Aegix PC Security Privacy Policy

1. Who we are

Aegix PC Security is made by CryoSim (cryosim.com). In this policy “we” means CryoSim. Questions about this policy or your data: admin@cryosim.com.

2. What stays on your PC

Aegix keeps its data in %LOCALAPPDATA%\Aegix on your computer. None of the following is sent to CryoSim or anyone else:

• the security check, threat scan and health check results, alerts and their history;
• the files, programs, startup items and browser settings Aegix looks at, and what the clean-up tools find or remove;
• the messages and links you paste into Scam Checker — they are checked on the PC;
• the sites you visit: Web Shield blocks known bad sites with a list kept on the PC, so your browsing is not sent anywhere;
• your Vault — passwords, photos, videos, files and notes, and their tags — which is encrypted on the PC (the keys are protected by Windows for your user account). An encrypted backup (.aegixvault) is a file saved where you choose; Aegix does not upload it;
• your settings and the app’s log files, which are used only to diagnose problems on your PC;
• the list of changes Aegix made to Windows (Settings › System changes) and the previous values it saves so you can undo them. Previous values of settings changed with administrator rights, and the log of those tasks, are kept in %ProgramData%\Aegix, a folder only administrators and Windows can open.

3. When Aegix uses the internet

Every request below goes over an encrypted connection (HTTPS). Like any web request, it shows the receiving server your IP address and the app name and version (for example “AegixWindows/1.3.0”). Our web server keeps standard access logs for security and to run the site.

• Threat lists. At most every 12 hours Aegix downloads the Web Shield list of scam, phishing and malware sites and the Scam Radar alerts from cryosim.com. Nothing about you or your PC is sent with them.
• Anonymous usage counts (on by default; you can switch this off). Which features are used, with simple outcomes as numbers or yes/no (for example how many issues a scan found and how many files it checked, whether a fix worked, whether a breach check found a match, the Scam Checker verdict, how many passwords were imported, how many photos or files were added to the Vault), the app version and a random id that changes every time Aegix starts, are sent to cryosim.com. Never your files or file names, passwords, e-mail address, the text you check, the sites you visit or your name. Turn it off in Settings › Privacy › Share anonymous usage counts.
• Points. Aegix PC has a points wallet on cryosim.com (used for invites and for a possible future paid plan). It is identified by a random-looking code that Aegix makes from this PC’s Windows installation and user account with a one-way hash, so it cannot be turned back into either. The code is stable: it stays the same every time Aegix starts and after a reinstall of Aegix, and changes only with a new Windows installation or another Windows account. It does not contain your name or any other personal detail, but it does let our server recognise the same wallet over time. On first start and then every 3 hours the app sends that code, the points balance and, if you share or use one, an invite code. Aegix PC is free: nothing is charged and the app takes no payment.
• Password breach check (only when you run it). To check a password, Aegix sends only the first 5 characters of the password’s SHA-1 hash to Have I Been Pwned (api.pwnedpasswords.com), with padding, and compares the answer on the PC. The password itself never leaves the PC.
• E-mail breach check (only when you run it). The full e-mail address you type is sent to XposedOrNot (api.xposedornot.com), which answers with the known data breaches that include it. Aegix does not store the address or watch it in the background. XposedOrNot’s own privacy policy applies to that request.
• Aegix Link (phone to PC). The first time you open the Vault page, Aegix registers this PC with a relay on cryosim.com so a phone can pair with it: a random PC id, a secret (the relay keeps only its hash), a public key and the fixed name “Aegix for Windows”. From then on the PC asks the relay every few seconds whether a paired phone sent something. Logins you send from Aegix on your phone are encrypted on the phone with a key only your PC has, so the relay sees only ciphertext, random ids, public keys and the phone’s model name. A message is deleted as soon as the PC collects it, and after 3 minutes if it is not collected. A PC not seen for 180 days is removed from the relay.
• Password sync (only after you set it up). Saved passwords sync between your devices through a relay on cryosim.com. They are end-to-end encrypted with keys that only your devices have; the relay cannot read them. Each update is deleted from the relay once the receiving device confirms it, an update that is never collected is deleted after 30 days, and a device not seen for 180 days is removed. The device name (your PC’s name) is shared with your other synced devices inside the encrypted data. While two devices pair, the device that joins (for example this PC, when you type a pairing code into it) sends its name to the relay in a short pairing message that is protected against tampering but not encrypted, so the relay can see your computer’s name; pairing messages are deleted after 10 minutes.
• Safe DNS (only if you turn it on). Your PC’s DNS look-ups go to Cloudflare’s malware-blocking servers (1.1.1.2 / 1.0.0.2) instead of your internet provider’s, under Cloudflare’s privacy policy. Turning it off restores your previous settings.
• Updates. About two minutes after it starts, then every 12 hours, and when you click “Check now” in Settings, the direct-download version reads a small signed update file from cryosim.com and, if there is a newer version, downloads it from cryosim.com. Nothing about your PC is sent. The Microsoft Store version is updated through the Microsoft Store, under Microsoft’s privacy statement.
• Links you click. Buttons such as the website, a Scam Radar alert or “Get Aegix for Android” open your web browser. Nothing is opened unless you click it.

The threat scan uses Microsoft Defender, which is part of Windows; Defender’s own cloud features follow your Windows settings and Microsoft’s privacy statement. Aegix does not change them.

4. Price and payments

Aegix PC Security is free. There is no account, no subscription and no payment in the app, and no ads.

5. This website

The Aegix pages on cryosim.com, including the download page, are part of the CryoSim website. Downloading the app does not need an account. Like most websites, our server logs requests (IP address, browser, page and time), and the site counts page visits and button clicks to see which pages are useful. It shows no ads.

6. Sharing and selling

We do not sell, rent or share data about you. The services named above (Have I Been Pwned, XposedOrNot, Cloudflare and Microsoft) receive a request only when you use the feature that needs them.

7. Removing your data

• Password sync: Delete my sync data in Aegix (Vault › Sync with your phone) removes your encrypted data and devices from the relay. Unpairing a phone in Aegix Link removes that pairing.
• To remove Aegix: first Settings › System changes › Undo all Aegix system changes in Aegix, then Windows Settings › Apps › Installed apps › Aegix PC Security › Uninstall.
• The uninstaller of the direct-download version has a box to also delete the data folder %LOCALAPPDATA%\Aegix. Otherwise (and with the Microsoft Store version) the folder is kept, so a reinstall keeps your settings and your Vault. Delete that folder yourself at any time while Aegix is closed to remove everything Aegix stored on the PC, and %ProgramData%\Aegix (administrator rights needed) for the saved previous values and admin logs.
• For web server logs or the points wallet of your PC, write to admin@cryosim.com.

8. Children

Aegix PC Security does not ask for or collect personal information from anyone, including children.

9. Changes to this policy

If what Aegix PC sends over the internet changes, we will update this page and its date before that version is released.