information leaves your phone, and you trigger all three yourself. They are in section 4, and we describe them plainly rather than burying them.
Aeon Frost Capsule Corp, of Guelph, Ontario, Canada, publishes Jarvis Bodyguard and is the data controller for the limited purposes described here.
For any privacy question, or to exercise any right in section 9, contact HelpdeskAFCC@outlook.com.
| What | Why | Where it goes |
|---|---|---|
| Emergency contacts — names, phone numbers, optional email, relationship | To send alerts to the people you choose | Encrypted on your device. Phone numbers go to your carrier only when you send an alert |
| Your name and custom alert message | Included in the alert so contacts know who it is from | Encrypted on your device; sent in the alert you trigger |
| Precise location | Included in alerts; shared periodically during an SOS and during "walk me home" | Encrypted on your device; sent to your chosen contacts as a map link |
| Background location | So an alert and a walk-home update still work when the app is closed | Same as above |
| Microphone | Evidence recording during an SOS, and the voice-activated safe phrase | Recordings stay on your device, encrypted. See §4.3 for the safe-phrase exception |
| Camera | Optional video evidence during an SOS | Encrypted on your device |
| Motion sensors | Optional, off by default, experimental fall and crash detection | Never leaves the device |
| Medications and emergency medical notes | Optionally included in an alert so responders can act | Encrypted on your device; sent only in an alert you trigger |
| PINs and duress PINs | To lock the app and to trigger a silent alert | Stored as a salted hash. Never stored in readable form, never transmitted |
| In-app diagnostic log | So a fault can be diagnosed on your own phone | Stays on your device. Sensitive entries go to a separate file. Never uploaded automatically |
The app does not read your phone's contact list. When you add a contact, Android's own contact picker returns just the one entry you chose, or you type it in.
When you trigger an SOS, a walk-me-home update, an "I'm uncomfortable" check-in, or an all-clear, the app sends an SMS — and optionally places a call — to the contacts you chose.
That message travels through your mobile carrier, exactly like any text you send yourself. Your carrier can see it, and carriers keep records of messages under their own policies and their own legal obligations. That is outside our control and outside the app.
We are not a party to that message. It does not pass through us.
Subscriptions are sold through Google Play Billing. Google handles the payment and tells the app whether a subscription is active. We never see your payment details. Google's handling of that transaction is governed by Google's privacy policy.
If you enable the voice-activated SOS, the app listens for a phrase you choose, using Android's own speech recognition.
On some devices, that recognition may send audio to Google's servers. We ask Android for on-device recognition, and use it wherever the device offers it — but on older Android versions, or on devices without an on-device recogniser, audio may leave your phone and be processed by Google. We cannot prevent that and we will not pretend otherwise.
Why this matters more for some people than others. If someone else has access to your Google account, voice activity recorded there could reveal that you use this app, or reveal your safe phrase. If that is a risk for you, leave the voice feature off and use the button, the duress PIN, or a hardware trigger instead.
This is the only feature in the app where audio can leave the device. Evidence recordings never do.
Your consent. You accept these terms and this policy the first time you open the app, on a screen that cannot be skipped, and that acceptance is recorded so it is always clear which version you agreed to. The only information the app ever holds is what you type into it yourself — a contact, a name, a medical note, a message. Entering it, and turning on the feature that uses it, is your consent to the app handling it in the way described here. There is nothing collected in the background to consent to, and there are no forms that send your details anywhere: the one place you can contact us is your own email app, which you control.
The trade-off, stated plainly: because the encryption key lives in your device's secure hardware and we hold no copy, nobody can recover your data if the device is lost, reset, or if its keys are invalidated by an OS update, a repair, or a restore onto different hardware. There is no back door. That is deliberate — a recovery route we could use is a route someone could use against you — but it means the responsibility for keeping a copy of anything you need is yours. The app has an export function for exactly that.
Encryption protects data at rest, on a device you control. It cannot protect you from these, and we would rather say so than let you assume otherwise:
This list is what we know of. It is not a promise that there are no others.
We keep nothing, so there is nothing for us to delete.
On your device:
To delete everything: uninstall the app. That removes all of it, permanently, including the encryption keys. Exporting anything you want to keep first is on you.
This app is not directed at children under 13, and we do not knowingly collect anything from them. A "child mode" exists so a parent can give a child a phone with a limited version of the app; it does not collect anything additional and everything in this policy still applies.
Because your data never reaches us, the fastest route to every right below is the app itself: you can view, correct, export and delete everything from inside it, immediately, without asking us.
Depending on where you live you may also have statutory rights — under PIPEDA (Canada), the UK GDPR and Data Protection Act 2018, the EU GDPR, and the CCPA/CPRA (California) — to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to complain to a regulator.
We will honour any such request. In most cases our honest answer will be that we hold no personal information about you at all, and we will say so in writing if you ask.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We have never done so.
If we receive a subpoena, warrant, or other legal demand for a user's data, we have nothing to produce. We hold no user data, no account records, no location history and no message contents.
Records of a message that was sent would sit with the user's mobile carrier, not with us.
If this policy changes materially, the change will be shown in the app before it takes effect. The effective date at the top always reflects the current version.
For any question about this policy, to exercise any right in section 9, or to report a privacy concern:
Aeon Frost Capsule Corp
Guelph, Ontario, Canada
We answer privacy enquiries in writing. In most cases the answer will be that we hold no personal information about you at all, and we will say so plainly.
Aeon Frost Capsule Corp · Guelph, Ontario, Canada
Application: Jarvis Bodyguard (com.jarvisbodyguard.app)
Effective date: The date this application first became publicly available on Google Play (Version 1.0, September 2026)
Contact: HelpdeskAFCC@outlook.com
Read this before you rely on this app for anything.
This app is a tool. It is not a guarantee, and we do not promise you anything about what it will do.
We do not promise that an alert will be sent. We do not promise that one will arrive. We do not promise that anyone will read it, believe it, or come. We do not promise that your location will be right, that a recording will start or finish, that a fall will be noticed, or that any part of this app will be working at the moment you need it.
It runs on your phone, over your phone's network, using permissions your phone can withdraw at any time. Any of those can fail, and when they do, this app fails with them.
Use it as one part of your own safety planning. Never as the whole of it, and never instead of calling for help.
Jarvis Bodyguard is a personal safety tool. It can send alert messages to contacts you choose, share your location with them, place a call, record audio and video to your own device, and change its own appearance to conceal itself.
Our intent, stated plainly. Protecting the person using this app is the entire reason it exists. We have built it to fail loudly rather than quietly, to tell you the truth about what it actually did, and to keep working in the situations where software usually gives up. That is the standard we hold ourselves to.
And we are not infallible. We cannot foresee every phone, every network, every version of Android, every carrier, or every situation a person can find themselves in. Software written by people contains mistakes made by people. We do not claim this app is reliable, complete, or safe to depend on, and you must not treat it as though we had. Section 3 sets out, in detail and without softening it, the ways we know it can fail.
It is not an emergency service. It does not connect you to police, fire, ambulance, or any monitoring centre. No person at Aeon Frost Capsule Corp sees your alerts, watches your location, or is notified when you use this app. Nobody is on the other end.
It is not a medical device. The heart-rate display, the health-tracker appearance, and everything that looks like health monitoring are simulated and decorative. They exist to disguise the app. They do not measure anything about your body, they are not diagnostic, and they must never be used to make a health decision.
It does not replace calling for help. If you are in danger, call your local emergency number.
You accept these terms by installing or using the app. If you do not accept them, uninstall it.
You must be old enough to form a binding contract where you live, or have the consent of a parent or guardian.
In these terms, "Protected Persons" means all of the following, each of them individually as well as together:
Every disclaimer, waiver, release, limitation of liability and indemnity in these terms applies to and benefits each Protected Person individually and personally, to exactly the same extent as it applies to Aeon Frost Capsule Corp — including where a claim is brought against that person personally rather than against the company.
Each Protected Person may rely on and enforce these terms directly, in their own name, even though they are not a party to this agreement. This includes for the purposes of the *Contracts (Rights of Third Parties) Act 1999* in the United Kingdom and any equivalent law elsewhere that allows a non-party to enforce a term made for their benefit.
Where these terms say "we", "us" or "our", that means the Protected Persons.
Why this section is so long. Most software hides this list. We are writing it out because you may one day be deciding whether to rely on this app in a genuinely dangerous moment, and you deserve to make that decision knowing what can go wrong. None of this is theoretical. Every item below is a real way this app can fail, and some of them have no fix.
This list is not exhaustive. It is what we know of today. There will be failure modes we have not thought of, and situations we did not anticipate. Nothing in this section is a promise that everything *not* listed will work.
This is the feature with the most ways to go wrong, and the highest cost when it does.
These are experimental. They are switched off when you install the app, and we recommend leaving them off until you have tested them yourself.
You agree to:
This app is intended to be used by one person: you. Your settings, your PINs, your emergency contacts, your alert wording, your recordings and every other choice in the app are yours to make, and are meant to be made only by you.
You are responsible for who else can reach your phone and this app. That includes anyone you give your device to, anyone who knows or discovers your PIN, anyone who unlocks your phone, and anyone who obtains access to it by any means. The app protects what it can — it locks its settings and its contacts behind a PIN, and a duress PIN exists precisely so that a person acting under pressure can signal it — but no application can tell who is holding the phone. If your device is unlocked, whoever is holding it can operate this app, and to the app it is indistinguishable from you.
YOU ACCEPT RESPONSIBILITY FOR THE ACTIONS OF ANY PERSON OTHER THAN YOU WHO USES THIS APP ON YOUR DEVICE, AND FOR HOW THEY USE IT. As between you and the Protected Persons, any use of this app on your device is treated as your own use of it, and you are responsible for it and for everything that follows from it — whether that person had your permission, acted without your knowledge, or acted against your wishes.
That includes, without limitation, a person who:
We have no way to know that it happened, and no ability to prevent, undo, or intervene in it. We do not receive your alerts, we do not monitor your account — there is no account — and no person among the Protected Persons is aware of anything this app does on your phone.
Any consequence that follows is between that person, you, and anyone else involved. Where an alert results in another person being contacted, in police or emergency services attending, or in any report, investigation, charge, proceeding or other action by any authority, no Protected Person is a party to it, has any role in it, or is liable for it or for its outcome — including where that outcome is later regretted, withdrawn, disputed, or reversed by anyone involved.
The app can record audio and video to your device.
Recording law differs by country, state, and province, and breaking it can be a criminal offence. Some places allow one party to a conversation to record it. Others require every party to consent. Some restrict recording in particular locations regardless of consent.
You are solely responsible for knowing and obeying the law where you are. Aeon Frost Capsule Corp makes no representation that any recording you make is lawful, admissible in any proceeding, or usable for any purpose.
The app can be configured so that entering a chosen "duress" PIN silently sends an alert while showing an innocuous screen and changing the app's name and icon.
You are told, before you can set a duress PIN, exactly what this hides and — importantly — what it does not hide. It is not invisibility. Android's own Settings, the app info screen, your Google Play library and the notification shade continue to name this app. The disguise is designed to survive a glance, not a search.
You choose this feature, and you are told what it does before you choose it. It changes what a third party sees. It does not deceive you, and every safety function continues to behave exactly as documented while it is active.
Your data — contacts, recordings, location history, PINs — is stored on your device. It is not uploaded to us. We operate no servers for this app and we cannot see, recover, or hand over your data, because we do not have it.
The full detail is in the Privacy Policy, which forms part of these terms.
Read this section carefully.
Because your data lives only on your device and is encrypted with keys held by that device:
We cannot recover anything for you, in any circumstance. There is no back door, no master key, and no support process that can retrieve your data. This is a deliberate security decision: a recovery route that we could use is a route an attacker could use against you.
If you need evidence to survive the loss of the device, export it yourself, using the app's export function, and keep the copy somewhere safe.
Some features require a paid subscription, sold through Google Play. Billing, renewals, cancellation and refunds are handled by Google under Google's terms, not ours. We never see or store your card or payment details.
Refunds. We do not issue refunds ourselves. All billing runs through Google Play, and we adhere to Google Play's refund policies: any refund is requested through Google Play and granted at Google's discretion under that policy. Free or granted access — including shelter grants and free-access codes — involves no payment, so there is nothing to refund. None of this removes any refund or cancellation right you may have under the consumer law of your own country, which applies regardless of what this section says.
Contacts you have already saved keep working, and the app keeps alerting them, whether or not a subscription is active. A lapsed subscription costs you the ability to *change* who your contacts are — never the ability to reach them.
Do not use this app to stalk, harass, monitor, or intimidate another person, to record anyone unlawfully, or to make false reports to emergency services. Do not use it to break any law.
We may terminate your licence to use the app if you do.
The app, its code, its design and its name are owned by Aeon Frost Capsule Corp. You get a personal, non-exclusive, non-transferable, revocable licence to use it on devices you control. You may not copy, decompile, reverse-engineer, resell or redistribute it, except where the law expressly gives you that right regardless of contract.
Recordings and data you create with the app are yours.
In plain terms, before the legal wording: we are not promising you that this app works. Not that it works reliably, not that it works on your phone, not that it works today. If it fails at the worst possible moment, that is a thing this app can do, and you are accepting that risk by using it.
To the fullest extent permitted by applicable law, the app is provided "as is" and "as available", with all faults and without warranty of any kind.
Aeon Frost Capsule Corp expressly disclaims all warranties, whether express, implied, statutory or otherwise, including any implied warranty of merchantability, fitness for a particular purpose, quiet enjoyment, accuracy, or non-infringement, and any warranty arising from a course of dealing or usage of trade.
Without limiting that, we do not warrant that:
No statement we make anywhere is a warranty. Nothing on the store listing, on any website, in any screenshot, in any support reply, or anywhere in the app itself creates a warranty or changes this section.
Fall detection and crash detection are experimental. They ship disabled. Enabling them does not make them reliable, and they must not be depended upon.
You understand and agree that:
You are using a consumer software application as one part of your own personal safety planning. It is not a safety system, a guarantee, or a substitute for emergency services, human help, or your own judgement.
You have read section 3. You understand the specific ways this app can fail, you accept each of those risks, and you accept that section 3 is not a complete list — there will be failures neither we nor you have foreseen.
You accept the risk that the app may fail entirely, silently, or at the worst possible moment, and that such a failure may occur at a time when you are in danger.
This section defines what we are and are not undertaking to do. It is not an exclusion of liability; it is the description of the relationship you are entering into, and everything else in these terms is built on it.
No Protected Person undertakes, assumes or accepts any duty of care to you, or to anyone else, to keep you safe, to protect you from harm, to summon help, to monitor you, to respond to you, or to intervene in any situation. No such duty is created by your installing the app, by paying for it, by enabling any feature, by adding an emergency contact, or by anything said in the app, on the store listing, or anywhere else.
We supply a piece of software. We do not supply safety, protection, supervision, rescue, or a service of any kind that a person could be relied on to perform. Nobody is watching. Nobody is on call. No Protected Person becomes responsible for your safety by making this app available to you, and none of them takes on the role of a guardian, a monitoring service, a security provider, an emergency responder, or an adviser.
You are not relying on any Protected Person for your safety. You confirm that you have your own safety planning, that you know how to contact emergency services directly, and that you are choosing to use this app as one optional aid alongside those things — not in place of them.
We accept no responsibility for the accuracy or completeness of anything the app reports, and no Protected Person assumes responsibility for any decision you make in reliance on it.
To the fullest extent permitted by applicable law, you waive, release and forever discharge every Protected Person — as defined in section 2.1, and including the company, its owners and shareholders, its directors and officers, its employees, and the individual developers of this app personally — from any and all claims, demands, damages, actions, causes of action, losses, costs and expenses of any kind, whether brought against the company or against any of those people personally, arising out of or relating to:
and you agree that you use this app entirely at your own risk.
This waiver is given separately in favour of each Protected Person, so that if it is unenforceable in respect of one of them it remains fully effective in respect of the others.
An alert from this app can result in other people learning something, arriving somewhere, or acting. What any of them then does is entirely outside our knowledge and our control.
To the fullest extent permitted by applicable law, you waive and release every Protected Person from any claim arising out of or relating to the involvement of any person or body other than us, including without limitation:
We do not contact anyone. We are not told when you do. Where the app causes a message to be sent or a dialer to be opened, that is you using your own phone and your own carrier. No Protected Person is a participant in, or a party to, anything that follows.
No reliance. You confirm that in deciding to install and use this app you have not relied on any statement, representation, assurance, promise, demonstration, review, screenshot or marketing material other than these terms. These terms and the Privacy Policy are the entire agreement between you and the Protected Persons about this app.
Time limit. To the fullest extent permitted by applicable law, any claim you wish to bring arising out of or relating to this app must be brought within one year of the date on which the event giving rise to it occurred, and any claim brought after that is permanently barred. Where the law where you live does not permit a limitation period to be shortened by agreement, this paragraph does not apply to you and the statutory period applies instead.
To the fullest extent permitted by applicable law, no Protected Person — including the company, its owners, its directors and officers, its employees, and the individual developers of this app personally — will be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, data, goodwill, or opportunity, arising out of or relating to the app, however caused and on any theory of liability, whether in contract, tort (including negligence), strict liability or otherwise, and whether or not we were advised of the possibility of such damages.
To the fullest extent permitted by applicable law, the total aggregate liability of all Protected Persons combined, arising out of or relating to the app and these terms, is limited to the greater of:
a. the total amount you actually paid us for the app in the twelve months before the event giving rise to the claim; or
b. CAD $50.00.
That is a single combined cap across every Protected Person, not a separate cap for each — you may not recover the cap more than once by suing several of them. It applies to every claim in aggregate, not to each claim separately, and survives any failure of essential purpose of any limited remedy.
No claim may be brought against an individual — an owner, director, officer, employee, contractor or developer — that could not be brought against Aeon Frost Capsule Corp itself under these terms. Suing a person rather than the company does not create a liability that these terms otherwise exclude or limit.
Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited, by any Protected Person. In particular, and without limiting the generality of that statement, nothing in these terms excludes or limits liability for:
Why this section is here. Some of the limits above go as far as the law allows, and in some countries the law allows less than in others. This section says so openly rather than pretending otherwise. Where a limit above is not permitted where you live, it does not apply to you, and the rest of these terms still stand.
You agree to indemnify, defend and hold harmless every Protected Person — the company, its owners and shareholders, its directors and officers, its employees, the individual developers of this app, and its contractors and agents, each personally — from any claim, demand, loss, liability, damage, cost or expense (including reasonable legal fees and the cost of defending a claim) brought by any third party and arising out of or relating to:
This applies whether the claim is brought against the company or against any Protected Person personally.
This does not apply to the extent the claim arises from that Protected Person's own negligence or wilful misconduct, or where applicable consumer law prohibits such an indemnity.
Severability. If any provision of these terms is held unenforceable, it is to be modified to the minimum extent necessary to make it enforceable, or if it cannot be, severed. The remaining provisions stay in full force.
Governing law. These terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable in it, without regard to conflict-of-laws rules.
Forum. The courts of Ontario have jurisdiction, except that nothing in this section deprives you of the protection of any mandatory consumer-protection law of your own country of residence, or of your right to bring proceedings in the courts of that country where the law of that country gives you that right.
Changes. We may update these terms. Material changes will be notified in the app before they take effect. Continuing to use the app after that is acceptance.
If anything in these terms is unclear, ask before you rely on the app.
Aeon Frost Capsule Corp
Guelph, Ontario, Canada
These terms and the Privacy Policy together are the complete agreement between you and Aeon Frost Capsule Corp about this app, and they replace anything said elsewhere.