[School]

I assume you've either exploited a vulnerability to allow access to the target device without permission, or you've established a connection as a trusted device/pairing thereby allowing the exchange of data between both devices.

Would this be correct?

How would one gain access to a android phone if bluetooth is on