Last updated: 15 May 2026 · Effective: 15 May 2026 · Questions: [email protected]
Plain-language summary: Droidwatch is an Android application security analysis platform. Use it only on files you own or are authorized to test. Analysis reports are yours; we retain only anonymized threat indicators to improve collective defenses. EU users have full GDPR rights. Contact us at [email protected] with any questions.
By creating an account, submitting a file, or otherwise accessing or using the Droidwatch platform ("Service"), you ("User") confirm that you have read, understood, and agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you are acting on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.
If you do not agree to these Terms, you must not use the Service.
The Service is operated by the Droidwatch team ("Droidwatch," "we," "us," "our"). For EU/EEA users, Droidwatch acts as the Data Controller for personal data processed in connection with your account and usage, and as a Data Processor for content you submit for analysis (APK files and derived data). The Data Protection contact is [email protected].
Enterprise customers who require a formal Data Processing Agreement under GDPR Art. 28 may access our standard DPA at /dpa or contact us to execute a customized agreement.
Droidwatch provides static and dynamic analysis of Android application packages (APK, XAPK, AAB) and generates security reports identifying potential vulnerabilities, malicious behaviors, network indicators of compromise (IOCs), and risk scores. The Service includes:
Important: Analysis results are probabilistic outputs of automated systems. They may contain false positives or false negatives. Reports do not constitute legal advice, certification of safety, or a guarantee that a file is free of malicious code.
The Service is intended for security professionals, software developers, researchers, and organizations. You must be at least 18 years of age to create an account. By using the Service, you represent that you meet this requirement.
You may only submit files that you own, have explicit written authorization to test, or that are publicly available samples for legitimate security research purposes. Prohibited uses include:
Droidwatch reserves the right to suspend or terminate accounts that violate these restrictions, and to report credible evidence of criminal activity to relevant law enforcement authorities.
When you submit a file to Droidwatch for analysis:
If you create an account, you are responsible for:
We will never ask for your password via email or support chat.
Pro and Enterprise plan holders may access the Service programmatically. API users must:
The Service is offered under Free, Pro, and Enterprise tiers. Specific feature entitlements, analysis quotas, and retention periods for each tier are published on the pricing page and may be updated with 30 days' notice. For paid plans:
The Droidwatch platform — including its analysis engines, scoring models, detection rules, UI, APIs, and documentation — is proprietary to Droidwatch and protected by applicable intellectual property law.
Analysis reports generated for your submitted files belong to you. You grant Droidwatch a limited, non-exclusive, royalty-free license to process submitted files and generate reports, and to use anonymized, aggregated indicators derived from submissions to improve detection capabilities and threat intelligence.
Nothing in these Terms transfers ownership of your submitted files or the intellectual property therein to Droidwatch.
For users located in the EU/EEA or UK, Droidwatch processes personal data on the following lawful bases (GDPR Art. 6):
| Processing Activity | Lawful Basis (Art. 6) |
|---|---|
| Creating and managing your account | Art. 6(1)(b) — Performance of a contract |
| Delivering analysis results and reports | Art. 6(1)(b) — Performance of a contract |
| Sending transactional emails (results, alerts) | Art. 6(1)(b) — Performance of a contract |
| Security, fraud prevention, rate limiting | Art. 6(1)(f) — Legitimate interest |
| Improving detection rules using anonymized data | Art. 6(1)(f) — Legitimate interest |
| Marketing and product communications | Art. 6(1)(a) — Consent (opt-in only) |
| Compliance with legal obligations | Art. 6(1)(c) — Legal obligation |
You have the right to (GDPR Arts. 15–22):
To exercise these rights, contact [email protected]. We will respond within 30 calendar days. You also have the right to lodge a complaint with your national data protection authority.
For Enterprise customers processing personal data through the Service on behalf of their own data subjects, our standard Data Processing Agreement (GDPR Art. 28) is available at /dpa.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.
Droidwatch does not warrant that:
Nothing in these Terms excludes or limits liability to the extent that applicable law does not permit such exclusion or limitation.
To the maximum extent permitted by applicable law, Droidwatch, its operators, employees, and contractors shall not be liable for any indirect, incidental, special, exemplary, consequential, or punitive damages — including but not limited to loss of profits, data, goodwill, or business — arising from or related to your use of or inability to use the Service, even if advised of the possibility of such damages.
Where liability cannot be excluded by law (including for EU consumers under applicable consumer protection legislation), our total aggregate liability for any claim arising from these Terms or the Service shall not exceed the greater of (a) the fees you paid us in the 12 months preceding the claim or (b) EUR 100.
You may close your account at any time from the account settings page or by contacting us. Upon closure, your personal data and analysis runs will be deleted per the retention schedule in the Privacy Policy.
Droidwatch may suspend or terminate your access immediately, without prior notice, if you materially breach these Terms, engage in fraudulent activity, or if required by law. We will attempt to notify you at the email address associated with your account where legally permissible.
We may update these Terms to reflect changes to our Service, legal requirements, or business practices. For material changes, we will provide at least 30 days' notice via the email address associated with your account and/or a prominent notice in the Service. For EU/EEA users, continued use after the notice period constitutes acceptance only where permitted by applicable law; otherwise explicit re-consent will be sought where required.
The "Last updated" date at the top of this page indicates when the current version took effect. Previous versions are available upon request at [email protected].
These Terms are governed by applicable law. For EU/EEA users, mandatory consumer protection provisions of your country of residence apply and cannot be waived by these Terms. For Enterprise agreements, the governing law and jurisdiction may be specified in the applicable Master Service Agreement.
We will attempt to resolve any dispute arising out of these Terms or the Service through good-faith negotiation. If a dispute cannot be resolved informally within 30 days of written notice, either party may pursue available legal remedies.
Nothing in this section prevents you from seeking injunctive or other urgent relief from a court of competent jurisdiction.