AegisNexPrivacy policy
This policy explains how AegisNex ("the app", "we") collects and processes your personal data, in line with Vietnam's Personal Data Protection Law 2025 and its implementing regulations. By using AegisNex you agree to the processing described below. You can withdraw your consent at any time (see section 8).
1. Who is responsible for your data
Data controller and processor: Huỳnh Thị Vân Nhi, developer of AegisNex, Vietnam.
Contact: aegisnex.support@gmail.com
2. What AegisNex does not collect
- No reading of SMS messages, contacts or call logs.
- No location.
- No upload of the full list of apps on your phone.
- No Wi-Fi names (SSID) or passwords.
- No payment card details (Google Play handles payments).
- We do not sell your data, use it for advertising, or collect the advertising ID.
3. Data we collect and why
| Data | Purpose |
|---|---|
| User ID (including anonymous use); email if you sign in with Google or email | Create and manage your account, restore purchases, customer support |
| Install ID, device model, Android version, app version, notification token | Register the device, send alerts, fix device-specific issues |
| Check results: risk type, severity, reason summary. For a flagged app or link: its package name and app name, or its domain | Compute safety scores, keep detection history, improve accuracy and reduce false alarms |
| SHA-256 hash of an app file being checked | Match against lists of harmful apps |
| Links you check or share into the app | Score how likely the link is a scam |
| Numbers that call you, only as a hash and in masked form (e.g. 09xx xxx 678), when checked or when you report a call | Warn about numbers many users reported as scams; build community data |
| Purchase status from Google Play (order ID, plan, expiry) | Verify and activate paid plans |
| Feedback, explanation ratings and false-alarm reports you send; technical details if you choose to attach them | Support and app improvement |
| Crash reports and anonymous usage statistics (Firebase Crashlytics, Firebase Analytics) | Find bugs, measure how features work |
| Family plan: risk status and connection status of member devices | Show to the family manager and send alerts. No content, messages or location |
| Email or Zalo number you enter on the iPhone waitlist page | Only to tell you when an iPhone version is available |
| Device type (Android, iPhone, other) when you open the download page; no IP address or cookie is stored | Counting visits to decide whether to build an iPhone version |
Some checks run entirely on your phone and send nothing to our servers, such as checks of device and network settings.
4. Permissions the app uses
- Visibility of launchable apps: to find fake or dangerous apps. Matching happens on the phone; only flagged apps are recorded.
- Call screening role (when you turn it on): to warn about unknown callers. Calls are never blocked.
- Notifications: to show alerts.
- Foreground service (when you turn on real-time protection): to check new apps as soon as they are installed.
- Screen sharing and recording detection: to warn you when someone may be able to see your OTP codes. Checked on the phone only; screen content is never recorded.
5. Sharing
We do not sell or rent data. Data is processed only by service providers that help run the app, under contract and only for the purposes above:
- Google (Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging, Crashlytics, Analytics, Google Play, Google Play Protect)
- Render (application servers)
- Cloudflare (website)
We may disclose data when a competent authority requests it as required by law.
6. Transfers outside Vietnam
AegisNex's main servers are in Singapore (Google Cloud region asia-southeast1 and Render). Some Google and Cloudflare services may process data in other countries. We choose providers with appropriate data protection and follow Vietnamese law on cross-border transfers of personal data.
7. Retention
- Check results: up to 12 months.
- Scam number reports: kept as a hash and a masked number, not linked to you after your account is deleted, and may be kept indefinitely to protect the community.
- Account and device data: until you request deletion; deleted within 30 days of the request.
- Anonymous devices inactive for more than 12 months: data is deleted automatically.
- Email or Zalo on the iPhone waitlist: until an iPhone version is available or you ask us to delete it.
8. Your rights
You have the right to be informed, to access, correct and request deletion of your data, to restrict or object to processing, to withdraw consent, and to complain as provided by law. Send requests to aegisnex.support@gmail.com. We respond within the time limits set by law. See how to delete your account on the Delete account page.
Withdrawing consent does not affect processing that happened before. Some features may stop working if you withdraw consent.
9. Security
Data is sent over encrypted connections (HTTPS). Phone numbers are hashed (SHA-256) on your phone, and the server hashes them again with a secret key before storing them, so the real number cannot be worked back. Administrative access is limited and authenticated. No system is perfectly secure; if a data breach happens, we will notify as required by law.
10. Children
AegisNex is for people aged 16 and over to sign up and use on their own. Children under 16 are protected only when a parent or guardian installs the app and manages it through the Family plan; the parent or guardian then gives consent on the child's behalf. If we learn we have collected data from a child under 16 without such consent, we will delete it.
11. Changes
When we make important changes, we update the effective date at the top of this page and tell you in the app.