Privacy Policy for Madmax Apps

01 · Introduction

Welcome to Madmax Apps. We are committed to safeguarding your privacy and protecting your data. This Privacy Policy outlines how we collect, use, process, and protect the information you provide when using our products and services, specifically our portfolio of Android security and utility applications.

By downloading, installing, or utilizing Madmax Apps, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. Your use of our services is also governed by our Terms of Service and any applicable End User License Agreement (EULA).

As our services evolve, we may update this Privacy Policy to reflect technical, operational, or legal changes. Significant modifications will be communicated to you via in-app notices or as required by applicable law.

02 · Core Architecture & Local VPN Service

A foundational principle of Madmax Apps is that your data belongs on your device.

Our apps utilize the native Android VpnService to manage, filter, and secure your network traffic locally on your device.

• No Remote VPN Servers: Madmax Apps does not operate, route through, or maintain external or remote VPN servers. Your internet traffic is processed strictly on-device.
• IP Filtering Disabled: Any blocked internet traffic is routed into the local VPN service, effectively acting as a digital sinkhole that drops all unauthorized traffic.
• IP Filtering Enabled: Both blocked and allowed internet traffic are routed into the local VPN service, but only allowed traffic is securely forwarded to its intended destination. No traffic is intercepted or transmitted to Madmax Apps or third-party servers.
• No Root Access Required: This local implementation ensures comprehensive network security and application-level firewalls without requiring root access to your Android device.

03 · Legal Bases for Data Processing (GDPR Compliance)

For users in the European Economic Area (EEA), the United Kingdom, and jurisdictions with similar regulatory frameworks, we process your data under the following legal bases:

• Performance of a Contract: When data processing is necessary to deliver core app functionality, manage your software licenses, or provide user support.
• Legitimate Interests: To maintain system security, detect malware or spyware threats, optimize app performance, prevent fraud, and improve the stability of our services, provided these interests do not override your privacy rights.
• Legal Obligations: To comply with statutory requirements, tax regulations, or lawful government and law enforcement requests.

04 · What Information We Process & Why

We do not sell your personal data or profile your behavior for advertising. To deliver advanced security features, diagnostics, and application functionality, we process specific technical indicators. Depending on the context, some of these indicators may be classified as pseudonymous personal data under global laws.

Data We Collect Directly or Automatically

• Diagnostic Data & Crash Logs: Collected via third-party SDKs (such as Google Play Services and Firebase Crashlytics) to identify bugs, system crashes, and optimize stability.
• Technical Identifiers: User IDs, Device Identifiers, and IP Addresses. These are processed briefly for communication integrity, secure licensing verification, and network diagnostics.
• App Package Information: Package names, version codes, SHA-256, and MD5 checksums of apps installed on your device. This is processed strictly to provide malware detection, spyware shielding, and firewall rules.
• File Checksums: Cryptographic signatures (SHA-256/MD5 hashes) of files on your storage. These are analyzed against threat databases to identify viruses or malicious payloads. The raw content of your files is never read or transmitted.
• Communication Data: Your email address and voluntary text descriptions when you contact our support infrastructure.

05 · App-Specific Disclosures

To give you complete visibility, here is exactly how data operates across our specific applications:

Firewall – DNS & App Blocker

Processes network configurations and installed package names locally to enforce user-defined traffic blocks. No browsing history, domain history, or online profiles are ever permanently logged or shared.

Antivirus – Virus Scanner & Anti Spy Detector

Scans your device's installed application packages and storage file metadata. It converts potential threats into cryptographic checksums (hashes) to verify safety against global threat definitions. Full application files or personal documents are never transmitted off your device.

Data Eraser - Data Shredder

Operates 100% locally on your device. It utilizes military-grade overwriting protocols (e.g., AES-256 block configurations) to securely delete files, folders, or residual storage paths. The contents of shredded data never interact with any server.

Secure VPN Proxy

Enforces local routing and encrypted DNS queries exclusively on-device via the Android VpnService, operating strictly as a local filtering loop without external traffic interception.

06 · Android Permissions Transparency

To achieve their core security and privacy functions, our apps require explicit system permissions. We explain these transparently below:

Permission / API	Target Applications	Purpose
QUERY_ALL_PACKAGES	Firewall, Antivirus, Anti Spy	Necessary to scan and identify all installed applications for potential malware, spyware vectors, and to build application-specific firewall rules.
MANAGE_EXTERNAL_STORAGE	Antivirus, Data Eraser	Required to inspect deep directories for hidden malware payloads and to execute byte-accurate overwriting patterns for secure data destruction.
Android VpnService	Firewall, Secure VPN Proxy	Utilized to create a local loopback interface for real-time network traffic filtering, blocking trackers, and custom DNS routing without a remote server.

07 · Data Protection, Infrastructure, and Transfers

We take the security of your technical data seriously and implement robust technical measures:

• Encryption: Data transmitted to our update or verification nodes utilizes modern HTTPS/TLS protocols. Data at rest is protected using industry-standard AES-256 configurations.
• Processing Locations: Madmax Apps processes and hosts analytical infrastructure within the European Union (EU), adhering closely to robust regional privacy regulations.
• International Data Transfers: We transfer data in absolute compliance with applicable global data protection laws. For transfers of European data, we utilize Standard Contractual Clauses (SCCs) and robust data minimization frameworks to ensure data maintains equivalent legal safeguards globally.

08 · Retention and Deletion Timelines

We retain data only as long as necessary to fulfill the operational security purposes outlined in this policy, or to comply with explicit legal records:

• Threat & Scan Requests: Package names and checksum queries sent for cloud-based threat definition matching are processed in real time and discarded within seconds.
• Diagnostic & Crash Data: Maintained via Firebase Crashlytics and Google Play according to standard retention settings, and used solely for aggregated engineering reviews.
• Support Records: Retained as long as necessary to address your specific query and satisfy statutory limitation periods.

09 · Your Global Privacy Rights

Depending on your geographic location (such as the EU under GDPR, or various U.S. states under CCPA/CPRA), you may hold specific rights regarding your data:

• The right to confirm, access, or obtain a portable copy of the data we process.
• The right to rectify or amend inaccurate or incomplete technical records.
• The right to request the erasure of your data.
• The right to restrict or object to the processing of your data.
• Unregistered users who wish to halt all data processing can do so completely and immediately by uninstalling Madmax Apps from their devices.

10 · Children's Privacy

Madmax Apps products are designed, intended, and marketed for adult use. Children may utilize devices with our apps installed only with explicit parental review and consent. We do not knowingly target or intentionally process data belonging to children under the age of 16.

11 · Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your data rights, or our security infrastructure, please contact our privacy compliance team:

Madmax Apps
Email: support@madmaxtechnologies.com