Official Legal Document

Privacy Policy — ZeroPro

App Name: ZeroPro — Mobile Security (also known as ZeroInstall Shield)
Developer: ZeroInstall (https://zeroinstall.app)
Effective Date: October 2026

ZeroPro ("the App", "we", "our", or "us") is engineered around a strict 100% On-Device Privacy Architecture. We believe security software should protect your device without sacrificing your personal privacy. We do not operate external tracking databases, and we do not collect, transmit, store, sell, or monetize your personal data.

1. Explicit Android Permission Disclosures (Google Play Compliant)

To provide proactive endpoint security against unauthorized APK malware and malicious links, ZeroPro requests specific privileged Android permissions. Each permission is strictly executed locally in on-device memory:

A. Accessibility Service API (BIND_ACCESSIBILITY_SERVICE)

Specific Purpose: Used solely to detect when the system package installer window (e.g. com.google.android.packageinstaller or com.android.packageinstaller) is opened to sideload an unknown .apk file.

Strict Privacy Boundaries:

The Accessibility service does NOT log, read, or capture user keystrokes, personal messages, passwords, or banking credentials.
No screen text or user interactions are recorded, saved to disk, or transmitted off the device.
Users can enable or disable this feature at any time in Android Accessibility Settings.

B. Notification Listener Service (BIND_NOTIFICATION_LISTENER_SERVICE)

Specific Purpose: Scans incoming notification messages (such as WhatsApp, Telegram, and SMS) solely to inspect embedded URLs for known phishing domains, bank fraud links, or hidden .apk malware downloads.

Strict Privacy Boundaries:

URL evaluation occurs transiently in volatile RAM.
Message bodies, chat histories, sender contact details, and OTPs are never stored, logged, or uploaded to any cloud or remote server.

C. Query All Packages (QUERY_ALL_PACKAGES)

Specific Purpose: Required strictly on-device to inspect installed applications, uncover invisible background apps without launcher icons (ghost apps), identify sideloaded packages, and audit which apps hold high-risk permissions (Camera, Microphone, Location).

Strict Privacy Boundaries: Your list of installed applications is processed 100% locally on your device and is never shared, sold, or transmitted to any server.

D. VPN Service (BIND_VPN_SERVICE)

Specific Purpose: Creates a local, on-device loopback interface to act as a local DNS sinkhole firewall, blocking outbound connections to known spyware, telemetry loggers, and ad trackers.

Strict Privacy Boundaries: No remote VPN proxy server is used. Your web traffic is never redirected through any external network, analyzed, or stored.

E. Device Administrator (BIND_DEVICE_ADMIN)

Specific Purpose: Used solely upon explicit user activation to protect ZeroPro against unauthorized tampering or uninstallation by stealth malware and to enforce system policies blocking unverified APK sources.

Strict Privacy Boundaries: This permission does not access personal data and can be revoked by the user at any time in Settings.

2. Zero Data Collection, Transmission, or Sharing

No Account Required: You can use ZeroPro without providing an email, phone number, name, or password.
No Cloud Storage: We do not operate external user data databases. Your scanned apps, inspected links, and device metrics stay strictly on your phone.
No Selling of Data: We do not sell, rent, license, or monetize any user data, identifiers, or usage logs to third parties, data brokers, or advertisers.

3. Third-Party Services & Subscriptions

Google Play In-App Billing: Subscription payments and transactions are processed entirely and securely by Google Play. We never handle, store, or have access to your credit card or financial details.
Rewarded Advertising (Optional Free Access): For users choosing to unlock Pro features without paying by watching optional rewarded videos, standard anonymized advertising identifiers may be processed by Google-certified ad networks (e.g. Google AdMob) strictly to verify ad view completion. Paid subscribers experience zero advertisements.

4. Data Retention and Deletion Rights

Because ZeroPro operates on a 100% on-device architecture and collects zero personal data on external servers, we hold no user data to retain or delete. Uninstalling the app instantly purges all local cached definitions and preference files from your device.

5. Children's Online Privacy (COPPA Compliance)

ZeroPro is a utility security application intended for general audiences aged 18 and older. We do not knowingly target or collect personal information from children under the age of 13 (or under 16 in the European Union).

6. Limitation of Liability & Warranty Disclaimer (Legal Protection)

ZeroPro is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied. While ZeroPro employs industry-standard heuristic scanning algorithms to identify threats, no security software can guarantee 100% prevention against all zero-day vulnerabilities or advanced persistent threats.

To the maximum extent permitted by applicable law, the developers of ZeroPro and ZeroInstall shall not be held liable for any direct, indirect, incidental, special, or consequential damages resulting from the use or inability to use the application, unauthorized installations, or system modifications.

7. Contact Information

If you have any questions, feedback, or legal inquiries regarding this Privacy Policy or ZeroPro, please contact our privacy compliance team:

Email: support@zeroinstall.app
Website: https://zeroinstall.app
Developer: ZeroInstall Security Team