GuardSphere Device Agent

GuardSphere Technologies Inc.

About this app

GuardSphere Device Agent uses Android's AccessibilityService API to provide administrator-configured app and website access controls on enrolled Android devices. Enrollment with an authorized GuardSphere organization is required.

USE OF THE ACCESSIBILITYSERVICE API
With your consent, GuardSphere observes the foreground app or package name and reads supported browsers' visible address information to identify the website or domain being used. This enables its core app-blocking and website-blocking features.

When activity matches an administrator-configured restriction, GuardSphere may show a blocked-access screen, navigate Back or Home, or move a supported browser to a blank page to leave the restricted content. These actions apply configured access rules and schedules.

GuardSphere may collect and send foreground app names, identified websites or domains, and related activity to GuardSphere for access-policy evaluation, enforcement, security, device management and activity reporting to your authorized administrator. Activity is associated with the enrolled device's GuardSphere identifier and, when a managed person is signed in, that person's GuardSphere login, managed-person or session identifiers.

A separate in-app disclosure explains Accessibility data access and use before opening Android's Accessibility settings. You choose whether to enable the service. If Accessibility is disabled, features that depend on it are unavailable. GuardSphere is not an accessibility tool for people with disabilities. It does not use Accessibility to read passwords, enter text, send messages, make purchases or perform unrelated actions.

DEVICE MANAGEMENT AND APP INVENTORY
GuardSphere helps organizations manage enrolled devices used by employees and authorized workers. Your administrator configures app, category and website access rules, schedules, and handling of unknown apps. Person login is optional; device management and device-level reporting can operate without a signed-in person.

GuardSphere inventories installed apps, including apps without a launcher icon, for software review, managed-app policies and authorized reporting. This inventory is not used for advertising or sale.

On supported fully managed devices, GuardSphere can use Android app-suspension controls and reconcile changes when apps are installed or updated. On standard enrollment, Accessibility can restrict observed foreground app use; it does not grant authority to suspend arbitrary apps or prevent all background execution. Capabilities depend on enrollment mode, Android version, device settings and enabled permissions. Protection status and ongoing notifications make monitoring visible. Cached accepted policies support offline evaluation.

VPN AND LOCATION
With your consent, Android VpnService supports domain-policy enforcement and network/domain-activity reporting to GuardSphere and your authorized administrator. This is not a general-purpose privacy VPN. Coverage depends on device settings, supported protocols and identifiable traffic.

With disclosed location permissions, the enrolled device can report location, including in the background, for organization-configured location history and geofence monitoring. Location, VPN and Accessibility have separate in-app disclosures and Android permission controls.

Privacy policy: https://guardsphere.app/privacy
Data deletion requests: https://guardsphere.app/data-deletion

What’s new

Improved app and website policy enforcement, schedules and reporting for enrolled Android devices. Added clearer optional location choices, Google Maps disclosure and consent controls. Improved offline reporting replay, protection monitoring and recovery, and privacy-screen responsiveness. Updated GuardSphere branding and permission guidance. Fully managed controls require supported device-owner setup.