The revised free/Premium split and chat account-linking behavior below apply to ADS versions that include them. Older installed versions may retain their earlier feature limits. Availability can differ during rollout; this policy does not announce a release or open chat signup.
Scope
This policy covers the ADS Security Android application. Purchases, the ADS website and support communications have their own privacy notices. The app’s local vault features do not require an ADS account. Where available in your installed app, optional ADS Secure chat sends account information and encrypted messages to ADS’s chat server. Read its chat privacy notice, terms and account-deletion instructions. ADS does not operate a server that receives the app's password vault, autofill profiles, file-vault contents or saved simulation places.
Information stored on your device
Passwords and autofill profiles are encrypted in app-private storage with Android Keystore keys protected by your device screen lock. Profiles can contain names, email addresses, phone numbers and postal addresses that you choose to save. The file vault encrypts file contents and names and has its own PIN, pattern or password. Saved Geo Spoofer places are encrypted locally. Call-blocking rules, selected phone numbers, preferences, browser-session request counters and local activity/performance information remain in app-private storage. ADS does not save a browser history database; the Session history menu displays in-memory navigation history while the browser is open. This list is not saved for later sessions. The app does not contain an advertising network or analytics service.
Autofill and app linking
Android supplies form information when you use ADS Autofill. ADS uses the requested app or website identity to select saved entries. Selected login or profile details are delivered to the destination app or browser after authentication and the applicable confirmation. That destination handles the information under its own privacy practices. ADS can examine user-launchable installed apps locally to let you link credentials and verify app signing identities; it does not upload an installed-app list. Passkeys, payment cards and verification-code autofill are not supported.
ADS Browser and browser-contained ad blocking
ADS Browser requests websites and their resources using Android WebView. Requested websites, advertising/content providers and the network resolver can receive your network address, page/resource requests and information you submit. ADS Browser, its ad and tracker filtering and browser-data cleanup are free. This edition does not provide a VPN, change system DNS or filter traffic from other apps. Its bundled domain list blocks matching subresource requests only inside ADS Browser; counts are held for the browser session and are not counts of visible ads. Main pages are not blocked solely because their domain appears in the list. HTTPS navigation is required and certificate errors are not bypassed. Websites may still display ads, and some forms or sites may not work in this limited browser.
JavaScript and origin-scoped website storage are enabled for modern website compatibility. JavaScript can be disabled from the browser menu. Third-party cookies, file/content access, browser geolocation, website permission requests, downloads and file uploads are not supported. First-party cookies, website storage and WebView cache can remain in app-private storage until you choose Clear browsing data, clear app storage or uninstall. This control removes WebView cookies, cache, web storage and in-memory history; it does not erase your password/profile/file vaults. Search text is sent to DuckDuckGo over HTTPS only when you submit a search, not while typing. DuckDuckGo receives the submitted query and connection metadata, including your network address. ADS does not upload browsing history to its own server. Clearing browser data does not erase records held by websites or guarantee forensic erasure. WebView Safe Browsing may use Google's safety services under the WebView provider's policies; it is not a claim that every site is safe.
Google Play Premium subscriptions
The Play edition is a free download with optional monthly or yearly Premium for Secure chat conversations and Geo Spoofer. New chat-account creation through ADS requires Premium in the app; existing chat account controls remain free. Password and file vaults, autofill/profiles, call blocking, ADS Browser, vault import/export and encrypted vault recovery are free within technical and device limits, without a paid capacity tier. Google Play processes payment and purchase-account information under its policies; ADS does not receive your Google password or payment-card details. The app checks purchase status with Google Play and, for a relevant purchase or checkout-readiness check, contacts ADS's HTTPS verification service. That service receives the purchase token when verifying, a fresh challenge and a hash binding to a random app-installation identifier. It requests only subscription product/plan, status, expiry and acknowledgement/test-state fields from Google, acknowledges valid purchases, and signs a short-lived entitlement. Vault credentials, personal profiles, files, saved places, phone rules and browsing history are not part of these requests. If you choose to redeem an ADS-issued complimentary access code, the code, installation binding, fresh challenge and connection IP are sent to the same verification service. A valid code grants installation-level Premium access for up to 72 hours without starting a payment or subscription. Chat also requires activation for an approved chat account; redeeming the installation-level code alone does not authorize an arbitrary chat account. The app stores the signed access grant, not the code; code rotation or disabling prevents new grants while existing offline grants expire within 72 hours.
The verification service has no application database or request-body/token logging. Its hosting/network provider can process IP addresses, rate-limit counters and operational metadata under its own policies. Google and legally required business purchase records have their own retention. Signed subscription status and the random installation identifier are stored in app-private local storage, separate from vault encryption keys. The installation-level Premium grant used for Geo Spoofer can be cached for up to 72 hours and never beyond the verified paid period; an online refresh is needed after expiry or a detected clock rollback. Chat instead uses the separate online account membership and shorter paid grants described below; it does not receive 72 hours of offline conversation access from that local grant. Subscription checks and payments therefore are not fully offline or anonymous. A chat account is not required for subscriptions or local vault features.
Premium chat access also links a verified subscription to one chat account. ADS verifies the account through the chat service using the access token transiently; the linking service does not save or log that token. A random account-bound challenge expires after five minutes and is used once. The signed chat grant contains the chat account ID, a hash of the installation identifier, product/plan, challenge and purchase-token hashes (including an earlier token hash when a subscription is replaced), not payment-card details or a purchase amount. Paid chat grants last at most 15 minutes and never beyond the verified paid period; explicit approved complimentary-account access may last up to 72 hours. A protected service record binds a subscription and its replacements to one chat account across devices, preventing reuse for another account. It does not contain message text or the raw Play purchase token. Minimal purchase-hash/account bindings, earlier-token hashes and deletion-replay records may remain after account deletion while needed to enforce an entitlement, prevent purchase reuse or prevent a restored deleted account from returning. ADS reviews this security need with its operating records and removes information no longer needed; no automatic reassignment or universal 90-day expiry is promised for these minimal records. Whole-server backups can contain these records and follow the 30-day backup limit. A public restore must reconcile later deletions, account restrictions and purchase-account bindings before exposure.
Cancellation is managed in Google Play and preserves Premium through the verified paid period. Subscription expiry does not delete saved local vault data or prevent reading, editing, autofill, deletion, export or recovery of existing local vault items. Existing chat account sign-in, recovery, deletion, local cleanup and support remain available without payment. A lapse restricts Premium conversation access and messaging. Deleting a chat account does not cancel a Play subscription. Technical safety/storage limits still apply. A new installation has independent app-private data and must restore encrypted backups explicitly. Restoring purchases restores the subscription, not vault contents.
Optional maps, address suggestions and Geo Spoofer
Online maps and address searches require your consent in Geo Spoofer. Map requests go to OpenFreeMap and related map-data endpoints; requests reveal your network address and viewed map areas. Android's geocoding provider can receive the address text you search for, including partial text while suggestions are enabled. Provider availability and retention vary with the device. Choosing a simulation location does not require ADS to read or upload your actual GPS location. Android location permissions enable the mock-location functionality. Saved places remain encrypted on your device. Turning off online access stops new online requests; a request already sent may finish at its provider. Android marks simulated locations as mock locations, and other apps can detect or reject them. Simulation is started explicitly and can be stopped in ADS.
Call blocking and contacts
When you choose ADS as your call-screening app, Android sends incoming-call details needed to apply your local blocking rules. Optional Contacts permission allows Android to deliver calls from saved contacts for screening; ADS does not read or upload your address book. ADS does not request microphone, SMS or call-history access. Phone numbers in blocking rules are stored locally. Android and your carrier control which calls can be screened.
Password breach checks and external links
A password breach check connects to Pwned Passwords only when you request it. ADS sends the first five characters of a SHA-1 password hash, not the full password or full hash. The provider sees the request and your network address. Opening an external website, browser settings, email app or phone app involves that application's privacy practices. Information you voluntarily send to ADS support is handled to answer your request; do not send passwords, vault files, backup passphrases or authentication codes.
Encrypted backups and selected documents
You can export passwords or autofill profiles separately into passphrase-encrypted backup files. Exports require fresh device authentication. Restore requires the backup passphrase, review and device authentication before entries are added. Backups do not include file-vault contents or Geo Spoofer places. ADS cannot recover a forgotten backup passphrase. The Android document provider you choose receives the encrypted file and its filename; a cloud provider may sync it. ADS does not upload backups to its own server or keep your backup passphrase. Your provider controls retention, trash and other copies.
Importing a password CSV gives ADS access to the file you select. The CSV contains readable passwords; delete it and unwanted copies after checking the import. Junk cleaner scans only permitted ADS cache locations. It can also access document metadata and request deletion of documents you select and confirm. Selected providers may be cloud-backed and deletion can affect their copies. ADS cannot directly clear other apps' private cookies or caches; settings shortcuts leave that action to Android or the browser. File-vault imports and exports access only the documents or folders you authorize, and explicit file exports create outside copies.
Permissions and controls
Android grants permissions and roles for the functions you enable: Autofill, call screening, optional Contacts, mock location/location services, foreground-service notifications. You can decline optional permissions, stop Geo Spoofer, disable online maps/search, remove ADS as the autofill or call-screening provider, and revoke document access through Android controls. Geo Spoofer can end after force-stop, reboot, revoked permissions or device battery restrictions. ADS does not provide a PIN gate for Android's uninstall process.
Retention and deletion
Local entries remain until you delete them, clear the app's storage or uninstall ADS. Passwords can be deleted individually or through Delete all passwords after confirmation and fresh device authentication; profiles, saved places and vault files have their own controls. Android app-private data and its encryption keys are removed on uninstall. Without a usable recovery copy, local encrypted data can be permanently lost after uninstall, storage clearing, device failure or loss of device keys. Delete outside exports, backups, originals and provider trash separately if you no longer want them. ADS cannot delete information already held by a destination app, resolver, map/geocoding provider or document provider. Those providers control their own retention and lawful disclosures.
Chat support and server retention
ADS checks support, safety and deletion requests daily. Verified account-and-associated-data deletion requests are handled within 30 days after ownership verification. Ordinary message history has a 90-day target with scheduled server cleanup; required state and metadata can remain. Closed case contents and support correspondence are kept up to 90 days after closure, except documented legal/security holds; verified deletion can require earlier removal. Minimal action/deletion records can remain for accountability and recovery safeguards. The operator manually captures encrypted backups weekly and expires all copies within 30 days from capture. These are manual procedures, not an installed timer. Resend publishes 30-day email-record retention; Cloudflare and Gmail have separate provider practices. Read the chat privacy notice and deletion page for limits, reports, logs, recipient copies and offline-restoration safeguards. Availability and signup limits are separate from these data-handling duties.
Security and changes
Encryption reduces risk but does not promise complete anonymity, undetectable mock locations or absolute security. Protect your device screen lock and backup passphrase. We will update this policy when app data practices change. Contact advanceddsinc@gmail.com for privacy questions. ADS cannot remotely recover or delete app-local vault information because it does not hold that information.