PRIVACY POLICY

Malware Detector — Android Security Application

Effective Date: September 29, 2026

Malware Detector ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our application collects, uses, and discloses information when you use our mobile application (the "App").

1. Information We Collect

To provide security and malware scanning functionality—including ML-based APK analysis and real-time Ransomware Shield monitoring—the App may process the following information:

• Installed Application Information: The App scans the list of installed applications on your device strictly to detect potential malware, security threats, or vulnerabilities using permission analysis and machine learning classification.

• APK Scan Data: If you scan an APK file, we temporarily process its metadata (such as permissions, manifest data, and API call patterns) locally on your device or via your configured ML backend. No raw APK file content is transmitted to external commercial servers.

• File System Metadata (Ransomware Shield): When the Ransomware Shield is enabled, the App monitors file I/O patterns (rename, delete, and write events) in accessible directories (such as Downloads, Documents, and Pictures). File contents are never read or stored; only file paths and event timestamps are used to detect potential ransomware behavior.

• Device Information: We may collect basic non-personally identifiable technical information, such as device model, OS version, and system language, solely for debugging and performance optimization.

• Log Data: Technical diagnostic data (such as crash logs) may be collected in the event of an unexpected application error to help us improve stability and reliability.

2. How We Use Your Information

We use the information collected exclusively for the following purposes:

• To scan, identify, and report potential malware or suspicious applications on your device.

• To monitor file system activity in real-time and detect ransomware-like behavior before it spreads.

• To generate local threat reports, including affected files, trigger types, and threat severity levels.

• To improve overall app security, performance, and user experience.

• To diagnose and fix bugs, crashes, and performance bottlenecks.

Note: We do not sell, rent, or trade your personal data, device scan results, or ransomware threat logs to any third party for marketing or advertising purposes.

3. Permissions Required

To perform its core malware detection and ransomware monitoring features, the App may request the following system permissions:

• QUERY_ALL_PACKAGES: Necessary to examine installed applications for security threats and ML-based malware classification.

• READ_EXTERNAL_STORAGE / READ_MEDIA_IMAGES: Required to access file metadata in external storage directories for ransomware monitoring and APK file scanning. File contents are never read.

• FOREGROUND_SERVICE / FOREGROUND_SERVICE_DATA_SYNC: Required to run the Ransomware Shield as a persistent background service when enabled by the user.

• POST_NOTIFICATIONS: Required to deliver push notifications when ransomware behavior is detected, enabling you to respond immediately.

• INTERNET: Used strictly to communicate with your self-hosted ML backend server for advanced APK analysis. No personal data is sent to external commercial servers.

Permissions are requested only when needed, and you can manage or revoke them at any time through your device settings: Settings → Apps → Malware Detector → Permissions.

4. Data Sharing and Disclosure

We do not share your private data with third parties except in the following limited circumstances:

• Self-Hosted ML Backend: If you configure a custom backend URL (e.g., [http://192.168.](http://192.168.)x.x:8000), the App sends APK metadata (such as the permissions list and package name) to that server for ML analysis. This is a server entirely controlled by you, and we have no access to it.

• Service Providers: We may use trusted third-party SDKs (such as Google Play Services or Firebase Crashlytics) for analytics and crash reporting. These services process minimal technical data in accordance with their respective privacy policies.

• Legal Requirements: If required by law, court order, or governmental regulation, we may disclose information as legally mandated.

5. Data Storage and Retention

All scan results, ransomware threat logs, and configuration data (such as your backend URL) are stored securely and locally on your device using SharedPreferences storage. This data:

• Never leaves your device unless you configure and use a custom self-hosted ML backend.

• Is capped at 100 scan history entries and 200 ransomware events to conserve local device storage.

• Can be cleared at any time from within the app (History tab → Clear History or Shield tab → Clear Threat Log).

• Is automatically and permanently removed when you uninstall the App.

6. Data Security

We implement reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, or destruction. All sensitive analysis is processed locally on your device. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that your child has provided us with personal information, please contact us immediately, and we will take prompt steps to delete such data.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted within the App and on our official distribution page with an updated Effective Date. Continued use of the App after any updates constitutes your acceptance of the revised Privacy Policy.

9. Contact Us

If you have any questions, feedback, or concerns regarding this Privacy Policy, please contact us at:

• Email: contact.arrakppgroup@gmail.com

• Developer / Organization: ARRAKPP Group

• App Name: Malware Detector — Android Security Application

This Privacy Policy was last updated on September 29, 2026. | ARRAKPP Group