CyberSecurity ThreatBrief

Package: com.threatbrief.mobile · Effective date: July 17, 2026 · Last updated: July 17, 2026

Plain-English summary: ThreatBrief does not require an account, does not collect your personal information, and does not sell or share any data with advertisers. The only network requests the app makes are to fetch public cybersecurity news from our server.

1. Who We Are

CyberSecurity ThreatBrief ("ThreatBrief", "we", "our", or "us") is a mobile application that aggregates publicly available cybersecurity threat intelligence — vulnerability disclosures, security advisories, and industry news — into a single feed.

2. Information We Do Not Collect

We do not collect, store, or transmit:

Your name, email address, or any account credentials

Device identifiers, advertising IDs, or IDFA/GAID

Location data

Browsing or search history outside the app

Contacts, photos, or any other device content

Crash reports or usage analytics sent to any third-party service

3. Information That Stays on Your Device

The following preferences are saved locally on your device using Android's standard storage and are never transmitted to us:

Whether you have unlocked the Pro tier (stored in app-private AsyncStorage)

Your selected severity filters and category preferences

This data is removed when you uninstall the app or clear app data.

4. Network Requests

When you open the app, it fetches the current threat feed from our API server. This request contains:

Your IP address (standard for any internet request — we do not log or store it)
Standard HTTP headers (User-Agent, Accept, etc.)

We do not link these requests to any individual identity and we do not retain server access logs beyond routine 24-hour rolling infrastructure logs.

5. In-App Purchases

The optional Pro unlock ($5 one-time purchase) is processed entirely by Google Play Billing. We do not see, handle, or store your payment card details. Google's privacy policy governs that transaction. We receive only a confirmation from the Play Store that a purchase was completed.

Google Play privacy policy: policies.google.com/privacy

6. Push Notifications

If you grant notification permission, we use Expo's push notification service to send alerts about high-severity threats. A push token is generated on your device and stored on our server solely to deliver notifications to your device. We do not use push tokens for advertising or share them with third parties. You can revoke notification permission at any time in Android Settings.

7. Data Sources

The threat intelligence content displayed in the app comes from publicly available sources:

NIST National Vulnerability Database (NVD)
CISA Alerts and ICS Advisories
KrebsOnSecurity, BleepingComputer, The Hacker News, SecurityWeek, Dark Reading (RSS feeds)
Microsoft Security advisories

All content is publicly accessible; we do not scrape private or authenticated sources.

8. Children's Privacy

ThreatBrief is intended for security professionals and is not directed at children under 13. We do not knowingly collect any information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy or the app? Contact us at:

CyberSecurity ThreatBrief
App ID: com.threatbrief.mobile
Email: zadapplications@gmail.com