I have no idea but I don't think the update intervals involve in thisMaybe it has something to do with the update intervals (every 2 hours) in Avira Free? Doesn't make sense though as the Cloud should be updated in real-time.
Yes, there is a file called "local decider" that decides which files are suspicious and should be uploaded.I have no idea but I don't think the update intervals involve in this
perhaps they install a behavior detection engine to decide which files should be pushed to the cloud. I forgot the check it out when I installed both versions