Overview
Veilbreaker ("the App") collects the minimum data necessary to provide the service. Scans run on your phone. When you are online, the results of the scans you run are sent to our server to produce your analysis and report summary (see section 03). Offline, nothing is sent.
Data We Collect
Account Data
If you sign in with Google, we receive your name, email address, and profile photo from Google. This is used solely for account identification and is stored in Firebase Authentication.
Scan Data
WiFi network information, Bluetooth device data, magnetometer readings, and physical check results are collected on your device. Sweeps with findings are saved in local storage on your phone. Clean sweeps are not saved.
Location
The App uses your phone's location to record where a sweep took place. The coordinates are sent to OpenStreetMap (Nominatim) to look up the street address. The address appears in the App and in your report, and is sent to our server with a report request to write the summary.
Analytics and App Events
We use Firebase Analytics to collect usage data such as which tools are used and scan completion rates. Our server also records app events (for example, when the subscription screen opens or a purchase is verified) and app error messages, linked to your account ID, so we can measure and fix the App. These records do not include scan results, device names, or network names.
Crash Reports
Firebase Crashlytics collects crash logs and device information to help us fix bugs. These reports do not contain scan data.
Scan Analysis
When you are online, the App sends the results of your scans to our server for analysis: WiFi network names and access point addresses, the MAC addresses, manufacturers and host names of devices on your network, Bluetooth device IDs and names, signal strengths, your findings, and the sweep address for the report summary. Our server passes them to OpenAI, which processes them to produce the analysis under its own API data usage policy. Device classifications are cached on your phone to avoid repeat requests.
Data We Do NOT Collect
- Your WiFi password or network credentials
- Contents of network traffic
- Contacts, messages, or call history
- Data from other apps on your device
Data Storage & Security
Sweeps with findings are stored in SQLite on your device. There is no cloud sync of scan data. Evidence reports (PDFs) are stored locally and shared only when you explicitly use the share function.
Third-Party Services
The App uses the following third-party services:
- Firebase (Google) - Authentication, Analytics, Crashlytics
- Google Play - Payment processing for subscriptions
- OpenAI - Analysis of scan results and report summaries
- OpenStreetMap (Nominatim) - Street address lookup from your location
Each service has its own privacy policy governing data they process.
Data Deletion
You can delete all local scan data by clearing the app's storage. To delete your account, open the App, go to Settings and tap Delete Account, or email support@veilbreaker.app from your account email. See Delete Account for what is removed. Deleting your account does not cancel a Google Play subscription; cancel it in Play Store first.
Children's Privacy
Veilbreaker is not intended for use by children under 13. We do not knowingly collect data from children under 13.
Changes to This Policy
We may update this policy from time to time. Changes will be communicated through the App. Continued use after changes constitutes acceptance.
Contact
For privacy-related questions or data deletion requests, email support@veilbreaker.app.