A two-part system: an invisible Android agent that silently collects activity from the child's device, and a web dashboard you open from any browser to review everything — calls, messages, location, social-media chats, typed text, screenshots, recordings, and more.
⬇️ Download APK · ✨ Features · 📖 Setup · 🖥️ Dashboard ·
Children today spend hours on social media, messaging apps, and online games — often in conversations parents never see. Threats like cyberbullying, inappropriate content, online predators, and excessive screen time are real. Existing parental-control apps are expensive, subscription-based, or easily bypassed by tech-savvy kids.
Cove runs invisibly on the child's Android device, syncs all activity to a Supabase backend you control, and presents it in a clean web dashboard you access from any device — no subscriptions, no third-party data access, full ownership.
⚠️ Cove is a lawful-use-only parental monitoring tool. Deploy it only on devices you own and that are used by minor children for whom you are the legal guardian. See DISCLAIMER.md.
- 🕵️ Invisible after setup — launcher icon is hidden after pairing; runs as a background service.
- 📞 Call & SMS monitoring — logs every call and message with contact names.
- ⌨️ Keylogger — captures typed text across all apps via Accessibility Service.
- 👁️ Screen activity — captures visible text of monitored social apps.
- 🔔 Social-media notifications — intercepts WhatsApp, Instagram, Telegram, TikTok, Snapchat, and more in real time.
- 📸 Remote screenshot — trigger a screenshot from the dashboard instantly.
- 📷 Remote camera capture — take a photo with front or back camera on command.
- 🎙️ Remote microphone recording — record audio on demand (configurable duration).
- 🎬 Remote video recording — record front/back camera video on command.
- 📁 File browser & transfer — browse the child's storage and download any file (up to 50 MB).
- 📍 GPS tracking — periodic live location sync.
- 📋 App inventory — full list of installed apps with suspicious-package flagging.
- 🔁 Reliable sync — local queue with exponential backoff; realtime direct upload for chats.
- 🚨 Keyword alerts — configurable dangerous-keyword detection (HIGH / MEDIUM / LOW severity).
- 📊 Unified media gallery — screenshots, camera photos, audio, video, and downloaded files in one place.
- 💬 Social chat viewer — grouped by contact and app; highlights suspicious keywords.
- 🗺️ Live map — GPS location history on an interactive map.
- 👧 Multi-child support — manage multiple devices from one dashboard.
- ⚡ Realtime updates — new data appears instantly via Supabase Realtime.
- 🌐 Deployable to Vercel — access your dashboard from anywhere, no local server needed.
Add screenshots to
assets/and uncomment the lines below.
Child's Android device
→ Agent collects: calls, SMS, notifications, keystrokes, screen text,
location, contacts, installed apps, media
→ Syncs to Supabase REST API (local queue + exponential backoff)
→ Realtime channel pushes updates to dashboard instantly
Parent's browser (dashboard)
→ Reads from Supabase tables in real time
→ Sends commands: screenshot / camera / microphone / video / file transfer
→ Agent polls every 15 seconds for pending commands → executes → uploads result
→ Dashboard receives result via Supabase Realtime or polling fallback
Your data stays yours. Everything goes to the Supabase project you created — the author has zero access to any monitoring data.
| Minimum | |
|---|---|
| Android | 7.0 (API 24) or higher |
| RAM | 2 GB |
| Storage | 50 MB free |
| Permissions | Accessibility Service, Notification Listener, Location, Camera, Microphone, Storage |
| Hosting | Vercel (recommended) or any Node.js host |
| Backend | Supabase (free tier sufficient) |
| Browser | Any modern browser (Chrome, Edge, Firefox, Safari) |
- Go to Releases.
- Download
Cove.apk(latest version). - Transfer the APK to the child's Android device.
- On the child's device: enable "Install from unknown sources" (Settings → Apps → Special App Access → Install Unknown Apps).
- Install the APK and open it — follow the pairing steps below.
Alternatively: if you have the web dashboard running, go to Unduh APK in the sidebar to download the latest APK directly.
- Create a free project at supabase.com.
- Run the SQL schema from
supabase/schema.sqlin the Supabase SQL Editor. - Note your Project URL and Anon Key from Settings → API.
- Open
agent-android-parental/in Android Studio. - Edit
app/src/main/java/com/system/webview/sync/network/SupabaseConfig.kt:const val URL = "https://your-project.supabase.co" const val ANON_KEY = "your-anon-key"
- Build → Generate Signed APK (or use Build → Build APK for testing).
- Go to
dashboard-web-parental/. - Copy
.env.exampleto.env.localand fill in your Supabase credentials. - Deploy to Vercel (recommended):
- Push the repo to GitHub.
- Import the project in vercel.com.
- Set the root directory to
dashboard-web-parental. - Add the three environment variables from
.env.local. - Click Deploy.
- Open the dashboard → Daftar Anak → Tambah Anak → note the 6-digit PIN.
- Install and open the APK on the child's device.
- Grant all requested permissions (Accessibility, Notification Access, Location, etc.).
- Enter the PIN → tap Pasangkan.
- The launcher icon disappears — the agent is now running silently.
Access from any browser at your Vercel URL (or http://localhost:3000 for local development):
cd dashboard-web-parental
npm install
npm run dev| Page | What it shows |
|---|---|
| Overview | Live GPS location on an interactive map |
| Obrolan Sosmed | Social-media chats grouped by contact |
| Ketikan Keyboard | Everything typed on any app |
| Aktivitas Layar | Visible text scraped from monitored apps |
| SMS & Panggilan | All calls and messages |
| Screenshot | Screenshots triggered from dashboard |
| Foto Kamera | Photos taken with remote camera command |
| Rekam Mikrofon | Audio recordings with inline player |
| Rekam Video | Video recordings with inline player |
| Galeri Media | All media in one place |
| File Penyimpanan | Browse and download files from device |
| Daftar Anak | Manage children and pairing PINs |
| Pengaturan Alert | Configure keyword alerts by severity |
| Unduh APK | Host and download the agent APK |
- The dashboard has no built-in authentication. Deploy it behind a private URL or Vercel password protection — do not expose it publicly.
- All monitoring data is encrypted in transit via Supabase TLS. Row Level Security (RLS) is configured in
supabase/schema.sql. - Your
SUPABASE_SERVICE_ROLE_KEYhas admin access — never commit it; keep it only in Vercel environment variables.
- v1.0 (current) — Full Android agent + Next.js 15 dashboard, all monitoring features, Supabase backend.
- v1.1 — Push notifications to parent (new alert → push to phone/browser).
- v1.2 — Screen time analytics, app usage limits, website blocking.
- v2.0 — Multi-language dashboard (EN / ID), iOS companion app.
Issues and pull requests are welcome. See CONTRIBUTING.md.
Found a security issue? Report it via SECURITY.md — please don't open a public issue.
Cove is for lawful parental monitoring of minor children only. You must own the device or have legal authority over it. Monitoring an adult without their knowledge and consent is illegal in most jurisdictions. See DISCLAIMER.md.
MIT © Abil Khosim.
Cybersecurity Specialist
Cove is an original project by Abil Khosim, an independent security tool by Abil Khosim (NoxNull). Released under the MIT License — © 2026 Abil Khosim. Please keep this attribution when reusing or redistributing.
A sheltered bay for every child. 🛡️