itch.io

The official release android port of KPA is safe and does not have malware/viruses.

Android/Xiaomi has had an update where any non appstore app, which requires access to all files is flagged as a trojan. 

KPA requires access to files in order to create a savefile which pertains across versions, even if you uninstall the app.

Code is OPEN SOURCE and you can check it yourself.