🛡️ AEGIX: MOBILE SECURITY

1. About This Policy

This Privacy Policy describes how CryoSim ("we", "us", "our") handles information when you use the Aegix: Mobile Security Android application ("the App", package com.cryosim.aegix). By installing or using Aegix, you agree to the practices described here. This version (15 October 2026) covers Aegix 3.4.0 and later, in which Premium covers live background protection; it also covers Web Shield / Threat Protection, the Password Manager, Aegix Link and password sync with your PC, call and message protection, Dark Web Monitor, App Lock, Photo Vault, Scam Radar, the points ledger and anonymous usage events. The password-sync item in section 4 applies in the same way to Aegix PC Security for Windows (version 1.2.0 and later), whose saved passwords are encrypted on the PC and synced the same way.

2. Data We Process On-Device

Aegix performs its security analysis on your device. The following data is accessed locally and never transmitted to our servers or to any third party, unless a specific exception is stated in section 4:

• Installed applications list — to scan for malware, spyware, ransomware and suspicious permission patterns, to audit which apps can read your SMS, to measure background activity, and to let you pick apps for App Lock. Package names are never sent anywhere.
• SMS messages (incoming only, with your permission) — to detect phishing links and scam content in real time. Message content is never stored or transmitted. Aegix does not read your existing inbox.
• Text, links and e-mails you paste or share into Scam Checker — analysed on the device. See section 4 for the optional "follow redirects" check.
• Incoming call numbers — when you make Aegix your call-screening app, each incoming number is compared on the device with your own allow/block lists, your saved contacts (only if you granted the contacts permission) and a downloaded list of known scam and telemarketing numbers. The number is never uploaded.
• Contacts (optional) — read only to recognise a saved contact as a safe caller. Nothing is copied, stored or uploaded.
• Which app is in the foreground (Usage Access, optional) — so App Lock knows when to show its lock screen, and for the background-activity audit and the weekly screen-time line. Aegix never reads what you do inside an app, and this information stays on the device.
• Wi-Fi network name (SSID) — Android only reveals the name of the network you are joined to when the location permission is granted. Aegix asks for it, optionally, from the Wi-Fi safety check and the Network Inspector, and uses it solely to recognise trusted networks and warn about unsafe ones. Aegix does not use GPS or any location provider, and the network name never leaves the device.
• Photos and media — the Duplicate File Cleaner compares files on the device; the Photo Vault encrypts photos you pick into the App's private storage (section 3). Nothing is uploaded.
• Clipboard contents — monitored for exposure of sensitive data (passwords, OTPs). Clipboard text is never stored or transmitted.
• Files in the Downloads folder and external storage — scanned for malicious APKs and ransomware activity. Only names, sizes and hashes are compared against the threat list on the device. For a full threat scan Aegix asks for Android's All files access permission (MANAGE_EXTERNAL_STORAGE); it is optional, you grant it in Android settings, and it is used only for this on-device scan — no file is uploaded.
• Device security settings — root status, USB debugging state, installed CA certificates and Wi-Fi connection details are checked locally to assess device security.
• Motion sensor data — used by the optional DataGuard firewall to detect when the device is stationary. Sensor data is never stored.
• Country of your SIM card or mobile network — from version 3.4.0, Aegix reads the two-letter country code of your SIM card or mobile network (falling back to the phone's language/region setting) so it can apply the right phone-number rules, scam checks and reporting advice for your country (for example the India-specific UPI and TRAI checks only for India). It needs no permission, is read and used only on the device, and is never sent to CryoSim or anyone else.
• Phone number / call-forwarding status — when you run the call-forwarding fraud check, Aegix sends the standard telephony (USSD) code *#21# to your carrier and reads the reply. This is handled in real time and never stored or shared with anyone but your carrier.
• Passwords and sign-in forms (Password Manager, optional) — if you choose Aegix as your device's Autofill service, Android shows Aegix the structure of sign-in and sign-up forms (which fields are user name and password, and the app or website they belong to) so it can offer your saved logins, suggest a new strong password and offer to save what you typed. This is processed on the device; nothing from these forms is sent to us or anyone else, except a login you yourself choose to send to your PC with Aegix Link (section 4).
• Biometrics — App Lock, the Photo Vault and the Password Manager can use the fingerprint or face already enrolled on your device through Android's own prompt. Aegix never sees or stores biometric data.

3. Data Stored Locally

The following information is stored only in the App's private storage on your device. Android's cloud backup is switched off for Aegix, so uninstalling the App or clearing its data removes all of it (except the points-ledger row described in section 4, which is what lets a reinstall restore your balance):

• Points balance, points history and your invite code
• Premium status — whether optional Premium is active, and until when
• Your App Lock PIN — stored only as a salted hash; Aegix cannot recover it
• Password Manager logins (title, user name, password, the apps and websites they belong to, notes) — encrypted with AES-256-GCM under a key held in the Android Keystore; no plaintext copy is ever written, and they are shown or filled only after you unlock with your fingerprint, screen lock or Aegix PIN. Because cloud backup is off, uninstalling Aegix deletes them — use "Export encrypted backup", which writes a file protected by a passphrase only you know
• PCs you linked with Aegix Link (each PC's random ID, public key and name)
• Photo Vault contents — encrypted with AES-256-GCM under a key held in the Android Keystore; no plaintext copy is ever written
• E-mail addresses you added to Dark Web Monitor and their last results
• Threat Protection's list of blocked website names (up to 500, on the device only) and your allow-list
• Network settings: trusted Wi-Fi network names and any custom DNS servers you set for Web Shield
• The protection log (flagged calls, messages, links and breach results)
• Cached copies of the threat, scam-alert, spam-number and server feeds
• App settings, notification choices, the anonymous usage-events identifier and your opt-out choice, and whether you have completed onboarding

4. Network Requests We Make

Aegix makes the following outbound network requests and no others. All of them use HTTPS, except where a plain connection is technically required and stated.

• Content feeds from cryosim.com — the App periodically downloads its threat definitions (indicators.json, digitally signed), the daily notice, Settings help text, the Scam Radar alerts, the known scam/telemarketing number list and the Threat Protection domain list from https://cryosim.com/projects/aegix/feed/ (versions before 50 use the older address https://cryosim.com/projects/apps/citadel/, which serves the same files). These are plain downloads: no identifier, no personal data and no device information is sent with them.
• Anonymous usage events — Aegix sends anonymous, non-identifying product-usage events (for example: the app was opened, a screen was viewed, a scan was started or a protection feature was switched on, a Scam Checker verdict category) to our own first-party collector at https://cryosim.com/assets/analytics/collect. They carry fixed event names, counts and categories, plus a random identifier generated on your device by the App itself — not your Android ID, not an advertising ID, and not tied to you or to any other app. The one free-text value is the name of a website you yourself mark as safe in Threat Protection, so we can review our blocklist. No scan results, message content, contacts or file names are ever included; no IP address or cookie is stored. No third-party analytics SDK is used. You can turn these events off at any time: open Menu › App and switch off Share anonymous usage data — it takes effect straight away. Clearing the App's data resets the identifier.
• Points ledger (device-bound points) — to make sure the joining bonus is paid once per device and that a reinstall restores your balance rather than resetting it, Aegix talks to our ledger at https://cryosim.com/assets/points/ledger. It sends a hashed device identifier (a SHA-256 hash of your device's Android ID combined with the App's package name — the Android ID itself is never sent, and the hash is different for every app), your points balance, your invite code when you share it or redeem a friend's, and — only if you subscribe to Premium — the Google Play order ID and purchase token of each paid month. The purchase token is used only to check the purchase with Google (Google Play Developer API) before any points are credited. For each order the server then keeps one record, keyed by the order ID: the hashed device identifier, the product, the points credited, whether Google confirmed it, a one-way hash of the purchase token (the token itself is not stored) and the time — so that each paid month is credited exactly once. Purchase records are kept even if you ask us to delete your ledger row (section 7), because we need them for accounting and to stop the same payment being credited twice (fraud prevention); they contain no name, e-mail or payment details. This happens when you first open the App, on later opens (at most every ten minutes) and after points are earned. It carries no name, e-mail, phone number, location or scan data. Aegix reads the Google Play install referrer once, only to learn whether you installed through a friend's invite link.
• Optional Premium (points, with an optional Google Play subscription) — Aegix's live, background protection is Premium: Web Shield, SMS Shield, Call Guard, automatic scanning of new apps and downloads, Wi-Fi and ransomware watch, the daily automatic check, Dark Web breach alerts, Scam Radar alerts, and Password Manager autofill, breach check and Aegix Link. On-demand tools (manual scans, Scam Checker, file scan, Network Inspector, App Lock, Photo Vault, a one-time Dark Web check) and viewing or exporting your saved passwords are always included. Premium runs on points: new users get 300 points (the first month of Premium free), sharing the App earns more, and Aegix spends 10 points from the ledger described above only on a day live protection actually runs — opening the App or using the on-demand tools never uses points. When your points run out, live protection pauses and Aegix tells you; you can share the App again or subscribe. Aegix offers an optional monthly subscription, Aegix Mobile Security Premium (₹49/month in India; elsewhere Google Play shows the price in your local currency), which adds 300 points for each paid month. Points have no cash value and cannot be exchanged for money. Aegix shows no ads. The subscription is bought through Google Play Billing; Google processes the purchase under its own privacy policy, and we never receive your card, UPI or bank details. You can cancel at any time in Google Play › Payments & subscriptions. What is sent to our ledger for each paid month, and what we keep, is described in the points-ledger item above. Whether Premium is active, and until when, may be stored on your device.
• Dark Web Monitor — this is the only feature that sends personal information to a third party, and only for addresses you add yourself. Each e-mail address you enter is sent, in full, to the breach-search service XposedOrNot (https://api.xposedornot.com) so it can report which known data breaches contain it. It is checked when you add it and then automatically about once every 24 hours while breach alerts are on, so you can be notified of new leaks; remove the address or turn alerts off in the Dark Web Monitor screen to stop this. The password check uses the Have I Been Pwned k-anonymity range service (https://api.pwnedpasswords.com): only the first five characters of the password's SHA-1 hash are sent, the password itself never leaves your device and is never stored. Both services receive your device's public IP address as part of any internet request; we do not receive the addresses or results.
• Threat Protection / Web Shield DNS filtering — when enabled, Aegix creates a local VPN interface on the device to intercept DNS look-ups. Each name an app asks for is compared with the blocklist on your device; blocked names are answered locally and never contacted. Names that are not blocked are forwarded to a public filtering resolver — Cloudflare Security DNS (1.1.1.2) for malicious-site blocking, or AdGuard DNS (94.140.14.14) when ads & trackers are also blocked — or to the custom DNS servers you configure. Those resolvers therefore see the website names your device looks up, in the same way your mobile carrier's or Wi-Fi network's resolver otherwise would; they are governed by their own privacy policies. Aegix itself keeps only the on-device list of blocked names described in section 3, and nothing about your browsing is sent to CryoSim.
• Diagnostics and Network Inspector probes — only when you tap "Run diagnostics" / "Run check", Aegix contacts https://cryosim.com/ and Google's connectivity endpoint connectivitycheck.gstatic.com/generate_204 (over plain HTTP, because a captive portal cannot be detected over HTTPS; the request carries no data) to tell you whether you are offline, behind a captive portal or on an unsafe network. "Run check" in the Network Inspector also asks https://api.ipify.org for your device's own public IP address so it can show it to you; nothing is sent in that request and the answer is only displayed.
• Scam Checker "follow redirects" (optional) — the standard check is fully offline. If you tap the optional live check, Aegix sends a lightweight request from your phone to the link you pasted, following up to five redirects, to show you where the link really leads. The link is not sent to CryoSim or to any third-party reputation service.
• Aegix Link (optional, only when you use it) — to send a saved login to your own PC, you open https://cryosim.com/projects/aegix/link/ in the PC's browser and pair it once with a 6-digit code. The phone then encrypts the login (title, website, user name, password) end-to-end for that PC's browser only (P-256 key agreement, AES-256-GCM); the key to open it is created in your PC's browser and cannot be exported, so CryoSim cannot read it. Our relay at https://cryosim.com/projects/aegix/link/api stores the encrypted message until the PC collects it, then deletes it — and deletes it anyway after 3 minutes. The relay also keeps, for the pairing, each PC's random ID, public key and a name like "Chrome on Windows", and each phone's random ID and model name. Unlink a PC (on the phone or the PC page) to remove the pairing; unused PCs are removed after 180 days.
• Password sync with your PC (optional, only when you turn it on) — to keep your saved passwords the same in Aegix on your phone and in Aegix PC Security on your PC (or on a second PC), you pair them once: the PC shows a QR code (Vault › Sync with your phone), you scan it on the phone (Password Manager › ⋮ › Sync with your PC) or type the 26-character code shown under it, and check that both screens show the same 6-digit code. Every login, note and deletion is then encrypted end-to-end on the device that changed it (AES-256-GCM under a key created on your devices and never sent to us) and padded so its size does not reveal its length, so CryoSim cannot read it. Our relay at https://cryosim.com/projects/aegix/sync/api only passes these encrypted records on: it keeps each one until your other device collects it, and deletes it then, or after 30 days at most. We do not keep a copy of your passwords. The relay also keeps, for as long as sync is on: a random ID for each device, its type (Android or Windows), a public key, the random ID of your sync group, the times each device joined and was last seen, and — for at most an hour, as rate-limit counters — a one-way hash of the connecting IP address. It never receives titles, websites, user names, passwords, notes or device names. Devices unseen for 180 days are removed automatically. "Sync now", pairing and removing devices are free; automatic background sync runs while Premium is active on either app and never uses points by itself.
• Password breach check — only when you tap "Check now" in the Password Manager, each saved password is checked with the same Have I Been Pwned k-anonymity range service described above: only the first five characters of its SHA-1 hash are sent.
• Google Play services — Aegix uses Google Play's in-app update, in-app review and install-referrer libraries. These talk to Google Play on your device under Google's privacy policy; Aegix adds no data of its own.

5. Permissions Explained

• RECEIVE_SMS — the SMS Phishing Guard reads incoming messages on the device. (Aegix does not request READ_SMS and cannot read your inbox.)
• CALL_PHONE — only to send the *#21# call-forwarding status code to your carrier; Aegix never places a call.
• Call screening role (BIND_SCREENING_SERVICE) — lets Aegix screen incoming calls for scam and telemarketing numbers when you make it your call-screening app.
• READ_CONTACTS (optional) — to treat saved contacts as safe callers.
• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION (optional) — only to read the Wi-Fi network name for trusted networks, unsafe-Wi-Fi alerts and the Network Inspector; never in the background, never for GPS.
• PACKAGE_USAGE_STATS (Usage Access, optional) — App Lock's foreground watcher, the background-app audit and screen-time statistics.
• SYSTEM_ALERT_WINDOW (display over other apps, optional) — to show the App Lock screen in front of an app you locked, and a short on-screen hint after Aegix opens a system Settings page.
• USE_BIOMETRIC — fingerprint or face unlock for App Lock and the Photo Vault through Android's own prompt.
• READ_MEDIA_IMAGES / READ_MEDIA_VIDEO / READ_MEDIA_AUDIO / READ_MEDIA_VISUAL_USER_SELECTED, READ_EXTERNAL_STORAGE (Android 12 and below) — the Duplicate File Cleaner, the download scan and removing originals after they are moved into the Photo Vault; every deletion goes through Android's own confirmation. Photos enter the vault through the system photo picker, which needs no permission.
• QUERY_ALL_PACKAGES — to scan every installed app for threats. REQUEST_DELETE_PACKAGES — to open the system uninstall dialog for a flagged app.
• BIND_VPN_SERVICE — only for the local Threat Protection / Web Shield DNS filter (section 4). It creates a VPN interface on the device itself; no traffic is sent to a VPN server.
• FOREGROUND_SERVICE, FOREGROUND_SERVICE_DATA_SYNC — to keep the protection service, Web Shield and the App Lock watcher running with a visible notification. POST_NOTIFICATIONS — alerts and the notification each running service must show; every notification family can be switched off individually.
• RECEIVE_BOOT_COMPLETED — restart protection and App Lock after a reboot. REQUEST_IGNORE_BATTERY_OPTIMIZATIONS — asked with an explanation so Android does not stop Web Shield or the other protection services. KILL_BACKGROUND_PROCESSES — the Boost button.
• INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE — the requests in section 4, network state and Wi-Fi safety checks.

Aegix uses no accessibility service, no camera and no microphone.

6. Data We Do Not Collect

We never collect, store on our servers, or sell:

• Your name, phone number, or any account credentials (there are no accounts)
• Your saved passwords — they stay encrypted on your phone; a login you send with Aegix Link passes through our relay only in end-to-end encrypted form that we cannot open; with password sync turned on, changes pass through our relay only in end-to-end encrypted form that we cannot open, and are deleted on delivery or after 30 days
• Your location or GPS data — the Wi-Fi network name stays on the device
• Your contacts, call logs, messages or photos
• Your browsing history — we do not receive DNS queries or traffic; Threat Protection's blocked-site list and the VPN statistics stay on the device
• The contents of any scan: no file names, no package names, no findings, no SMS content
• Advertising identifiers, your raw Android ID, or tracking cookies
• Payment details — an optional Premium subscription is paid through Google Play, and we never receive your card, UPI or bank details
• Any biometric data

The exceptions, stated plainly, are the ones in section 4: anonymous usage events (switchable), the hashed device identifier and points balance in the ledger (plus, if you subscribe, a purchase record for each paid month), e-mail addresses you add to Dark Web Monitor (sent to XposedOrNot), the DNS resolver Web Shield uses for look-ups, and — only if you use Aegix Link — the pairing record and end-to-end encrypted messages our relay holds for at most 3 minutes, and — only if you turn on password sync — device and group IDs, public keys and end-to-end encrypted records our relay holds until your other device collects them (30 days at most).

7. Your Choices and Deleting Your Data

• Usage events: Menu › App › "Share anonymous usage data" — off stops them immediately.
• Dark Web Monitor: remove an address or switch off breach alerts in the Dark Web Monitor screen; the address is then no longer sent anywhere.
• Threat Protection / VPN: turn either off and DNS and traffic return to your normal network path.
• Password sync: "Turn off sync and delete my sync data" — on the phone in Password Manager › ⋮ › Sync with your PC, on the PC in Aegix PC Security › Vault › Sync with your phone — deletes, from our server, your sync group, every device in it and every record still waiting for delivery, at once. "Remove" next to a device in the device list deletes that device's key and waiting records. Your passwords stay on your devices.
• Local data: uninstalling Aegix or clearing its data removes everything in section 3, including the vault and its key (restore vault photos first).
• Ledger row: to have your points-ledger record deleted from our server, e-mail admin@cryosim.com and quote the invite code shown under Profile › "Share Aegix & Earn"; we delete the row and confirm. If you subscribed to Premium, the per-order purchase records described in section 4 (hashed device identifier, order ID, product, points, time) are kept after the row is deleted, for accounting and to prevent the same payment being credited twice; they hold no name, e-mail or payment details. Anonymous usage events cannot be traced back to a person once the App's data is cleared, because the identifier is discarded on the device.

8. Children's Privacy

Aegix is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has used the app and you have concerns, please contact us at the address below.

9. Disclaimer of Liability

Aegix is a security assistance tool that operates within Android's standard application sandbox. It does not require root access and cannot guarantee detection of every threat. Security findings, scam verdicts, breach results and call classifications are based on heuristic analysis, curated lists and third-party breach databases — they represent risk indicators, not definitive verdicts. Always keep your device and apps updated as the primary layer of defence. Web Shield filters website look-ups on your device; it is not an anonymising VPN and does not hide your traffic or IP address.

Aegix is not affiliated with Google LLC, Cloudflare, AdGuard, XposedOrNot, Have I Been Pwned, any bank, financial institution or government organisation. App names, package identifiers and website names mentioned in threat reports are used solely for identification purposes.

10. Changes to This Policy

We may update this Privacy Policy when the App adds new features or when legal requirements change. The effective date at the top of this page will reflect any update. Continued use of the App after a policy change constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how Aegix handles your data, please contact: