Privacy Policy — BastionGuard™ Endpoint for Android
Last updated: 26 August 2026
This Privacy Policy explains how BastionGuard™ Endpoint for Android (“BastionGuard Endpoint”, “the App”) handles information while providing antivirus, anti-phishing, ransomware protection and other cybersecurity features.
BastionGuard Endpoint has been designed according to a privacy-first and local-processing approach. The App does not contain advertising, tracking, behavioural analytics or telemetry systems.
1. Our Privacy Principles
BastionGuard™ Endpoint is designed around the following principles:
- No advertising.
- No advertising identifiers.
- No analytics SDKs.
- No behavioural tracking.
- No telemetry.
- No user profiling.
- No sale of personal data.
- No monetisation of user data.
- No BastionGuard user account is required.
- Security analysis is performed locally on the device whenever technically possible.
2. Personal Data Collection
BastionGuard™ Endpoint does not collect personal data for advertising, analytics, profiling, marketing or telemetry purposes.
The App does not create a remote profile of the user and does not maintain a BastionGuard cloud account containing the user’s files, applications, browsing activity, email contents or antivirus scan history.
Information required for antivirus and security analysis is processed locally on the Android device whenever possible.
3. Local Antivirus Scanning
BastionGuard™ Endpoint can scan files, downloaded content, APK packages and other supported files that Android allows the App to access.
Malware analysis is performed locally on the device using BastionGuard security engines, antivirus signatures and detection rules.
Files scanned by BastionGuard are not uploaded to BastionGuard servers for antivirus analysis.
BastionGuard does not use scanned files for analytics, artificial-intelligence training, advertising, profiling or any unrelated purpose.
4. File and Storage Access
To provide full antivirus functionality, BastionGuard Endpoint may request access to files stored in locations that Android makes available to the App.
Depending on the Android version and enabled features, this may include Android’s special All files access permission.
This permission is used exclusively to:
- scan files for malicious or suspicious content;
- scan downloaded files and APK packages;
- provide real-time malware protection;
- detect suspicious filesystem activity;
- quarantine detected malicious files when requested or required by the security feature.
File access is not used for advertising, profiling, analytics or user tracking.
5. Installed Applications
BastionGuard Endpoint may inspect information about applications installed on the Android device when required to perform antivirus and security checks.
Installed application information is processed for security purposes only.
BastionGuard does not create, sell or monetise a profile of the applications installed on the user’s device.
6. Real-Time Protection
When real-time protection is enabled, BastionGuard Endpoint may monitor security-relevant events such as downloaded files, new APK packages, application installation events or filesystem changes.
The purpose of this monitoring is exclusively to detect malware, potentially malicious files and suspicious security activity.
Real-time protection may use an Android foreground service. Android may therefore display a persistent notification while this protection is active.
This functionality does not perform advertising tracking or behavioural telemetry.
7. Quarantine
Detected malicious or suspicious files may be moved to BastionGuard’s private application storage when the quarantine function is used.
Quarantined files remain on the Android device and are not uploaded to BastionGuard servers.
Users can manage quarantined items directly from the App, including restoring or permanently deleting them where supported.
8. Notification Access
BastionGuard Endpoint may optionally use Android’s Notification Access to provide anti-phishing and security analysis for supported notifications.
This feature is disabled unless the user explicitly enables Notification Access through Android system settings.
When enabled, BastionGuard may locally analyse security-relevant information contained in supported notifications, such as visible URLs, domains, sender information, subjects or message previews.
Notification contents are not collected for advertising, analytics, behavioural profiling or telemetry.
BastionGuard does not use Notification Access to build a database of the user’s messages or communications.
The user can revoke Notification Access at any time through Android settings.
9. Browser Shield and Accessibility Service
BastionGuard Endpoint may provide an optional Browser Shield security feature using the Android Accessibility Service API.
The Accessibility Service is used exclusively for security and anti-phishing purposes and must be explicitly enabled by the user.
Its purpose is to help BastionGuard identify potentially dangerous web destinations displayed in supported browser applications.
BastionGuard does not use the Accessibility Service for advertising, user profiling, behavioural analytics or telemetry.
The Accessibility Service is not designed to collect passwords, keystrokes, private messages, form contents or other unrelated personal information.
The user can disable Browser Shield and revoke Accessibility Service access at any time through Android settings.
10. Link Guard and Phishing Protection
BastionGuard Endpoint includes anti-phishing functionality designed to detect suspicious or malicious URLs and domains.
Security analysis is performed locally whenever possible.
When an online reputation check is required, the URL, domain name or other security indicator necessary to perform that specific check may be transmitted over an encrypted HTTPS connection to a security reputation service.
Such communication is used exclusively to provide the security function requested by the user. It is not used for advertising, analytics, tracking, profiling or telemetry.
BastionGuard does not use these security lookups to create a browsing-history profile of the user.
11. Compromised Password Check
BastionGuard Endpoint may include an optional compromised-password check based on the Have I Been Pwned Pwned Passwords service.
The user’s plaintext password is never transmitted.
The password is hashed locally on the Android device. Only the limited hash prefix required by the Pwned Passwords k-anonymity protocol is transmitted to the external service.
The full password and full password hash remain on the user’s device.
BastionGuard does not store or collect passwords through this feature.
12. Antivirus Signature and Security Rule Updates
BastionGuard Endpoint requires Internet access to download updated antivirus signatures, malware definitions, security rules and other threat-intelligence resources.
These update connections are used solely to keep the security engines current.
User files are not uploaded as part of antivirus signature or rule updates.
13. Network Communications
BastionGuard Endpoint does not use network access for advertising or telemetry.
Network access is used only when required for security-related functionality, including:
- downloading antivirus signatures and detection rules;
- retrieving threat-intelligence updates;
- performing optional URL or domain reputation checks;
- performing optional compromised-password checks;
- accessing BastionGuard security services necessary to provide a requested protection feature.
Like any Internet connection, servers contacted by the App may technically receive standard network information required to establish and process the connection, such as the source IP address and basic HTTP/HTTPS request metadata.
This technical network information is not used by BastionGuard Endpoint for advertising, behavioural profiling or telemetry.
14. Locally Stored Information
BastionGuard Endpoint may store information locally on the Android device when required for its normal security operation.
This may include:
- application settings;
- security preferences;
- antivirus signatures and detection rules;
- scan results;
- security-event information;
- quarantine metadata;
- quarantined files;
- local allowlists or blocklists;
- locally stored security decisions.
This information remains under the control of the user on the Android device and is not used for advertising or commercial profiling.
15. Advertising
BastionGuard™ Endpoint contains no advertising.
The App does not integrate advertising SDKs and does not use personal information to display targeted or personalised advertisements.
16. Analytics and Telemetry
BastionGuard™ Endpoint does not include user analytics or telemetry systems.
The App is not designed to transmit usage statistics, behavioural analytics, advertising identifiers, application usage profiles or similar tracking information to BastionGuard.
17. User Tracking
BastionGuard Endpoint does not track users across applications, websites or services for advertising or profiling purposes.
The App does not create commercial behavioural profiles.
18. Sale or Sharing of Personal Data
BastionGuard does not sell personal data.
BastionGuard does not share personal data with advertising networks, data brokers or marketing companies.
Security-related communication with external infrastructure occurs only where technically necessary to provide the security functionality requested by the user.
19. User Accounts
BastionGuard Endpoint does not require a BastionGuard account to use its standard Android security functionality.
The App therefore does not maintain a BastionGuard cloud account containing the user’s antivirus scan history, installed applications, files or browsing activity.
20. Data Retention
Because BastionGuard Endpoint is designed primarily around local processing, security information generated by the App is generally retained locally on the Android device only for as long as required by the relevant feature.
Users may remove locally stored information through the controls available in the App, where provided, by clearing the App’s storage through Android settings, or by uninstalling BastionGuard Endpoint.
21. Data Security
BastionGuard Endpoint is designed to minimise the transmission of information outside the user’s device.
Where network communication is required for a security function, encrypted HTTPS connections are used where supported by the relevant service.
Security-sensitive information stored by the App is kept within Android application storage according to the protections provided by the Android operating system.
22. Permissions and Special Access
BastionGuard Endpoint may request Android permissions or special-access privileges solely when required to provide a security feature.
Depending on the enabled features and Android version, these may include access related to:
- files and shared storage;
- installed applications;
- notifications;
- Accessibility Service;
- foreground security services;
- network connectivity.
Optional permissions and special-access privileges can be revoked through Android system settings.
23. Children’s Privacy
BastionGuard Endpoint is a cybersecurity and device-protection application and is not specifically designed or marketed as a service for children.
The App does not contain advertising or behavioural profiling directed at children.
24. Third-Party Security Services
Certain optional security functions may rely on external services or infrastructure required to perform a specific security operation, such as threat-intelligence updates, antivirus signature downloads, phishing reputation checks or compromised-password checks.
These services are contacted only when technically necessary for the requested security functionality.
BastionGuard does not integrate third-party advertising networks or behavioural analytics services into BastionGuard Endpoint.
25. Relationship with the BastionGuard Website
This Privacy Policy applies specifically to BastionGuard™ Endpoint for Android.
The BastionGuard website may be subject to a separate website privacy and cookie policy because web-server operation and website functionality differ from the processing performed by the Android application.
26. Changes to This Privacy Policy
This Privacy Policy may be updated if BastionGuard Endpoint’s functionality, Android permissions, security services, applicable laws or Google Play requirements change.
The date displayed at the top of this page indicates the latest revision.
27. Contact
For questions concerning this Privacy Policy or the privacy practices of BastionGuard™ Endpoint, please contact:
BastionGuard™
Email: info@bastionguard.eu
Website: https://bastionguard.eu/
Italy
Privacy summary: BastionGuard™ Endpoint contains no advertising, no behavioural analytics, no user tracking and no telemetry. Antivirus analysis is performed locally whenever technically possible. Files scanned by the antivirus engine and quarantined files are not uploaded to BastionGuard servers. Internet access is used only where necessary to provide security functions such as security updates, threat-intelligence lookups and other explicitly requested protection features.