ShieldOne is five privacy tools in one app, and every one of them runs entirely on your phone. There is no account, no server, and nothing to sign up for.

SECURITY SCAN
Checks every installed app against a name list, a behaviour engine, offline
signatures and a public malware corpus. Choose Quick, Deep, Offline or build
your own scan: switch individual checks on and off and the app tells you exactly what each one will do before it runs.

ANTI-SPY
Most monitoring apps are not malware. They are ordinary apps holding an
extraordinary amount of access — accessibility, notification access, device
admin, usage stats — and a signature scanner walks straight past them.
ShieldOne scores behaviour across five layers and shows you every piece of
evidence in plain English, so you can judge it yourself instead of trusting a
verdict.

PERMISSION WATCH
Tells you the moment an app gains one of the sensitive permissions, and when the camera or microphone is switched on. It is honest about what Android can and cannot tell it: camera and microphone use is reported live, attribution is labelled "most likely", and it says "unknown app" rather than guessing.

PHOTO VAULT
Photos are encrypted with AES-256-GCM under a key your PIN unlocks, tied to this device's hardware keystore. Adding a photo is a move, not a copy: it is
encrypted, checked that it can be read back, and only then are you asked to
confirm removing the original from your gallery.

CLEANER
Duplicate photos by content and by appearance — it catches copies that were recompressed, resized or saved again, not just byte-identical files. Three sensitivity levels, from identical-only to burst shots and retakes. Plus
duplicate files, large files by category, and apps you have stopped opening.

APP LOCK
A PIN in front of the apps you choose, with an optional photo of whoever gets it wrong three times. Uses usage access rather than an accessibility service — deliberately, because accessibility access is the strongest signal of monitoring software, and this app is not going to warn you about a permission and then ask you for it.

WHAT LEAVES YOUR PHONE
Three things, all optional, all switchable off:
• A file fingerprint (SHA-256) sent to a public malware corpus, only for apps
nothing on the phone recognised. Never the file itself.
• A download of a public stalkerware-indicator list. Nothing about your phone is sent.
• The ads that keep the app free.

Your scan results, your vault, your PIN and your access log never leave the
device, and are excluded from cloud backup and device transfer.