This is the screen shown before a device attests for the first time. It is written for someone doing us a favour rather than for someone evaluating a vendor, so it is kept plain. The full Privacy Policy at svnkg.com/privacy covers the same ground in more detail.
Before you attest this device
This app asks your phone’s security hardware to produce a signed statement about itself, and sends that statement to SEVEN KG to be checked.
It is a bit like your phone showing an ID card that the manufacturer signed. We check the signature and the contents, and record the result.
Accounts are optional
You can use this app without an account. The app does not ask for your name, email address, phone number or a password, and it has nowhere to put them.
If you choose to claim this device, you link it to a SEVEN KG account you already have: you get a code on your account page at svnkg.com/account and type it into the DEVICE tab. From then on our record of this device is connected to that account, which holds the email address you sign in with. The app shows that address back to you partly hidden (for example j••••••n@example.com) so you can check it went to the right account. You can release the device from your account page at any time, which removes the link.
Your device also sends a label made from its model name and a random suffix, for example SM-S908U-2748d644. You do not choose it, and it contains nothing about you.
What gets sent
- A certificate from your phone’s secure hardware, signed by Google. It describes the phone: whether the bootloader is locked, whether Android is the manufacturer’s official build, what security patch level it reports, and what type of secure chip signed the statement.
- A signature over a random number our server just generated. This proves the statement was made right now and was not copied from another phone.
- A second hardware key, so that when you attest again we can tell it is the same phone rather than a new one.
- The device label, and how much work the device is offering to do.
- If you claim the device: the one-time code you typed.
What does not get sent
The app cannot see and never sends:
- your location
- your contacts
- your photos, files or messages
- your call or browsing history
- the list of apps you have installed
- your microphone or camera
The only permission this app asks for is internet access.
How long we keep it
We keep only the most recent statement your phone made. Every time you attest, the new statement replaces the old one. We do not build up a history of your device over time.
Refusals work differently. If your phone is turned away, we keep a separate note about it, and those notes add up: ten refusals mean ten notes. They are deleted after 30 days, and that deletion runs: our server clears the expired notes when it starts and on a timer after that. The schedule at svnkg.com/what-we-keep lists it.
If you stop using the app, that last statement stays until you ask us to delete it. Uninstalling does not delete it, because we have no way of knowing you uninstalled.
The part you should understand before agreeing
Your phone’s certificate contains a permanent identifier — a number unique to your phone’s security chip that does not change, even if you factory-reset the phone.
SEVEN KG does not keep that number in readable form. It is scrambled with a secret key held on our server before it is stored, so anyone who stole our database would get something they cannot unscramble or look up.
SEVEN KG holds the secret key, so we can always tell that it is your phone again. That is how the system knows your phone from someone else’s. This is not anonymity. It means a thief who takes our database learns nothing useful from it.
What you get, and what you owe
We are not asking anything of you beyond letting your phone make this statement. You are not agreeing to run anyone’s work on your phone, to leave the app installed, or to keep taking part. You can stop at any time and you do not need to tell us why.
There is no payment attached to this. If that ever changes, we will ask you again rather than assume.
If your phone cannot do it
Some phones cannot produce this kind of signed statement — an older device, an unlocked bootloader, a custom build of Android. If yours cannot, the app will tell you so and record that fact and a short reason. We do not try to identify the phone some other way instead. A device that cannot prove itself stays unproven, which is still an answer.
What that note contains depends on how far your phone got.
Turned away early, before your phone identified itself: the note describes the kind of hardware and not your phone. Who made the security chip, what model and firmware it reports, which certificate authority issued it, and why we said no. Two identical laptops produce two identical notes, and there is nothing in either one that points back to a machine.
Turned away later, after your phone had identified itself: the note also contains the scrambled identifier described, so repeated refusals from one phone can be recognized as one phone. We keep that deliberately, because a check that fails the same way on the same device twenty times is a different finding from twenty devices failing once.
We use refusal notes for one purpose: research and development — finding where our own checks might be wrong, and publishing what we learn about hardware. We do not sell you data.
Deleting your records
Write to privacy@svnkg.com and tell us which device. You do not need to give a reason and we will not ask for one. We will confirm when it is done, within 30 days.
An unclaimed device is not linked to anyone, so we cannot look it up from your name or email. Tell us the device label the app shows you. If you claimed the device, write from the email address on that account, or release the device yourself on your account page.
Who we are
SEVEN KG LLC, a limited liability company registered in Kansas, United States, Business ID 10090770.
4601 E. Douglas STE 150, Wichita, Kansas 67218, United States · privacy@svnkg.com
Our verification server is in Germany. Unless you are there, the statement your device makes is checked in a country other than your own.
Your rights
We rely on your agreement to this notice as our basis for processing, and this device keeps a record that you gave it.
Wherever you live, you have the right to be told what we do with your information, to see what we hold, to have it corrected, to object, and to have it deleted. Write to privacy@svnkg.com.
Your country may also give you further rights and a regulator you can complain to. The Privacy Policy names the authorities that apply and is kept current.
The full version
This is the plain summary. The complete Privacy Policy is at svnkg.com/privacy and covers the same ground in more detail, including the things we deliberately do not promise.