Summary Answers (Google Play Data Safety Form)
| Question | Answer |
|---|---|
| Does the App collect data? | Yes |
| Does the App share data with third parties? | Yes (Google AdMob; Google Play Billing) |
| Can users request data deletion? | Yes — via in-App clear data or Data Deletion Notice |
| Is data encrypted in transit? | Yes — all external connections use HTTPS/TLS |
| Is data encrypted at rest? | Yes — saved credentials use AES-256 |
| Does the App follow Google Play's Families Policy? | No — App is not directed at children under 13 |
| Is data collection required for core functionality? | Yes (location for WiFi scan); optional for advertising |
| Independent security review? | No — not independently reviewed as of this version |
Data Collected & Purpose
| Data Type (Play Console Category) | Collected? | Shared? | Optional? | Purpose |
|---|---|---|---|---|
| Location Approximate location |
Yes | No | Required | Android OS requires location permission to access WiFi scan results (SSID/BSSID). Not used for GPS or physical tracking. |
| Device or other IDs Android Advertising ID (AAID) |
Yes | Shared — Google AdMob | Optional (free tier only) | Advertising personalisation. Not collected by Developer. Shared with AdMob for ad delivery. PRO users: not collected. |
| App activity App interactions; feature usage |
Yes | No | Optional | Aggregate feature analytics and crash diagnostics for App improvement. Stored on-device or in aggregate form. |
| App info and performance Crash logs; diagnostics |
Yes | No | Optional | App stability monitoring and technical error diagnosis. |
| Financial info Purchase history |
Yes (status only) | Shared — Google Play | Optional (PRO only) | Subscription status verification. Developer receives only subscription status flag and product ID. No payment card data. |
| Personal info Email address |
No | No | — | The App does not collect email addresses. |
| Network info WiFi scan data; SSID/BSSID |
Yes | No | Required for core feature | On-device only. Used for WiFi scanning, WPS analysis, security reports. Never transmitted to Developer servers. |
| Web browsing Domains queried (DNS Lookup) |
Not by Developer | Visible to DNS resolver | Optional | User-entered domains sent to public DNS resolver as part of standard DNS query. Developer does not log queried domains. |
Data NOT Collected
The following data types are explicitly not collected by the Developer or transmitted to Developer-controlled servers:
- GPS or precise physical location coordinates;
- Name, email address, or other contact information;
- Photos, videos, or media files;
- Health or fitness data;
- Contacts, call logs, or SMS content;
- Saved WiFi credentials (WiFi Vault data stays encrypted on-device only);
- IP addresses from speed tests (Cloudflare sees these; Developer does not);
- Hosts or domains submitted to DNS Lookup or SSL Inspector.
Data Sharing with Third Parties
| Third Party | Data Shared | Purpose |
|---|---|---|
| Google AdMob | Android Advertising ID, device info, IP address, app interaction signals | Ad delivery and measurement (free tier only). Governed by Google's Privacy Policy. |
| Google Play Billing | Subscription status, product ID, purchase token | In-app purchase processing and verification. Payment data handled exclusively by Google. |
| Cloudflare | Device IP address (standard network request) | Speed test measurement. No PII sent by Developer. Governed by Cloudflare's Privacy Policy. |
| Public DNS Resolver | Domain names entered by user for DNS lookup | DNS query resolution — standard protocol. Developer does not log or store queried domains. |
| Target SSL host | Device IP address (TLS connection) | SSL certificate retrieval. Developer does not log or store inspected hosts. |
Security Practices
| Practice | Implemented |
|---|---|
| Data encrypted in transit | Yes — HTTPS/TLS for all external connections |
| Data encrypted at rest | Yes — AES-256 for WiFi Vault credentials; Android private app storage sandbox for all other data |
| Data minimisation | Yes — App requests only permissions necessary for each feature |
| User data deletion | Yes — In-App clear data; Android system clear data; uninstall |
| No developer-side servers storing personal data | Confirmed |
| Independent security audit | Not yet |
Children's Data
WiFi Analyzer is not directed at children under 13. The App does not knowingly collect personal data from children. No Families Policy audience has been selected for this App in Google Play Console.
Contact
For data safety questions, privacy inquiries, or to submit a data deletion request:
Epsilon Developers
Operated by Satyam Kushwaha & Anurag Mahajan — India
Email: contact@epsilondevelopers.xyz
Privacy Policy: privacy-policy.html
Data Deletion: data-deletion-notice.html