CatWatchful reviews

The June 2025 data breach

On 9 June 2025 CatWatchful suffered a data breach. A SQL injection vulnerability allowed customer email addresses and passwords — stored in plain text — to be extracted from our systems.

Have I Been Pwned recorded the incident on 3 July 2025, covering 61,641 accounts, and classified it as a sensitive breach: you can only look it up by verifying you own that email address. TechCrunch and Malwarebytes, among others, reported on it at the time.

There is no elegant way to say this: those passwords should never have been stored in plain text, and that query should never have been reachable without authentication. If you had an account before July 2025, change that password — and change it anywhere else you reused it.

Who writes the reviews that rank first

Several of the best-ranking pages for "CatWatchful review" belong to companies that sell competing monitoring apps, and they close by recommending their own product. We are not saying they are lying: we are saying it is worth knowing who signs a review and what they sell at the end of it.

One checkable detail: those same reviews criticise us for not being stealthy enough, and for antivirus software detecting the app. That is a criticism we are happy to accept, because it describes exactly where we moved the product.

"Antivirus software detects it"

True, and it is worth saying where it comes from. In general, antivirus products classify monitoring apps by category, not because they found a vulnerability in them. In our case there is also a concrete, public fact: in June and July 2025, as a result of the breach, Google flagged the domain in Safe Browsing and added a specific Play Protect detection for CatWatchful and its installer. A warning does not mean the phone is infected: it means the system recognises what kind of app this is — and, in our case, that it knows it by name.

A competitor frames this as a flaw: being detectable would let "the phone's owner realise". For a supervision tool agreed with a child, the system recognising it is the correct behaviour, not a defect.

Why it isn't on Google Play

It isn't, which is why it installs as an APK from our own site. Google's policy on third-party monitoring apps affects the whole category, not only us.

One important point: we do not ask you to turn Play Protect off permanently, and you should distrust any guide that does. Several pages ranking for "catwatchful apk" give that instruction — and they also distribute binaries that are not ours: one of the most visible aggregators serves a build from March 2021.

Claims still circulating that are no longer true

Several reviews date from 2021 and 2022 and are still indexed. Three concrete corrections: CatWatchful does not need root; it does not monitor "only two social networks" but WhatsApp, Instagram, Facebook, Snapchat, Telegram, Tinder, Line, Viber, WeChat, Kik and Skype; and the prices quoted in those texts belong to a discontinued tariff.

The current plans, with the real features each one includes, are published and dated.

"Is it legal to use?"

It is the most common question, and the answer depends on who you supervise and in which country. With a minor in your care, the law generally recognises a duty to supervise. With an adult — including your own child from 18 — monitoring without their consent is a crime in almost every country.

We publish country-by-country guides with the applicable articles and a link to the official source, rather than a generic answer.

How to verify us

There are few independent customer reviews today, and we would rather say so than manufacture social proof: we publish no score of our own and no star average, because we would have no way to back it up.

If you are a customer, the place to leave your opinion — good or with something to improve — is our Trustpilot profile, where we cannot edit or delete it.