Privacy Policy

Last updated: 2026-11-12 / Established by XTV LLC

XTV LLC ("we" or "the Company") provides the Wi-Fi security checker application "NoSnoop" ("the Service") with a design philosophy of minimal data collection and the highest priority on user privacy. This Privacy Policy ("this Policy") describes how user information is handled in connection with the Service.

Article 1 — Information We Do Not Collect

The Service does not collect any of the following:

• Email addresses, passwords, or any account credentials (there is no account)
• Name, age, gender, or date of birth
• Home address or phone number
• Your precise (GPS) location
• The names (SSIDs) or hardware addresses (BSSIDs) of the Wi-Fi networks you connect to or that are near you
• The results of any security check
• Your contacts, photos, files, messages, or browsing history
• Camera, microphone, or other audio/visual data

Article 2 — Data Stored Only on Your Device

1. The following data is stored only in your device's local storage and is never transmitted to us or to anyone else:
   • The results of the security checks of the Wi-Fi you are connected to
   • The list of nearby Wi-Fi networks and their verdicts
   • Your settings (such as the automatic check on joining a Wi-Fi network, and the app language)
2. Android Auto Backup is disabled for the Service. This data is not backed up to Google and is not transferred to a new device. Uninstalling the app permanently deletes all of it.
3. Because this data never leaves your device, we have no access to it and cannot view, recover, or restore it on your behalf.

Article 3 — Usage Measurement and the Support ID

1. The Service uses Google Analytics for Firebase to understand how the app is used. This sends to Firebase an anonymous app-instance identifier, the app language you have selected, and in-app usage events, such as completing the introduction, allowing or declining the location permission, viewing the purchase screen, purchasing, and turning the automatic check on or off. It never sends Wi-Fi network names, nearby networks, or check results — only the fact that an event occurred.
2. Google Analytics for Firebase derives an approximate location (such as country or region) from your device's IP address. We use it only in aggregate, for example to see in which countries the Service is used. It is not your precise location.
3. The Service collects the Android advertising ID and uses it to measure advertising effectiveness (for example, which ad led to an install or a purchase, measured via Google Ads). You can reset or delete the advertising ID at any time in your device's Android settings.
4. The Service generates a random Support ID on your device (for example NS-7KQ4-M9XB) and shows it in the Settings screen. It is not linked to your name, email address, or phone number. It is attached to the usage-measurement data above and to your RevenueCat subscription record, so that we can find your records when you contact us with that ID.
5. In addition, the Service sends the following to our own measurement server (operated on Supabase, Sydney region): the Support ID and an anonymous internal ID issued by that server; your device's country (from the SIM or mobile network, not your location) and language; the app version; your current plan; the Google Play install referrer (which may include an advertising click identifier); whether the location permission is granted and whether the automatic check is on; a record of screens you use in the app (the same kind of events as above); daily counts of checks run, by how they were started (manual or automatic) and by overall verdict (safe, caution, danger, or could not tell); and purchase status received from RevenueCat (plan, start, renewal, cancellation). It never sends Wi-Fi network names, hardware addresses, nearby networks, the details of any check result, your location, or your IP address as data. We use this only to improve the Service and to answer support requests.

Article 4 — How the Wi-Fi Checks Work

1. All security checks run on your device. To carry them out, the Service makes the following connections. None of them sends any information about you:
   • To public DNS services operated by Cloudflare, Inc. (1.1.1.1) and Google LLC (8.8.8.8), to check whether address lookups on the current network are being tampered with. Only the fixed test names being looked up are sent.
   • To a well-known website (www.google.com), to check whether the secure connection is being intercepted.
   • To the router of the Wi-Fi network you are connected to, to check whether commonly risky ports (such as 23, 80, 443, 8080, and 1900) are open. The Service only checks whether a port answers; it never tries to log in or send credentials.
2. When you turn on the optional automatic check (a Premium feature), Android notifies the Service when your device joins a Wi-Fi network. The Service then checks that network's encryption on your device and, if it is unsafe, shows a notification. The notification never includes the network's name.

Article 5 — Permissions

1. The Service requests the following permissions, each of which you can grant or decline:
   • Location (ACCESS_FINE_LOCATION): Android requires this permission for any app to read the names of nearby Wi-Fi networks and of the network you are connected to. The Service uses it only for that purpose, on your device. It does not read your GPS position, and it never stores or sends your location. The Service does not request background location. If you decline, the checks of the connected Wi-Fi still run; only network names and the nearby list are unavailable.
   • Notifications (POST_NOTIFICATIONS): requested only when you turn on the automatic check.
2. The Service also uses permissions that Android grants automatically, such as viewing the Wi-Fi and network state, internet access, and starting after the device restarts (used only to keep the automatic check working).

Article 6 — Premium Subscription and RevenueCat

1. The Service is free to use for the security checks of the connected Wi-Fi and for the verdict of the top network in the nearby list.
2. NoSnoop Premium is a monthly auto-renewing subscription, purchased through the Google Play Billing system provided by Google LLC, that unlocks verdicts for every nearby network and the automatic check.
3. Subscription status is managed on our behalf by RevenueCat, Inc. (headquartered in the United States). RevenueCat generates an anonymous app user ID on your device — it is not linked to your name, email address, or any other personal information. When you purchase or renew Premium, your Google Play purchase token and the product ID are sent to RevenueCat so that it can validate the purchase and track renewals, cancellations, and expiry.
4. Card numbers, expiry dates, and other payment details are handled exclusively by Google Play. Neither we nor RevenueCat ever see or store them.
5. RevenueCat retains your subscription records (the purchase token, the anonymous app user ID, the Support ID, the product ID, and subscription status history) until you request their deletion via the contact details in Article 14. Deleting these records does not cancel your Google Play subscription, which must be canceled separately in Google Play.
6. You may restore a previous purchase at any time using "Restore purchase" on the purchase screen, provided you are signed in with the same Google account used for the original purchase.

Article 7 — Sharing with Google for Advertising Measurement

The usage events, approximate location, advertising ID, and purchase events described in Articles 3 and 6 are processed by Google LLC through Google Analytics for Firebase and may be used by Google to measure and improve the performance of advertising for the Service (Google Ads). Apart from this, we do not sell or share user data with third parties.

Article 8 — Sub-processors

We entrust the processing described above to the following service providers solely for the purpose of delivering the Service:

These sub-processors are contractually obligated to handle data appropriately in accordance with our agreements with them. The public DNS services and the website contacted for the checks in Article 4 receive no user data and are not sub-processors. We do not use any other third-party service inside the Service.

Article 9 — International Data Transfers

1. Subscription-related data described in Article 6 is held on servers operated by Google Play and RevenueCat (United States). Usage-measurement data described in Article 3 is held on servers operated by Firebase (United States) and on our measurement server hosted by Supabase (Australia, Sydney region).
2. These sub-processors implement appropriate data protection measures, including technical and organizational safeguards such as encryption.
3. Pursuant to Article 28 of the Act on the Protection of Personal Information (Japan), please contact us separately for information regarding the handling of personal information by the above transfer recipients.

Article 10 — Data Retention and Deletion

1. All data described in Article 2 lives only on your device. Uninstalling the app deletes it immediately and permanently; we have no copy to retain or delete on our side.
2. Your subscription records held by RevenueCat are retained as described in Article 6, until you request their deletion.
3. Records of Premium purchases and billing themselves are separately retained by Google Play (Google LLC) and are handled in accordance with Google Play's terms.
4. Usage-measurement data described in Article 3 is retained according to the data-retention setting of Google Analytics (up to 14 months) and is then deleted automatically. On our measurement server, the record of a device that has not contacted the server for one year is deleted automatically, and screen records are deleted after about 13 months (400 days).

Article 11 — Your Rights

1. Right of access: You can view your check results, the nearby list, and your settings at any time within the app itself.
2. Right to deletion: Uninstalling the app immediately and permanently deletes all data described in Article 2.
3. Deletion of records held by our sub-processors: Send your Support ID (shown in Settings) to the contact details in Article 14. We will delete your subscription records held by RevenueCat and the records on our measurement server, and request deletion of the usage-measurement data linked to that Support ID. Doing so does not cancel your Google Play subscription.
4. Records held by Google Play: For requests to delete purchase or billing records held by Google Play, please contact Google directly.
5. Advertising ID: You can reset or delete the advertising ID at any time in your device's Android settings.

Article 12 — Our Website

Our website (no-dial.com) uses Google Analytics, an analytics tool provided by Google LLC, to understand and improve how the site is used. Google Analytics uses cookies and similar technologies to collect browsing information (pages viewed, time on page, approximate region, browser type, etc.); this information does not include personally identifying details such as your name or address. The collected information is handled in accordance with Google's Privacy Policy. You can disable this data collection at any time using the Google Analytics Opt-out Browser Add-on. The Service does not show any advertising inside the app.

Article 13 — Changes to This Policy

1. We may update this Privacy Policy from time to time.
2. When changes are made, we will notify users of the content and effective date through in-app notifications or this page.
3. For material changes (such as the addition of new categories of information collected or new third-party recipients), we will obtain renewed consent from users.

Article 14 — Contact