Terms of Service & Privacy Policy

Terms of Service

1. Acceptance of Terms

By accessing or using DroidMDM (“the Service”), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use the Service.

2. Use of the Service

You agree to use the Service only for lawful purposes and in accordance with these Terms. You must not:

• Use the Service in any way that violates applicable laws or regulations
• Attempt to gain unauthorised access to any part of the Service
• Use the device management capabilities to monitor, control, or remotely wipe devices without the knowledge and consent of the device users
• Deploy the Service on devices you do not own or have authorisation to manage
• Transmit malicious software, harmful content, or unauthorised applications to enrolled devices
• Use kiosk mode, app restrictions, or hardware lockdown features to trap or deceive device users
• Push WiFi credentials or system configurations to devices outside your organisation’s authorised infrastructure
• Impersonate any person or entity or misrepresent your affiliation

3. Accounts

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account, including all device enrollments and configuration changes made through your dashboard. Notify us immediately of any unauthorised use.

4. Device Management Responsibilities

You are solely responsible for the devices you enrol and the configurations, applications, and files you push to them. DroidMDM provides the infrastructure to manage devices — you retain full responsibility for ensuring that your use of those capabilities complies with applicable employment laws, privacy regulations, and any agreements with your device users.

The Service includes powerful remote capabilities such as:

• Remotely rebooting or factory resetting enrolled devices
• Remotely locking and unlocking device screens
• Installing, uninstalling, or clearing data for applications
• Enforcing kiosk mode, single-app lock, or URL lock
• Restricting or enabling hardware features (GPS, Bluetooth, WiFi, mobile data)
• Provisioning WiFi networks with credentials onto enrolled devices
• Controlling system update behaviour and screen orientation

These actions may have irreversible consequences (such as factory reset erasing all device data). You are solely responsible for any action triggered from your dashboard.

5. Intellectual Property

The Service and its original content, features, and functionality are and will remain the exclusive property of DroidMDM. Our trademarks and trade dress may not be used without prior written permission.

6. Subscription and Billing

Paid plans are billed monthly through our payment processor, Polar. You may upgrade or downgrade your plan at any time. Downgrades take effect at the end of the current billing period. We do not offer refunds for partial months. If payment fails, your account may be downgraded to the free tier.

7. Termination

We may terminate or suspend your access to the Service immediately, without prior notice, for any breach of these Terms. Upon termination, your right to use the Service ceases immediately and enrolled devices will no longer receive configuration updates.

8. Limitation of Liability

To the fullest extent permitted by law, DroidMDM shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of, or inability to use, the Service, including any loss of data on managed devices or unintended effects of pushed configurations.

9. Changes to Terms

We reserve the right to modify these terms at any time. We will notify users of material changes via email. Your continued use of the Service after notification constitutes acceptance of the updated terms.

Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Email address (when you sign up or sign in)
• Files and APKs you upload to the Service
• Communications you send us (e.g. support or feedback)
• Usage data to improve the Service

We also collect telemetry reported by the DroidMDM launcher installed on enrolled devices, including:

• Hardware identifiers: device model, assigned device ID
• Battery level and charging state
• Memory usage (total and available storage)
• GPS coordinates, altitude, speed, and heading (if location reporting is enabled)
• WiFi network name (SSID), signal strength, security type, and IP address
• Mobile carrier name, IMSI (SIM identifier), phone number, signal strength, and data state (SIM 1 & SIM 2 where applicable)
• Device IP address, Bluetooth state, USB storage state, keyguard state, and ring volume
• Network data usage (bytes transmitted and received)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Deliver device configurations, apps, and files to enrolled devices
• Send transactional emails (e.g. magic links, receipts)
• Respond to support requests and enquiries
• Detect and prevent fraudulent or abusive activity

3. Device Data

Device telemetry is reported by the DroidMDM launcher installed on enrolled devices and stored in your account. Location reporting and other sensitive telemetry (e.g. GPS coordinates, SIM/carrier details) are configurable per device group — you control which data points your devices report. We do not access or use device telemetry beyond displaying it in your dashboard and making it available via the API. Sensitive identifiers such as IMSI and phone number are stored only in your account and are never shared with or used by DroidMDM for any purpose other than presenting them to you.

4. Data Sharing

We do not sell your personal data. We share data with the following third-party providers solely to operate the Service: Backblaze B2 (file storage), MongoDB Atlas (database), Polar (billing), and Google Firebase (push notifications). Each provider is bound by their own data processing agreements.

5. Data Retention

We retain your account data for as long as your account is active. Uploaded files and APKs are retained until you delete them. You may request deletion of your account and all associated data at any time by contacting us.

6. Cookies

We use session cookies to keep you signed in. No third-party advertising or tracking cookies are used. You can control cookies through your browser settings, though disabling them may prevent sign-in.

7. Security

Files and APKs are stored in Backblaze B2 with server-side encryption. All communication between devices and our servers uses TLS. We implement industry-standard security practices throughout the Service. No method of transmission over the internet is 100% secure.

8. Your Rights

Any user can request to access, correct, delete, or export their personal data at any time. Contact us at the address below and we will fulfil your request within 30 days.

9. Contact

If you have questions about these policies, please contact us at [email protected].