Privacy Policy for DeskBLE 

Effective Date: August 19, 2026

Last Updated: August 19, 2026

DeskBLE ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy governs the manner in which DeskBLE collects, uses, maintains, and discloses information collected from users of the DeskBLE mobile application (the "Service"). We operate on a strict principle of data minimization, transparent processing, and a "local-first" privacy architecture to safeguard your device against adware, bloatware, and malicious software.

1. Information We Collect and Process

DeskBLE performs on-device analysis to identify potential security threats and privacy risks. The Service inspects only the technical metadata strictly necessary to perform environmental security audits and threat detection:

• Installed Application Metadata: We scan and audit application names, package identifiers (e.g., com.example.app), version information, and declared manifest permissions of apps installed on your device to identify deceptive launchers, fake utilities, and adware patterns.

• Cryptographic Hashes (SHA-256): The app generates binary cryptographic SHA-256 fingerprints of installed application files (APKs) locally for integrity verification. These are unique identifiers for file contents and do not contain personal data.

• Permission & Privacy Audit Data: We analyze combinations of permissions (e.g., Camera, Microphone, Location, or Contacts access paired with Internet access) to alert you to high-risk "Red Flag" apps and potential spyware behaviors. This analysis is executed entirely on your local device.

• Network Security Status: The app checks the validation and encryption status of your active Wi-Fi connection (distinguishing between "Encrypted" and "Open" networks) to alert you to insecure connections.

2. Information We Do Not Collect

DeskBLE does not collect, track, store, or transmit Personally Identifiable Information (PII). We explicitly do not access, store, or process:

• Precise or approximate geographic location data (Wi-Fi status is used solely for security auditing, never geo-location).

• IP addresses, browsing activity, or web history.

• Specific Wi-Fi network names (SSIDs).

• Personal names, email addresses, or phone numbers.

• Contact lists or address books.

• Unique hardware identifiers (such as IMEI, MAC address, or Android ID).

3. Purpose of Processing

The technical data collected is used solely for the following security purposes:

• Malware & PUP Detection: Identifying known malware, adware, bloatware, and potentially unwanted programs (PUPs).

• Sensor & Privacy Alerts: Alerting you to "Red Flag" apps that pair sensitive device sensors with network connectivity.

• Safety Scoring: Executing environmental audits to calculate your overall device Safety Score and deliver actionable mitigation steps.

4. Data Transmission and Third-Party Integrations

While DeskBLE is built with a local-first design, minimal, non-identifiable technical data is transmitted to support core security features:

• Threat Intelligence (MalwareBazaar): SHA-256 hashes are sent anonymously over secure HTTPS to the MalwareBazaar API (operated by abuse.ch) to cross-reference global malware repositories. DeskBLE transmits only the calculated hash; actual application files, personal data, and device identifiers are never sent.

• Over-the-Air (OTA) Threat Updates: DeskBLE connects to a public repository (GitHub) to fetch and download the latest threat definition rules. No user or device data is transmitted during this update process.

• Platform & System Services: DeskBLE leverages native Android and Google Play Services (e.g., WorkManager) exclusively to orchestrate scheduled background scanning and critical security alerts.

5. Local Storage and Hardware Encryption

We enforce strict local data protection mechanisms:

• On-Device Hardware Encryption: All scan results, scan history, safety metrics, scan timestamps, cached threat intelligence ratings, and your custom "Trusted Apps" (whitelists) are stored locally using AES-256 hardware-backed encryption (EncryptedSharedPreferences).

• No Remote Telemetry: We do not operate remote telemetry databases, centralized user profiles, or cloud repositories. Your scan logs and app inventories never leave your physical device.

6. User Control and System Modifications

DeskBLE provides administrative shortcuts, such as the "Fix All" and "Browser Protection" features, while ensuring complete user transparency:

• No Silent Modifications: DeskBLE never silently uninstalls applications or wipes device data in the background. Corrective actions route directly to native Android System Settings, requiring explicit user authorization (e.g., manual "SECURE" confirmation).

• Whitelist Management: You maintain full administrative authority to whitelist ("Trust") or ignore flagged applications.

• Data Deletion: Because all operational data is stored locally, you retain absolute data sovereignty. You can permanently erase all stored logs, whitelists, and scan records at any time by clearing the application's storage in Android Settings or by uninstalling DeskBLE.

7. Required System Permissions

DeskBLE requires explicit Android system permissions to execute threat audits. These permissions are used exclusively for security operations:

• POST_NOTIFICATIONS: Delivers real-time warnings when active background threats are detected. Never used for marketing or promotional campaigns.

• ACCESS_WIFI_STATE: Evaluates the encryption state of the active Wi-Fi connection.

• ACCESS_NETWORK_STATE: Determines network availability to verify threat definitions and active internet status.

• QUERY_ALL_PACKAGES: Audits installed packages to detect hidden adware, bloatware, and rogue overlay behavior.

• REQUEST_DELETE_PACKAGES: Invokes native Android uninstallation dialogs for user-authorized threat removal.

• HIDE_OVERLAY_WINDOWS: Powers "Fortress Mode," suppressing malicious third-party screen overlays during security audits.

8. Data Sharing and Monetization Prohibition

We maintain a strict zero-monetization policy. DeskBLE does not sell, rent, lease, trade, or distribute your technical metadata or device status to advertisers, data brokers, tracking networks, or commercial third parties under any circumstances.

9. Global Standards and Compliance

DeskBLE is localized in over 15 languages and enforces consistent data protection standards globally. Our strict on-device processing and data minimization architecture fully align with international privacy regulations, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

10. Children's Privacy

DeskBLE is a general security utility and is not targeted at children under 13 years of age. We do not knowingly collect, process, or store data from children under 13.

11. Policy Updates

We may update this Privacy Policy periodically to reflect enhancements in security auditing, technical capabilities, or regulatory requirements. Updates will be indicated by the "Last Updated" date at the top of this document.

12. Contact Information

For questions, feedback, or regulatory inquiries regarding this Privacy Policy, please contact:

• Support Email: ksxusa@gmail.com

• Website: https://www.ksxusa.com