Frautect Privacy Policy

Effective date: 17 October 2026
Last updated: 17 October 2026
Applies to: the Frautect mobile app for Android (package com.frautect) and the Frautect services it connects to.

1. Who we are

Frautect ("Frautect", "we", "us", "our") is operated by Frautect Technologies Private Limited (CIN U62099GJ2024PTC155224), a company registered in India with its registered office at H/414+415, Sumel-11, near Namaste Circle, Shahibag, Ahmedabad, Gujarat 380004, India.

We are the data fiduciary (data controller) for the personal data described in this policy.

If you have a question or complaint about your data, contact us:

• Email: support@frautect.com
• Grievance Officer: Babulal, CEO and Founder, support@frautect.com, at the registered office address above. We acknowledge a grievance within 24 hours and aim to resolve it within 15 days.

2. What Frautect does

Frautect helps protect your Android phone from fraud and malware. It:

• checks the apps installed on your phone against our threat database and verifies their developer signing certificates, to find fake, cloned, or malicious apps;
• checks your phone's security settings (screen lock, developer options, USB debugging, root, accessibility services, device administrators, work profiles) and your Wi-Fi network (open networks, proxies, captive portals);
• verifies Google Play links and APK files that you share with Frautect;
• lets you report scam websites, social media posts, and apps to us.

To provide these features we must process some data about your device and the apps on it. This policy explains what we process, why, and the choices you have.

3. Data we collect and why

3.1 Account information

3.2 Information about the apps installed on your phone

Frautect reads the list of apps installed on your phone, but only after you agree to "App Checks" on the disclosure screen shown when you first set up the app. Android grants this access through the QUERY_ALL_PACKAGES permission. This is the core of the service: without it we cannot find malicious apps. If you choose Not now, Frautect does not read or send this information. You can turn App Checks off at any time (see section 9).

What we send to our servers, for each app checked (when you run a scan, or automatically when an app is installed or updated if Background Monitoring is on):

• the app's package name (for example com.example.app) and its display name;
• the app's installer (for example, Google Play Store or "unknown source");
• whether it is a system app or disabled;
• the SHA-256 fingerprint of the app's signing certificate.

We use this to tell you whether each app is genuine, impersonating another app, or dangerous, and to suggest genuine alternatives.

What stays on your phone and is never sent to us:

• each app's requested and granted permissions, version, size, install and update dates, and icon;
• app usage times (only if you grant Usage Access — see section 3.5);
• network security settings of other apps.

We never read the data inside other apps — your messages, files, photos, passwords, or anything else those apps store.

3.3 Device and network security checks

Frautect checks your phone's security settings and your current Wi-Fi network. These checks run on your phone. The results (for example "USB debugging is on" or "this Wi-Fi network is open") are shown to you and stored on your phone. They are not sent to our servers.

3.4 Location

Frautect may ask for location permission. It is optional. We use it for three things:

• Wi-Fi checks: to read your Wi-Fi network's name and security type. Android requires location permission for this.
• Fake-GPS checks: to see whether an app is faking your location.
• Your country: to work out which country you are in.

Only your country code leaves your phone. To find your country, Frautect:

1. takes your phone's location and rounds it to about 11 km;
2. asks Android's built-in geocoding service, which is provided by Google, which country that rounded point is in;
3. sends Frautect only the result, a two-letter country code such as "IN".

We do not collect, store, or send your coordinates, and we do not track where you go.

Country from your IP address. If you don't grant location permission, or your phone can't find its location, our servers work out your country from your internet (IP) address instead. We do not use your IP address to find your precise location.

What your country is used for. Your country decides which apps we recommend, which country's app catalogue we check your apps against, and which helplines and content you see. Your account keeps the country it started in. If you appear to be somewhere else later, the app asks you before switching.

3.5 Usage access (optional)

If you grant Android's "Usage Access" permission, Frautect can show when an app was last used and how long it was used for, on that app's detail screen. This information is read and shown on your phone only and is never sent to us. You can turn Usage Access off at any time in Android Settings.

3.6 Device information

We collect:

• a device identifier: the Android ID that Android assigns to Frautect on your device, or, if that is not available, a random identifier that Frautect creates. We use it to keep your sign-in secure, limit the number of devices per account, and prevent abuse of free scan tokens;
• your device make and model, Android version, app version, and whether the app is running on an emulator. We use these to support your device, fix bugs, and prevent abuse.

We do not collect your IMEI, serial number, MAC address, the phone number of your SIM, or your advertising ID.

3.7 Things you share with Frautect

Your Verify App conversation history is stored on your phone only.

Screenshots may contain personal information (names, phone numbers, messages). Please crop or remove anything you do not want to share before you submit a report.

3.8 Clipboard (optional, off by default)

If you turn on Clipboard Link Detection, Frautect checks your clipboard when you open the app, to see whether you have copied a Google Play link. This check happens on your phone. Nothing is sent to us unless you tap to verify the link. It is off until you turn it on, and you can turn it off at any time.

3.9 Analytics

We use Google Firebase Analytics to understand how the app is used so we can improve it. Firebase receives:

• which screens you open and which features you use (for example, "scan started", "report submitted");
• scan totals (how many apps were scanned and how many threats were found — not the list of your apps);
• the package name of an app you report, and of an app you choose as a genuine alternative;
• your search terms;
• your Frautect account ID and account type;
• an app-instance identifier, device model, OS version, and approximate (country/region-level) location, which Firebase derives from your IP address.

We have turned off Firebase's collection of the advertising ID and its advertising and personalisation features. We do not use analytics data for advertising.

3.10 Crash reports

We use Google Firebase Crashlytics to find and fix crashes and errors. When the app crashes or hits an unexpected error, Crashlytics sends us a report containing:

• technical details of the error (the error message and where in the app's code it happened);
• your device model, Android version, app version, free memory and storage, screen orientation, and whether the device appears to be rooted;
• a Crashlytics installation identifier, your Frautect account ID, and your account type;
• a short record of what the app was doing just before the error (for example "scan started: 120 apps"). This record never includes the names of your apps, your email address, or the content of your messages or files.

Crash reports are used only to keep the app stable and to fix bugs. They are not used for advertising.

3.11 App configuration and updates

• Firebase Remote Config: the app downloads settings from Google Firebase that let us switch a feature off remotely if it develops a problem. To deliver them, Firebase receives a Firebase installation identifier, the app version, and your device's language and country.
• App version checks: each request the app makes to our servers includes the app's build number, and the app asks our servers which versions are still supported, so we can ask you to update an outdated version.
• Google Play updates: the app asks Google Play whether a newer version is available and, with your agreement, Google Play downloads and installs it.

3.12 Notifications

If you allow notifications, Frautect shows security alerts on your phone, such as when a dangerous app is installed. These notifications are created on your phone. We do not use push notifications, and we do not send your notification history to our servers.

3.13 Display over other apps (optional)

If you allow "Display over other apps", Frautect can show an instant warning on top of the screen when a dangerous app is installed or when you verify a shared link. We do not read or capture what is on your screen.

4. How we use your data

We use your data only to:

1. Provide the service: sign you in, check your apps, verify links and files, run security checks, show alerts, and handle your reports.
2. Keep the service secure: prevent fraud, abuse, and misuse of scan tokens; enforce our Terms of Service.
3. Improve the service: fix crashes and bugs, understand which features are used, and improve our threat detection. Package names and certificate fingerprints help us find new threats that protect all users.
4. Communicate with you: send sign-in codes and important messages about your account or these policies.
5. Meet legal obligations: respond to lawful requests from authorities and comply with applicable law.

Some app verdicts are produced by automated systems, including our own machine-learning models; no outside AI company receives your data. When a verdict comes from an AI model, the app labels it as an AI recommendation. Verdicts are advisory — you decide what to do with an app.

We do not sell your personal data. We do not use it for advertising. We do not show ads.

5. Legal basis

We process your personal data:

• with your consent, which you give on the App Checks disclosure, when you agree to this policy, and when you turn on optional features or grant optional permissions. You can withdraw consent at any time (see section 9);
• where necessary to provide the service you asked for;
• for legitimate uses permitted by law, such as preventing fraud and keeping the service secure;
• to comply with the law.

This reflects India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules, and, where they apply to you, other data protection laws such as the GDPR.

6. Who we share data with

We share personal data only with:

Our service providers process data only on our instructions and must protect it.

Community reports. We may publish or share the web address, app, or platform named in a scam report — but not your identity — to warn other users and help platforms and authorities take down scams. We may share full reports with law enforcement or with the platform concerned (for example, a social network or app store) when needed to stop a scam.

Some of our providers, including Google, may process data outside India. When they do, we use providers that protect it to the standard required by applicable law.

7. How we protect your data

• All data between the app and our servers is encrypted in transit using HTTPS (TLS). The app refuses unencrypted connections.
• Sign-in tokens are stored in Android's encrypted, Keystore-backed storage, not in plain files.
• Frautect's data is excluded from Android cloud backups and device-to-device transfers.
• Our servers verify every request and limit access to your data to staff who need it.

No system is perfectly secure. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.

8. How long we keep data

We may keep some data for longer if the law requires it, or to resolve a dispute or investigate fraud.

9. Your rights and choices

You have the right to:

• Access the personal data we hold about you, and get a summary of how we process it;
• Correct inaccurate or incomplete data — you can edit your profile in the app;
• Delete your account and personal data;
• Withdraw consent at any time. This does not affect processing that happened before, and some features may stop working;
• Nominate another person to exercise your rights if you die or become unable to do so;
• Complain to our Grievance Officer and, if you are not satisfied, to the Data Protection Board of India (or your local data protection authority).

How to exercise your rights:

• Delete your account in the app: go to Profile → Delete Account.
• Delete your account without the app: visit https://frautect.com/app/delete-account, or email support@frautect.com from your account email with the subject "Delete my account".
• Turn off installed-app checks: Profile → Protection Settings → App Checks. Frautect then stops reading your app list and stops Background Monitoring.
• Turn off other optional features: Profile → Protection Settings (Background Monitoring, Clipboard Link Detection) and Profile → Notifications (Threat Alerts, Instant Threat Alerts).
• Revoke permissions: Android Settings → Apps → Frautect → Permissions.
• Clear search history: in the app's search screen.
• Anything else: email support@frautect.com. We reply within 30 days.

We may need to verify your identity before acting on a request.

10. Children

Frautect is not directed at children. You must be 18 or older to create an account, or have the consent of a parent or legal guardian. We do not knowingly collect personal data from children without that consent. If you believe a child has given us personal data without it, contact support@frautect.com and we will delete it.

11. Changes to this policy

We may update this policy. If we make a significant change, we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires. The "Last updated" date at the top shows when this policy last changed.

12. Contact

Frautect Technologies Private Limited (CIN U62099GJ2024PTC155224)
H/414+415, Sumel-11, near Namaste Circle, Shahibag, Ahmedabad, Gujarat 380004, India
Email: support@frautect.com
Grievance Officer: Babulal, CEO and Founder, support@frautect.com