Who operates the service
ADVANCED CYBER SECURITY DOO BEOGRAD - VRACAR is responsible for the personal data described here. Our address is RUDNICKA 8, Beograd (Vracar), 11000, Serbia. Contact support@acs.co.rs for privacy questions, support or requests about your data. Our company website is acs.co.rs.
Scanning stays on your device
ARMADA Antivirus scans content that Android permits it to access. You choose files and folders and control the relevant Android permissions. The app does not inspect other apps' private storage.
File contents, file names and paths, scan results, local scan history and quarantine content are processed on your device and are not uploaded to our licensing service. Installed-app scans inspect accessible package artifacts locally; licensing does not upload your package inventory. Quarantine and permanent deletion are separate actions.
Local app data includes installation keys, access grants, account and session state, your selected account's verified email, preferences, scan history, quarantine metadata and threat-definition information. A result of NO_THREAT_DETECTED describes the scan evidence; it is not a guarantee of safety.
Google sign-in and your original trial
Google identity tokens can also contain optional profile claims such as a name, profile-picture URL, language or organization domain. When Google includes these claims, they travel within the signed token to our service. We do not build a profile from these optional claims, download the profile picture, or retain the optional fields as account records. The verified account identifier and email are handled as described below.
When you choose Google sign-in, the app sends a Google identity token to our service to verify your account. The token contains an account identifier and verified email. We return the verified email for account display and derive a keyed pseudonymous account identifier for licensing. Pseudonymous records are still personal data.
The app also sends ANDROID_ID over HTTPS for protected account operations, including signed-in account status refreshes. Android scopes this identifier to your device, Android user and app signing key. We derive a keyed phone marker and associate it with your verified account and a separate installation public key. This enforces the original trial and prevents repeated trial claims. We do not use it for advertising or tracking across ARMADA products.
The first qualifying phone receives one original trial. Reinstalling on that phone can restore only the remaining time; a second phone does not receive that trial. A factory reset, another Android profile or a changed app signing context can affect recognition. Play Integrity helps protect eligible requests; it does not independently verify the raw ANDROID_ID supplied by the app.
You can decline Google sign-in. Access then depends on any independently available license or review access. If the available offer requires account verification, declining sign-in leaves its protected scanning and protection features unavailable; the app does not promise a separate no-sign-in offer to every user. Signing out stops use of the selected account session; it does not cancel a Google Play subscription.
Purchases and licensing
Google Play processes payments. We receive purchase tokens, product and offer identifiers, purchase relationships, timestamps and subscription status to verify access and reconcile renewals, expiry, refunds and revocations. We store purchase tokens encrypted, together with keyed lookup values and licensing records. We do not receive payment-card details or learn the payer's Gmail address from a purchase.
Protected requests also use installation public keys, signed proofs, one-use challenges, session credentials, request identifiers and, where required, transient Play Integrity tokens. Independent paid, Manual, Promo, Founding and temporary REVIEW rights are handled separately from account trial eligibility.
New annual subscriptions use a verified ARMADA Google account for ownership and later recovery. That selected account can differ from the Google account used by Play for billing. We send a pseudonymous account reference to Google Play with checkout and verify the returned purchase relationship on our service. We retain the minimum account-to-purchase and subscription-lineage records needed to restore that paid subscription after a reinstall or loss of the old installation key. Restoration does not create a new charge or trial.
Linking an older installation-owned purchase requires your explicit request, a verified account session, proof from the surviving original installation key and provider verification. Possession of a purchase token or email alone cannot assign ownership. If the original key is lost and no ownership link exists, automatic account recovery is unavailable. Changing the selected account does not transfer purchases between accounts.
Why we process this information
We process account and licensing information to provide the access and account functions you request and to perform the associated service contract. Our legitimate interests in securing the service and preventing repeated trials, fraud and replay attacks support the minimum account/device bindings and security records used for those purposes. We process privacy requests to respect your rights and meet applicable legal obligations. You may contact us to object to processing based on legitimate interests.
Eligibility and licensing decisions are automated using account, phone, provider and security evidence. If you believe a decision is wrong, contact support for review. An unsuccessful or unverifiable request does not establish eligibility.
Providers and locations
Our licensing service and database backups are hosted at Hetzner in Germany. Authorized administration and support are provided by our company in Serbia. Backups currently remain on the same server.
Google provides sign-in, Play Billing, purchase verification, Play Integrity and subscription notifications. Google's own handling of account, device and payment information is described in its Privacy Policy and the applicable Play terms. Its service provider depends on your region, generally Google Ireland Limited for the EEA and Switzerland and Google LLC elsewhere. Google may process information in countries outside Germany, including the United States; see its data-transfer information. Contact us for information about arrangements applicable to your data.
The external account-deletion page loads Google's sign-in library only after you choose to verify your account. Reading this privacy page does not load that library or use analytics or advertising cookies. The deletion flow uses a short-lived security cookie to protect your request.
Network and server infrastructure may process connection information such as IP address, request time, requested address, browser information, response status and error details for delivery, troubleshooting and security. Do not put passwords or authentication tokens in support messages or web addresses.
We do not sell personal data or use account/phone bindings for advertising. The app does not include a general advertising or analytics SDK.
Google SDK diagnostics
The Google Play Billing library includes technical event reporting to Google. This can include billing operation outcomes, application and library versions, event timing, Android version and build, device model/manufacturer, network type, language, configured country, time-zone offset and SIM operator code. These technical records support operation and diagnosis of the billing integration; they are not scanned file contents or ARMADA scan results.
The library can queue diagnostic events in app-local storage for later transmission. These events are not limited to in-memory processing of a single request. Google handles the received diagnostic information under its applicable terms and privacy policy; our account-deletion process does not promise to erase every record independently held by Google.
When optional environment checks are enabled for this application in Google Play, Google also processes app activity information about apps that can capture the screen or control the device, and device information about Play Protect status. This processing belongs to the Google integrity service; it does not mean ARMADA uploads its local scan results or package inventory.
Google Play Integrity processes request and application metadata, Play licensing information and device attestation information to protect licensing requests. ARMADA receives integrity decisions and retains minimum associated security records. The application has no general advertising or audience-tracking integration; this does not mean its Google components send no technical data.
Retention and account deletion
Use the app's account-deletion control, the account-deletion page, or email support@acs.co.rs. The web flow verifies your Google account without requiring the app, its old installation key or ANDROID_ID. We may need to verify an email request before acting on it.
A submitted request is pending until an operator completes it. Our handling target is to remove eligible active account associations and sessions within 30 days of a verified request. We will explain any applicable exception or additional verification needed. You can check the request status through the authenticated flow.
- Active account associations and sessions are kept to provide the account service, until fulfilled deletion removes them. Signing out revokes access but is not account-data deletion.
- A minimum pseudonymous consumed-trial record remains while the one-trial offer operates, with an annual review of whether it is still needed. Deletion does not grant a new trial.
- Purchase, minimum pseudonymous purchase-ownership and independent-license records remain where needed to service those rights, prevent reassignment to another claimant, reconcile provider events and resolve related disputes. Fulfilled account deletion deactivates active account-to-purchase associations and removes eligible sessions; provider renewals alone do not reactivate them. A later explicit, verified recovery by the same owner may re-establish the account association. Deleting the account does not cancel Google Play billing or grant a new trial.
- Deletion decisions and completion records are retained to demonstrate fulfillment and prevent a database recovery from undoing it. They must remain available for as long as a retained backup or relevant dispute can require them.
- Technical and security records are retained according to their troubleshooting, incident or abuse-prevention purpose and reviewed when that purpose ends. We do not promise that all such records are automatically erased at a fixed interval.
- Database backups are retained for one year from creation with administrator-restricted access. They are compressed tar.gz archives on the same server. Compression is not encryption. Deleted data may remain in an archive until it expires; later deletion decisions must be reconciled before a restored database serves users. Backup creation and expiry are currently handled manually.
Where a specific legal obligation or dispute requires limited retention, we restrict the retained information to that purpose and explain the applicable reason when responding to your request. We do not treat every account record as subject to a blanket legal hold.
Account deletion does not delete local files, scan history or quarantine content on your phone. Manage local data in the app and Android settings. Manage subscription cancellation separately in Google Play.
Your choices and rights
You control Android permissions and selected scan locations and can sign out of the selected account. Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data and object to processing. Contact support using the address above; we may request proportionate verification to protect your account.
You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or another data protection authority competent for your location. Exercising these rights does not require purchasing a subscription.
Material policy changes will be dated and published at this address.