VirusTotal-App-Scanner-Privacy-Policy

Privacy Policy for VT App Scanner

https://play.google.com/store/apps/details?id=com.jaffacakes118.virustotalappscanner

Last updated: May 6, 2026

JaffaCakes118 (“we”, “us”, or “our”) operates the VT App Scanner mobile application (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Package Information

To provide the core functionality of scanning your device for potential threats, the Service accesses the list of installed applications on your device. Specifically:

• We collect the Package Names and APK Hashes (SHA-256) of your installed apps.
• If an app’s hash is not recognized by VirusTotal, the Service will upload the complete application file (APK) from your device to VirusTotal for a full security analysis.
• This information and the files are sent directly to VirusTotal (a third-party service) to retrieve security analysis reports.
• User Consent: The Service will explicitly request your permission via an in-app prompt before accessing your installed packages or uploading any files off your device.

API Keys

To use the Service, you are required to provide your own VirusTotal API Key.

• This key is stored locally on your device using encrypted storage.
• It is only used to authenticate your requests directly to the VirusTotal API.

Firebase Data

We use Google Firebase to enhance the Service:

• Firebase Authentication: We use anonymous authentication to securely interact with backend services. No personal identity (like email or name) is required or collected for this.
• Firebase Analytics: We collect anonymous usage data (including file hashes) to understand app performance and scanning trends.
• Firebase Crashlytics: We collect anonymous crash reports to help us fix bugs and improve stability.

2. Permissions and Background Processing

The Service requires the following permissions to function:

• INTERNET: Required to communicate with VirusTotal and Firebase services.
• QUERY_ALL_PACKAGES: Required to list the applications installed on your device so they can be selected for scanning.
• POST_NOTIFICATIONS: Required to show you the progress and results of active scans.
• FOREGROUND_SERVICE & FOREGROUND_SERVICE_DATA_SYNC: These allow the app to continue scanning your apps even if you move the app to the background or lock your screen. This ensures that large scan queues are completed reliably.

3. Third-Party Services

We use third-party Service Providers to facilitate our Service:

• VirusTotal: For app security analysis. By using this app, you agree to the VirusTotal Terms of Service and Privacy Policy.
• Google Firebase: For analytics, crash reporting, and backend security. You can find their Privacy Policy here: Google Privacy & Terms.

4. Data Storage, Retention, and Deletion

• Local Storage: We use a local database (Room) and Preferences (DataStore) to cache scan results and store your settings (like Dark Mode and API Key) locally on your device.
• Data Deletion: Because this data is stored exclusively on your local device, you can delete it at any time by clearing the app’s cache/storage in your Android settings or by entirely uninstalling the VirusTotal App Scanner application.
• No Developer Servers: We do not operate our own servers. Your data is never transmitted to us or stored by us.
• Third-Party Retention: Data sent to VirusTotal or Google Firebase is subject to their respective retention and deletion policies. To request the deletion of data processed by these services, please refer to the privacy policies linked in Section 3.

5. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• contactjaffacakes118@protonmail.com