🛡️ AEGIX SECURITY

1. About This Policy

This Privacy Policy describes how CryoSim ("we", "us", "our") handles information when you use the Aegix Security Android application ("the App"). By installing or using Aegix, you agree to the practices described here.

2. Data We Process On-Device

Aegix performs its security analysis on your device. Except for the real-time call-forwarding fraud check noted below, the following data is accessed locally and never transmitted to our servers or any third party:

• Installed applications list — to scan for malware, spyware, ransomware, and suspicious permission patterns.
• SMS messages (incoming only) — to detect phishing links and scam content in real time. Message content is never stored or transmitted.
• Clipboard contents — monitored for exposure of sensitive data (passwords, OTPs). Clipboard text is never stored or transmitted.
• Files in the Downloads folder and external storage — scanned for malicious APKs and ransomware activity. File contents are not read; only file names and metadata are analysed.
• Device security settings — root status, USB debugging state, installed CA certificates, and Wi-Fi connection details are checked locally to assess device security.
• Motion sensor data — used by the optional DataGuard firewall to detect when the device is stationary, enabling automatic mobile-data protection. Sensor data is never stored.
• Device identifiers — a random referral code is generated and stored locally only. No device identifiers (IMEI, Android ID, etc.) are collected.
• Phone number / call-forwarding status — when you run the call-forwarding fraud check, Aegix issues a real-time telephony (USSD) query to detect malicious call redirection. Completing this check may momentarily process your phone or SIM number. It is used only for fraud prevention and security, handled in real time (ephemerally), and is never stored or shared with third parties.

3. Data Stored Locally

The following information is stored only in your device's private app storage (SharedPreferences). It is never uploaded anywhere:

• Points balance and points history
• Your referral code (randomly generated, no personal linkage)
• Whether you have claimed a referral bonus
• App settings (Web Shield toggle, DataGuard timer, etc.)
• Whether you have completed onboarding

4. Network Requests We Make

Aegix makes exactly three types of outbound network requests:

• Threat definition updates — Aegix periodically fetches https://cryosim.com/indicators.json and https://cryosim.com/version.json to download updated malware signatures and check for app updates. No personal data is sent in these requests.
• Anonymous usage events — Aegix sends anonymous, non-identifying product-usage events (for example: the app was opened, a screen was viewed, a scan was run) to our own first-party collector at https://cryosim.com/assets/analytics/collect. These tell us which features are actually used so we can improve the app. They carry no personal data and no scan results — only fixed event names, counts, and a random identifier generated on your device. That identifier is created by the app itself; it is not your Android ID, not an advertising ID, and not tied to you or to any other app. Clearing Aegix’s app data resets it. No third-party analytics SDK is used, and no IP address or cookie is stored. You can turn these events off at any time: open Menu › App and switch off Share anonymous usage data — it takes effect straight away, with no restart, and nothing further is sent.
• Web Shield DNS filtering — when enabled, Aegix routes DNS queries through a local VPN tunnel to block malicious domains. DNS queries are resolved locally; no browsing history is stored or transmitted.

5. Permissions Explained

• RECEIVE_SMS, READ_SMS — phishing detection in incoming messages only.
• INTERNET — fetching threat definitions from cryosim.com.
• RECEIVE_BOOT_COMPLETED — restart protection shield after device reboot.
• READ_EXTERNAL_STORAGE / MANAGE_EXTERNAL_STORAGE — scan downloaded APKs and monitor for ransomware file activity.
• ACCESS_WIFI_STATE, ACCESS_NETWORK_STATE — detect unsafe Wi-Fi networks.
• BIND_VPN_SERVICE — operate the local Web Shield DNS filter.
• FOREGROUND_SERVICE — keep the protection shield running in the background.
• QUERY_ALL_PACKAGES — scan all installed apps for threats.
• REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — prevent Android from stopping the protection shield.

6. Data We Do Not Collect

We never collect, store, or transmit:

• Your name, email address, phone number, or any account credentials
• Your location or GPS data
• Your contacts, call logs, or photos
• Your browsing history — Web Shield resolves DNS locally and never stores or transmits it
• The contents of any scan: no file names, no package details, no findings, no SMS content
• Advertising identifiers or tracking cookies
• Any biometric data

The one exception, stated plainly: we do collect the anonymous product-usage events described in section 4. They record that a feature was used — never what it found, and never anything that identifies you.

7. Children's Privacy

Aegix is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has used the app and you have concerns, please contact us at the address below.

8. Disclaimer of Liability

Aegix is a security assistance tool that operates within Android's standard application sandbox. It does not require root access and cannot guarantee detection of every threat. Security findings are based on heuristic analysis and a curated threat database — they represent risk indicators, not definitive verdicts. Always keep your device and apps updated as the primary layer of defence.

Aegix is not affiliated with Google LLC, any bank, financial institution, or government organisation. App names and package identifiers mentioned in threat reports are used solely for identification purposes.

9. Changes to This Policy

We may update this Privacy Policy when the App adds new features or when legal requirements change. The effective date at the top of this page will reflect any update. Continued use of the App after a policy change constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or how Aegix handles your data, please contact: