ThreatPick Privacy Policy
- ThreatPick checks your apps and files on your phone. Your app list, files, scan results and usage information are never uploaded to us.
- We do not have accounts, and we do not collect your name, email, contacts, messages or photos.
- The free version shows ads from Google AdMob. Google may collect device identifiers and similar data to show and measure ads, as described below.
- If you buy Remove ads, ThreatPick stops loading ads, and the ads software is not started on your device.
1. Who we are
ThreatPick is developed by Md Nur Uddin Sabuj (“we”, “us”). This policy explains what information the ThreatPick app uses, why, and the choices you have. If you have questions, contact us at nur.uudevs@gmail.com.
2. Information processed on your device only
ThreatPick’s security features run entirely on your phone. The information below is read and analysed locally and is not sent to us or to anyone else.
| Information | Why it is used |
|---|---|
| List of installed apps, their installer, signing certificates, version and permissions | To find sideloaded apps, fake or modified copies of popular apps, and apps with dangerous powers. |
| Files in shared storage (for example Downloads, WhatsApp and Telegram media, photos and documents), only if you allow “All files access” | To find dangerous app installers, programs disguised as photos or documents, and damaged files. Files are checked on the phone; their contents are never uploaded. |
| App usage timeline (which app was on screen and when), only if you allow “Usage access” | To identify the app that shows pop-up ads on top of other apps (the “Find pop-up ad culprits” feature). Only the last few days kept by Android are read. |
| Files you move to quarantine | Kept in ThreatPick’s private storage on your phone so you can restore or delete them later. |
| Your settings (language, alerts on/off, which threats you were already told about) | Stored on your phone so the app works the way you chose and does not repeat alerts. |
You can stop this processing at any time by turning off the relevant permission in Android settings (Settings › Apps › ThreatPick), turning off Find pop-up ad culprits in ThreatPick’s Settings, or uninstalling the app. Uninstalling deletes all of ThreatPick’s local data, including quarantined files.
3. Advertising (free version)
The free version of ThreatPick shows banner ads and occasional full-screen ads after a file scan. Ads are provided by Google AdMob (Google LLC / Google Ireland Limited), using the Google Mobile Ads SDK.
What Google may collect
When ads are shown, the Google Mobile Ads SDK may automatically collect and share with Google:
- Device identifiers, including your device’s Advertising ID (if you have not reset or deleted it in Android settings);
- IP address and the approximate location derived from it;
- Information about your device and app (model, operating system, language, app version);
- Interactions with ads (for example, ads viewed or tapped) and diagnostic data such as crash logs and performance data.
Google uses this information to deliver ads, measure ad performance, prevent fraud and abuse, and, where you allow it, show personalised ads. ThreatPick does not send Google your app list, your files, your scan results or your usage timeline. Learn more in Google’s How Google uses information from sites or apps that use our services and the Google Privacy Policy.
Your choices about ads
- Consent (EEA, UK and Switzerland): before any ads are requested, ThreatPick shows Google’s consent form, where you can accept or refuse personalised ads. You can change your choice at any time in ThreatPick › Settings › Ad privacy choices. If the consent form cannot be shown, ThreatPick only requests non-personalised ads.
- Advertising ID: you can reset or delete your Advertising ID, or opt out of ads personalisation, in Android Settings › Privacy › Ads (the exact path depends on your phone).
- Remove ads: buy the one-time Remove ads upgrade (see section 4).
4. Remove ads purchase
ThreatPick offers an optional one-time in-app purchase, Remove ads, sold through Google Play Billing.
- Payment: the purchase is handled entirely by Google Play. We never see or store your card number, billing address or Google account password. Google’s handling of payment information is covered by the Google Privacy Policy and the Google Payments Privacy Notice.
- What the app receives: Google Play tells ThreatPick, on your device, whether your Google account owns Remove ads (a purchase record and token). This is used only to unlock the ad-free version and to restore it with “Restore purchase”. It is not sent to us.
- Once Remove ads is active: after Google Play confirms your purchase, ThreatPick does not start the Google Mobile Ads SDK, does not request ads, and no ad-related data is collected through ThreatPick on that device. The ad privacy section above then no longer applies to your use of the app.
- Other devices: the upgrade follows your Google account. On another phone signed in to the same account, it is applied automatically or with “Restore purchase”.
5. Other network connections
- Threat list updates: ThreatPick downloads an updated list of official app signatures and known malicious files from our server. This is a download only; no information about you, your apps or your files is sent. Like any web request, the server may briefly receive your IP address as part of normal operation; we do not use it to identify you.
- Update check: ThreatPick asks Google Play whether a newer version of the app is available, so it can show an update notice (at most once a day). This uses Google Play services.
6. Notifications
If you turn on Real-time alerts, ThreatPick checks your phone in the background about every 30 minutes and shows a notification when it finds a new suspicious app or dangerous download. It may also show a notification, at most once a day, when a new version is available. These checks happen on your phone. You can turn notifications off at any time in ThreatPick or in Android settings.
7. Permissions
| Permission | Used for |
|---|---|
QUERY_ALL_PACKAGES | Seeing every installed app, which an antivirus-style scan needs. |
MANAGE_EXTERNAL_STORAGE / storage (optional) | Scanning shared storage for dangerous or damaged files, and quarantining or deleting files you choose. |
PACKAGE_USAGE_STATS (optional, “Usage access”) | Finding the app that shows pop-up ads over other apps. |
REQUEST_DELETE_PACKAGES | Opening Android’s uninstall dialog for an app you choose to remove. Android always asks you to confirm. |
POST_NOTIFICATIONS (optional) | Threat alerts and update notices. |
INTERNET, ACCESS_NETWORK_STATE | Threat list updates, ads, purchases and the update check. |
com.google.android.gms.permission.AD_ID and Android ad services permissions | Added by the Google Mobile Ads SDK to read the Advertising ID for ads (free version only). |
com.android.vending.BILLING | The Remove ads purchase through Google Play. |
WAKE_LOCK, FOREGROUND_SERVICE | Letting scheduled background checks finish reliably. |
8. Data sharing and selling
We do not sell your personal information, and we do not share it with anyone. The only third parties that receive data through ThreatPick are Google AdMob (free version only, as described in section 3) and Google Play (for purchases and update checks), under their own privacy policies.
9. Data retention and deletion
We do not keep any of your data on our servers, so there is nothing for us to delete. Data on your phone stays until you delete it in the app (for example “Delete forever” in Quarantine), clear ThreatPick’s storage in Android settings, or uninstall the app. To ask Google to delete ad-related data, use your Google Account data and privacy settings.
10. Security
Because scans happen on your phone and results are not uploaded, your app and file information is not exposed to a server. Network connections we make use HTTPS. No method of storage or transmission is completely secure, but we design ThreatPick to keep your information on your device.
11. Children
ThreatPick is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, contact us and we will help remove it.
12. Your rights
Depending on where you live (for example under the GDPR in the EU/UK or privacy laws in US states), you may have rights to access, correct, delete or object to the processing of your personal information, and to withdraw consent. Because we do not hold personal data about you, most requests can be handled on your device as described above; for ad data, use the consent options in section 3 or contact Google. You can also contact us at nur.uudevs@gmail.com, and you may complain to your local data protection authority.
13. Changes to this policy
We may update this policy when the app changes. The new version will be posted at this address with a new effective date. If a change is significant, we will make reasonable efforts to let you know, for example in the app or in the Google Play listing.
14. Contact
Md Nur Uddin Sabuj
Email: nur.uudevs@gmail.com