Privacy Policy - APK AppSec

Last updated: October 11, 2026

1. Summary

APK AppSec performs static application security testing (SAST) on Android APK files. The analysis runs 100% on your device: the app never uploads the inspected APK, code snippets, or scan results to any external server.

The free version displays ads served by Google AdMob, described below, which may use your device's advertising ID. Beyond ads, the app transmits no personal or usage information.

2. Information Processed

The app collects no personal data and requires no registration, login, or user account. To conduct security audits, it reads strictly on the device itself:

• The APK file you select from storage, or the APKs of installed apps you choose to audit;
• The binary manifest (AndroidManifest.xml), DEX bytecode string/type tables, compiled resources, and text assets to identify security vulnerabilities, misconfigurations, and hardcoded secrets.

This data is processed locally and discarded when the scan finishes or the app is closed. No APK, code snippet, manifest text, or audit report leaves your device.

The only information processed by third parties is managed by Google AdMob in the free version:

• Advertising ID — serving and measuring ads
• Ad Interaction Data — ad frequency capping and serving

We do not collect names, emails, phone numbers, addresses, contacts, photos, health data, location, or browsing history. We do not send crash logs, stack traces, performance metrics, network requests, or diagnostic telemetry.

3. How Information Is Used

AdMob information is used solely to serve and measure ads in the free version. We do not sell, rent, or share personal data with third parties for marketing.

4. Advertising

The free version displays Google AdMob banner and app-open ads. The Google SDK may collect device identifiers under Google's Privacy Policy and Google Advertising Policy.

The paid version contains no ads and does not include the AdMob SDK.

5. Permissions

The free version requests:

• INTERNET — to load AdMob ads
• ACCESS_NETWORK_STATE — to detect network connectivity for ads
• QUERY_ALL_PACKAGES — to allow you to select an installed app on your device and audit its APK

The paid version requests neither INTERNET nor any ad permissions.

6. Data Security

Because static analysis is 100% local, no audit data is transmitted over the network. Ad data is transmitted via encrypted HTTPS connections by the Google AdMob SDK.

7. Retention and Deletion

We maintain no user database or remote telemetry servers. Generated reports remain on your device and can be deleted by you at any time. You can reset your Advertising ID in your device settings.

8. Children

This app is not directed to children under 13 and we do not knowingly collect data from children.

9. Changes to This Policy

We may update this privacy policy periodically. Updates will be published on this page.

10. Contact

For questions regarding this privacy policy:

Email: emimura@gmail.com