Privacy Policy — FortiSafe Antivirus

1. Who we are

FortiSafe Antivirus is provided by Tascom Global Network LLC, a company registered in the State of Florida, United States (No. L17000240494), at 13057 Gabor Ave, Orlando, FL 32827. We are responsible (the controller) for the data described here.

Privacy contact: privacy@fortisafe.net.

2. What this policy covers

The FortiSafe Antivirus app for Android (net.fortisafe.antivirus) and the FortiSafe account data it uses. The FortiSafe account is the same one used by FortiSafe VPN, which is a different app with its own policy for what is only its own.

3. What the app accesses on your device — and keeps there

To look for threats, the app has to read things on the device. All of it is processed on the device and is not sent anywhere:

• Files. With the "All files access" you grant, the app reads the files in shared storage (for example, the Download folder) to compute each file's hash and compare it with the signature databases. While real-time protection is on, this also happens in the background for new files. The app does not use file contents for any other purpose.
• List of installed apps. Only after you agree, on a dedicated screen. You can decline — the app keeps working — and you can withdraw your consent at any time in Settings.
• Notifications. Used for threat alerts and for the notice that real-time protection is on. No advertising.
• Scheduled scan, if you turn it on: on the day and time you choose, the app runs the full scan on the device itself — nothing is sent.

What the app stores on the device: the signature databases, scan results, alert history, your choices (for example, ignoring an alert) and, once you sign in to your account, the session, the device's random identifier and the subscription license. All of it in the app's private storage, excluded from cloud backup and from device-to-device transfer. Uninstalling the app deletes this data from the device.

4. What leaves the device

4.1 Signature database updates. The app downloads the databases from the FortiSafe server (db.fortisafe.net), always over an encrypted connection (HTTPS). The request carries only the app version and, when applicable, the version of the database you already have — no identifier of you, your device or your account, even if you have an account. The app checks for new databases when you ask and, automatically, once a day, only on unmetered networks (such as Wi-Fi). As with any download, the server receives the device's IP address to deliver the file. We do not use that address to locate or identify you, and we do not keep a record of it. The hosting provider (Cloudflare), acting on our behalf, receives the IP address to deliver the file and protect the service, under its own privacy policy (cloudflare.com/privacypolicy).

Database authenticity is checked on the device: every update must be signed with the FortiSafe key built into the app; anything else is discarded.

4.2 Account and license. To use continuous protection, you sign in with your email address and a code we send to it. When you turn protection on for a device, the app sends our server (api.fortisafe.net), over HTTPS:

• a random device identifier, created by the app itself. It is not the serial number, the IMEI or any Android identifier; if you reinstall the app, it creates a new one;
• the device name (by default, the model, such as "Pixel 8") and the model, so you can recognize the device in the list and free a slot when you change phones.

The server returns a signed license, which the app stores and checks without internet access. Once a day, and when you open the app, it renews the license with the server, sending the account session and the device identifier. Without a connection, the stored license remains valid until 7 days after the subscription ends. Like any access to the server, these requests carry the device's IP address (see section 8).

These requests never carry your files, their names, your list of apps or your scan results.

4.3 Buying the subscription.

• Through Google Play, in the app. Payment is made and billed through Google Play: we do not receive your card or payment details. To link the purchase to your account, the app gives Google Play an account code (the account's internal identifier, never your email address), and the app sends our server the purchase receipt. From Google we receive the product, the plan, the subscription status (including whether it is in the free trial), the dates and the purchase identifier.
• On the fortisafe.net website. When purchases through the website exist, payment will be processed by the website's payment companies, and the data from that purchase follows the table in section 8. For that purchase, we also keep the country and state of the billing address and proof of the version of these documents you accepted. If the billing address or the card's country points to one of the places in section 4.5, access isn't enabled and the payment is held until a person reviews it.

4.4 VirusTotal lookup — only when you ask. On an alert's details screen you can ask for a second opinion. The app first tells you what will happen; if you confirm, it opens the VirusTotal website in your browser with the file's SHA-256 hash. The app does not send the file, its name or anything other than the hash. If the alert is about an installed app, the file is that app's package (APK), and the hash reveals which app it is. VirusTotal, like any website, will also see your IP address and browser data and, if you are signed in to an account there, may associate the lookup with it. From that point VirusTotal's privacy rules apply.

4.5 Location check. To comply with sanctions and export laws, when the app registers the device or requests the license, the server checks the country and region of your IP address and refuses requests from Belarus, Cuba, Iran, North Korea, Russia, Syria, Crimea, Sevastopol, Donetsk and Luhansk. This check records nothing in your account. For purchases through the website, when they exist, the refusal and the held payment are recorded, without the IP address.

4.6 Disputing an alert — only when you send it. If you tap "Dispute this detection", the app opens your email app or your device's share screen with a message ready to send to support@fortisafe.net. It contains the file's name and path, the app (if any), the hashes, the database, the alert date and the app version. You see the text, can change it, and nothing goes out unless you send it. We also receive your email address.

4.7 Nothing else. The app contains no ads, trackers, usage analytics or libraries that send crash reports.

5. Account and subscription

• Without an active subscription: the app does not scan or protect the device; anything already found can still be removed, and the daily database update continues.
• With the subscription: manual scanning, "share to scan", real-time protection, scanning each app when it is installed, and scheduled scans. The price appears on Google Play before you buy, with a 7-day free trial for people who have not used the trial yet.
• Devices: each plan allows a number of devices. You can see and free devices in the app; there is no limit on changing devices.
• FortiSafe VPN plans: some VPN plans include the antivirus's continuous protection, on the same account.

6. Who we share with

No one other than those who provide the service to us or to you:

• Service providers acting on our behalf: Cloudflare, Inc. (hosts the databases, the website and the account server and protects them against attacks), Neon (database for accounts, devices and subscriptions, in the United States) and Resend (sends the email with the sign-in code and the support messages).
• Google Play: processes purchases made in the app and tells the app when a new version is available, under Google's privacy policy.
• The website's payment companies, when purchases through the website exist.
• VirusTotal: only when you choose to look a file up (section 4.4).

We do not sell data and we do not share it for advertising.

7. Security

• Encrypted connection (HTTPS) for every access; the app refuses unencrypted connections.
• Digitally signed databases and licenses, checked on the device.
• The sign-in code is stored on the server only as a hash.
• App data only in the app's private storage, excluded from cloud backup and device-to-device transfer.

8. What we keep and for how long

9. Your rights and account deletion

You can ask for access to, correction of or deletion of your data. To delete your account: in the app, under Settings › Account › Delete account; on the page www.fortisafe.net/en/excluir-conta-antivirus; or by writing to privacy@fortisafe.net from the account's email address. We reply within 15 days. To protect you, we may ask you to confirm the request with a code sent to the account's email address. When you delete it, we delete the account, the session and the devices; the subscription record and the access logs are kept for the period the law requires (section 8). Deleting the account does not cancel a subscription bought through Google Play: cancel it in the Play Store as well.

• Brazil (LGPD): controller Tascom Global Network LLC; data protection contact: privacy@fortisafe.net; your rights are in art. 18 of the LGPD, and you may petition the ANPD.
• European Union and United Kingdom (GDPR and UK GDPR): rights under arts. 15 to 22; complaint to your country's supervisory authority.
• California (CCPA/CPRA): we do not sell or share personal data for cross-context behavioral advertising.

10. Children

FortiSafe Antivirus is intended for people aged 18 or over. If we learn that we received data from a child, we delete it.

11. International transfer

Tascom is a United States company, and account data is kept mainly there: the database is in Ohio, and the account server and the database download run on Cloudflare's network, from servers in several countries. The email with the sign-in code is sent from São Paulo. For people living in Brazil, the European Union or the United Kingdom, the international transfer relies on the standard contractual clauses offered by the providers, where they exist, and on its being necessary to provide the service you use (LGPD, art. 33; GDPR, arts. 46 and 49).

12. Changes to this policy

This page always shows the version and the date it took effect. When we change something relevant, we will announce it in the app, on this page and, if you have an account, by email, at least 30 days in advance.

13. Contact

• Privacy and account deletion: privacy@fortisafe.net
• Mail: Tascom Global Network LLC, 13057 Gabor Ave, Orlando, FL 32827, United States