Frequently Asked Questions

A SaferPhone is a Google Pixel that we flash with GrapheneOS — an open-source, privacy- and security-focused Android operating system. All Google services, tracking and telemetry components are completely removed. Instead of Google Play Services, you use privacy-friendly alternatives such as the Aurora Store and F-Droid. The device works like a normal smartphone, but sends no data to Google or other data brokers.

Yes. The physical removal is an optional add-on that you can select during the ordering process and that our technician carries out before shipping. Unlike software solutions or adhesive tape, this modification cannot be undone afterwards. Before you confirm your selection during the ordering process, we point this out to you explicitly once more.

No. The 24-month statutory warranty remains fully intact. We are your point of contact for any hardware or software problems with the device.

Most apps can be downloaded anonymously via the pre-installed Aurora Store — entirely without a Google account. You can also find open-source apps through F-Droid. Individual apps with a strict Google Play Integrity check (e.g. some banking or streaming apps) may have limitations. If you are unsure, our support team is happy to help you before you buy.

GrapheneOS delivers monthly security updates that are cryptographically signed and installed automatically. Update support depends on the particular Pixel model and lasts several years depending on the device — you can find the exact duration in the product description of the respective model.

Many banking apps work without any problems, since we only remove Google services, not the apps themselves. Apps with a strict root or Play Integrity check may cause problems in individual cases. Feel free to ask us before you buy via our contact form if you would like us to check a particular app.

WhatsApp can be installed via the Aurora Store and works flawlessly from a technical standpoint. Since WhatsApp itself collects extensive metadata, we recommend the pre-installed Signal for genuine privacy.

GrapheneOS separates apps from one another in isolated user profiles. Even if an app is compromised or contains malware, its access to other apps and the rest of your data remains blocked.

No, the MullVad no-log VPN (365 days) is an optional add-on that you can add during the ordering process for an extra charge — it is not automatically included in the base price.

Standard shipping takes 3–5 business days, express shipping 1–2 business days. After dispatch, you automatically receive a tracking number by email. Each device is also shipped with an individual, tamper-proof seal, so that any unauthorized access during transport would be noticeable.

Every SaferPhone is fitted with an individual, tamper-proof seal before shipping. This seal cannot be removed without leaving traces or replaced unnoticed — any attempt to open the packaging during transport therefore remains visible. Check the seal on receipt before opening the packaging, and contact our support immediately if you notice anything unusual.

You can pay by cryptocurrency (including Bitcoin, Ethereum, USDT, Monero) or by advance payment (a classic bank transfer). For advance payment, we send you our bank details by email after your order; shipping takes place once payment has been received.

That depends on whether you chose a hardware modification. Without a physical modification (GrapheneOS setup only), the statutory 14-day right of withdrawal applies, provided the device is returned unused, in its original packaging and without signs of use. If a physical modification such as the removal of the camera, microphone or speaker was carried out, it counts as a custom-made item — for which there is no right of withdrawal. The 24-month statutory warranty for defects applies in every case regardless.

Yes, our support team is happy to help you transfer contacts, calendars and photos to your new device in a privacy-compliant way. Simply contact us after your purchase.

Yes. In your customer account, you can permanently delete your account at any time under “Settings”. Personal data such as sessions, addresses and your wish list are removed immediately; order data is retained in anonymized form due to statutory retention obligations.

For larger quantities, feel free to get in touch via our contact form — we will prepare an individual quote for you.

We rely on GrapheneOS — one of the most hardened privacy-focused Android operating systems currently available. GrapheneOS was developed for Google Pixel devices and offers additional security through a hardened kernel, application sandboxing and the complete removal of all Google services. We install and configure it with our privacy presets, so that your device is ready to use right away.

Chat Control is a regulation being discussed in the EU for the automated scanning of messages. The version currently in force only affects unencrypted communication — if you use end-to-end encrypted services such as Signal or Threema, you are not affected by it. You can read more about this in our detailed Chat Control guide.

A SaferPhone does not automatically make you immune to a future change in the law — a scanning obligation would apply to the individual app, not to the operating system. However, it gives you the free choice to use exclusively trustworthy, end-to-end encrypted apps such as Signal, without being restricted by a closed Google ecosystem.

Yes, optionally, since recently. Void can reach our server through an onion service. The decisive difference: on the normal route we do not store your IP address — over Tor we never get to see it in the first place. A promise becomes a property. Using Tor is voluntary; if you do not, you connect exactly as before.

The connection gets somewhat slower because it travels through several relays — while writing and receiving you will hardly notice, when sending large files you will. In return, neither your internet provider sees that you are connecting to us, nor do we see where you are coming from. Your messages are end-to-end encrypted and deleted after 24 hours either way; Tor additionally protects the route.