We collect non-personal data to make money
I wish companies would get over trying to pass off with this obvious bullshit. "Personal data" does not need to mean your name and phone number (etc). If you can be repeatedly identified from a crowd, then personal data has been collected. Furthermore, depending on the degree of data access, it is entirely possible to determine exactly who a person is by indirectly looking at their behaviours. Browsing history and metadata? Well, that's every GET form exposed, everything you look at, every link you follow. Metadata? That could include cookies that may reveal sign-in or username information. Does AVG ask for location information too, I wonder?
But, hey, why stop there - why not just throw in collection of metrics on installed apps and their usage for the win?
What is this? Is AVG really asking their users to pwn themselves?