Updated 3 November 2026. This page describes the THAMO trial, not the separate AGLO browser service.
Registration uses your Bangladesh phone number and a one-time SMS code. Local messaging, call features and app checks need the applicable Android role or permission. Cloud storage is configured in My → Protection & cloud choices.
When enabled, THAMO uploads eligible message text and metadata, call-number/direction/time/duration records, and installed-app metadata including package, version, signing-certificate hashes, install source, permissions and available APK hashes. Call audio and original APK files are not uploaded by app scanning. Authentication messages detected as containing actual OTPs or credentials are excluded from message synchronization; detection is not perfect.
The backend stores these security records in a dedicated MySQL database for protection history, detection, troubleshooting and authorized security analysis. These THAMO record tables are not individually application-encrypted at rest. HTTPS protects transfer; administration is authenticated and audited. Security data is separate from lending, advertising and marketing.
Automatic AI is a separate choice. For eligible ambiguous messages, processed text and link clues may be sent from our server to configured Google Gemini services. Automatic text preprocessing removes detected numbers and credential fragments. If you explicitly submit a screenshot report, its image pixels may be sent for AI analysis; automatic image redaction is not claimed. Avoid submitting secrets or other people's private information.
Synced records and reports expire through maintenance after approximately 180 days. Screenshot attachments expire after 30 days and audit events after 365 days. Deletion and stopping future collection are separate: changing a cloud choice stops future uploads for that category; use the account deletion controls to request removal of the account and associated data. Operational backup copies expire separately under backup rotation.
Public threat definitions may be downloaded without uploading message content. Reports are treated as leads, not automatically published accusations. Official identity matches and AI output never guarantee safety.
No third-party advertising SDK is used in this build. The opening THAMO safety message does not use customer records for targeting. The trial is not yet a Play-approved release.