CYBER3.AI — Privacy Policy

Last updated: 13 July 2026

CYBER3.AI ("the app") is a mobile and desktop security application — anti-scam protection, threat checks and mobile security. We are built around a simple principle: your data stays on your device. This policy explains exactly what limited information the app processes, and what leaves your device.

What we DO NOT collect

The only personal data we collect: your email (optional)

If — and only if — you choose to use the data-breach check or digital-footprint features, the app sends the email address you type to our servers over an encrypted (HTTPS) connection, to look up whether it appears in known data breaches. This is optional, used only for that feature, and is not shared with third parties for their own purposes. You can request deletion at any time (see "Your data & deletion" below).

How threat checks work (privacy by design)

Checks happen on your device first. When the app needs to confirm whether something is a known threat, it uses k-anonymity — it never sends the actual item you checked:

Scam, notification and call protection (on-device)

To warn you about scams in real time, the app can read incoming notifications and screen incoming calls. This analysis happens entirely on your device; notification and message content and phone numbers are not uploaded. If a link is found inside a message, only the 4-character hash prefix described above is checked. You enable these features manually in Settings and can revoke them at any time.

Web Protection & VPN

Device & PC security scan

The phone/computer security scan reads device security settings and installed applications locally to compute a security score and find risks. Results stay on your device. Nothing from the scan is uploaded to us.

Crowdsourced reports (optional)

If you tap "Report", the app sends only the single indicator you chose to report (for example a suspicious domain, URL or number) plus an approximate country derived from your IP, so our analysts can improve protection for everyone. No personal information is attached.

Data we receive

All data in transit is encrypted (HTTPS/TLS).

Payments & subscriptions

Premium subscriptions are sold either through Google Play Billing (for the app installed from the Google Play Store) or through our authorized reseller and Merchant of Record, Paddle (Paddle.com Market Ltd) for other distribution. The respective processor handles billing, taxes and card details under its own privacy policy. We never receive or store your full card details. We receive only the limited information needed to activate and support your subscription (such as purchase status). See Paddle's Privacy Policy and Google's Privacy Policy.

Your data & deletion

Because the app has no account, there is very little data to delete. If you used the breach/footprint check and want the associated email removed from our systems, email [email protected] and we will delete it. You can also disable any permission (notifications, calls, VPN) at any time from your device settings.

Children

The app is intended for adults (18+) and is not directed to children. We do not knowingly collect data from children.

Changes

We may update this policy; the "last updated" date will change accordingly.

Contact

Questions about privacy or data deletion: [email protected]
ROL PORTAL SERVICES SRL · CUI RO36837313 · cyber3.app

CYBER3.AI — Anti-scam protection & mobile security.