Summary
- FortiSafe Antivirus checks your apps and files on your device. Your files, their names and your list of apps are not sent to us or to anyone else.
- The only connection the app makes on its own is downloading the malware signature databases from our server, over HTTPS. As with any download, the server sees the device's IP address. We do not keep it.
- If you ask for a second opinion on an alert, the app opens the VirusTotal website in your browser with the file's hash (its fingerprint) — only after asking you.
- The app has no ads, no trackers and no usage analytics, and it does not need an account to work.
- Questions and requests: [email protected].
1. Who we are
FortiSafe Antivirus is provided by Tascom Global Network LLC, a company registered in the State of Florida, United States (No. L17000240494), at 13057 Gabor Ave, Orlando, FL 32827. We are responsible (the controller) for the data described here.
Privacy contact: [email protected].
2. What this policy covers
The FortiSafe Antivirus app for Android (net.fortisafe.antivirus). FortiSafe VPN is a different app with its own policy.
3. What the app accesses on your device — and keeps there
To look for threats, the app has to read things on the device. All of it is processed on the device and is not sent anywhere:
- Files. With the "All files access" you grant, the app reads the files in shared storage (for example, the Download folder) to compute each file's hash and compare it with the signature databases. While real-time protection is on, this also happens in the background for new files. The app does not use file contents for any other purpose.
- List of installed apps. Only after you agree, on a dedicated screen. You can decline — the app keeps working — and you can withdraw your consent at any time in Settings.
- Notifications. Used for threat alerts and for the notice that real-time protection is on. No advertising.
- Scheduled scan, if you turn it on: on the day and time you choose, the app runs the full scan on the device itself — nothing is sent.
What the app stores on the device: the signature databases, scan results, alert history and your choices (for example, ignoring an alert), in the app's private storage. This data is excluded from cloud backup and from device-to-device transfer. Uninstalling the app deletes it.
4. What leaves the device
4.1 Signature database updates. The app downloads the databases from the FortiSafe server (db.fortisafe.net), always over an encrypted connection (HTTPS). The server is run by a hosting provider we contract, acting on our behalf. The request carries only the app version and, when applicable, the date (or version tag) of the database you already have — no identifier of you, your device or an account. The app checks for new databases when you ask and, automatically, once a day, only on unmetered networks (such as Wi-Fi). As with any download, the server receives the device's IP address in order to deliver the file. We do not use that address to locate or identify you, and we do not keep a record of it. We do not enable or keep access logs for this download. The hosting provider (Cloudflare), acting on our behalf, receives the IP address to deliver the file and protect the service, under its own privacy policy (cloudflare.com/privacypolicy).
Database authenticity is checked on the device: every update must be signed with the FortiSafe key built into the app; anything else is discarded.
4.2 VirusTotal lookup — only when you ask. On an alert's details screen you can ask for a second opinion. The app first tells you what will happen; if you confirm, it opens the VirusTotal website in your browser with the file's SHA-256 hash. The app does not send the file, its name or anything other than the hash. If the alert is about an installed app, the file is that app's package (APK), and the hash reveals which app it is. VirusTotal, like any website, will also see your IP address and browser data and, if you are signed in to an account there, may associate the lookup with it. From that point VirusTotal's privacy rules apply.
4.3 Nothing else. The app contains no ads, trackers, usage analytics or libraries that send crash reports.
5. Account and subscription
Scanning, real-time protection and removal work without signing up and without a subscription. The subscription (US$1 per month or US$10 per year) is bought and billed through Google Play: we do not receive your card or payment details. To check whether it is active, the app asks Google Play on the device itself; we do not create an account or profile for you.
6. Who we share with
No one, other than what is described above: the provider that hosts the databases (a service provider acting on our behalf), VirusTotal, when you choose to look a file up, and Google Play, which processes the subscription under Google's privacy policy. We do not sell data.
7. Security
- Encrypted connection (HTTPS) for every download; the app refuses unencrypted connections.
- Digitally signed databases, checked on the device before use.
- App data only in the app's private storage, excluded from cloud backup and device-to-device transfer.
- The app's source code is public (AGPL-3.0 license), so anyone can check what it does: github.com/ajldc/fortisafe-antivirus-android.
8. How long
| Data | Where | How long |
|---|---|---|
| Databases, results, history and choices | On your device | Until you clear the app's data or uninstall it |
| IP address in database downloads | We do not keep it | — |
| Hosting provider technical logs | Cloudflare, on our behalf | Under Cloudflare's privacy policy; we keep none |
| Messages sent to [email protected] | Our mailbox | Up to 2 years after the last message |
9. Your rights
Because we keep no personal data about you as a result of using the antivirus, there is usually nothing to access or delete on our side. You can still ask for access to, correction of or deletion of any record that may relate to you by writing to [email protected]. We reply within 15 days.
- Brazil (LGPD): controller Tascom Global Network LLC; data protection contact: [email protected]; your rights are in art. 18 of the LGPD, and you may petition the ANPD.
- European Union and United Kingdom (GDPR and UK GDPR): rights under arts. 15 to 22; complaint to your country's supervisory authority.
- California (CCPA/CPRA): we do not sell or share personal data for cross-context behavioral advertising.
10. Children
FortiSafe Antivirus is intended for people aged 18 or over. The app collects no data from anyone by default; if we learn that we received data from a child (for example, by email), we delete it.
11. International transfer
Tascom is a United States company. The database download is delivered by Cloudflare's network, from servers in several countries; the messages you send us stay with our email provider. For people living in Brazil, the European Union or the United Kingdom, the international transfer relies on the standard contractual clauses offered by the providers, where they exist, and on its being necessary to provide the service you use (LGPD, art. 33; GDPR, arts. 46 and 49).
12. Changes to this policy
This page always shows the version and the date it took effect. When we change something relevant, we will announce it in the app and on this page at least 30 days in advance.
13. Contact
- Privacy: [email protected]
- Mail: Tascom Global Network LLC, 13057 Gabor Ave, Orlando, FL 32827, United States