Privacy Policy — Android

This policy covers Serin: Privacy Radar for Android. If you use the iOS app, see the iOS Privacy Policy.

Overview

This Privacy Policy describes how Summit Veil LLC ("Summit Veil," "we," "us," or "our") handles information in connection with the mobile application Serin: Privacy Radar (the "App"). Serin is a privacy-awareness tool for Android that detects nearby electronic devices via Bluetooth Low Energy (BLE), local network (WiFi) discovery, and infrared (IR) camera analysis.

Our core principle is simple: your data stays on your device. Serin performs all scanning locally and does not require an account, login, or personal information to function. We have designed the App so that we cannot read your scan history, ignore lists, or audit reports.

Information We Do Not Collect

• We do not collect your name, email address, phone number, or other personally identifiable information ("PII").
• We do not require account creation or login.
• We do not access your contacts, photos, or files. Serin can write an IR camera capture into your device's gallery when you explicitly ask it to, but it cannot read photos that are already there.
• We do not sell, rent, or share your personal information with third parties for their direct-marketing or cross-context behavioral-advertising purposes.

On-Device Data

The following data is generated and stored entirely on your device. It is not transmitted to Summit Veil's servers:

• Bluetooth (BLE) scan results — device names, signal strength, manufacturer identifiers, and service UUIDs of nearby Bluetooth devices. These are processed in real time on your device and are never transmitted to Summit Veil.
• WiFi network scan results — devices discovered on your local network via Bonjour/mDNS and port scanning. Like BLE results, these are processed locally and never transmitted to Summit Veil.
• Infrared camera captures — images from the IR Camera Finder are written to your device's gallery only when you explicitly choose to save them.
• Detection logs and ignore lists — historical records of detected devices, stored in a local database on your device.
• Privacy Audit reports — audit results and PDF exports.

Location: Serin asks for location permission because Android requires it before an app may receive Bluetooth scan results — it is a precondition of Bluetooth scanning on Android, not a feature of Serin. Serin never requests your position from Android: it does not read GPS or network-derived coordinates, does not read your Wi-Fi network's name (SSID) or MAC address, and does not store or transmit any location data. Auto Travel Mode tells one network apart from another using a one-way hash of your local subnet range, which is not a location.

Data We Transmit

The App transmits limited, non-personal data to our backend in the following circumstances:

Device Database Sync

On launch, Serin checks for updated detection signatures from the Serin API. The request contains only the App version and the current database version number. No personal data is included.

Community Submissions

The App includes an opt-in "Submit Device" form that lets you tell us about a device Serin failed to identify, or a new device you have encountered. Together with the Detection Feedback flow described below, these are the only paths by which information about a detected device reaches our servers — passive Bluetooth and WiFi scan results never leave your device, regardless of device type.

When you submit the form, we receive only the fields you fill in, plus minimal technical metadata:

• Device name (free text you provide)
• Manufacturer (free text you provide)
• Whether the device has a camera (yes/no)
• Whether the device is always listening (yes/no)
• Additional details (optional free text)
• App version
• An installation identifier — a random value Serin generates on your device the first time it needs one, used to deduplicate submissions and to enable the in-App "Delete My Data" feature. It is not your Google Account, not your Android advertising ID, and not a hardware identifier, and it is replaced with a new random value if you clear the App's data or uninstall and reinstall the App.

We do not capture or transmit the raw technical fingerprints (BLE service UUIDs, advertisement payloads, mDNS records, MAC addresses, etc.) of the devices you report — only the user-provided text fields above. No location data and no personal information is included.

Detection Feedback

The App also lets you long-press a detected device to report a detection issue (for example, a false positive or a wrongly categorized device). When you submit feedback, we receive only:

• The feedback type (e.g., "false positive")
• The Bluetooth SIG manufacturer ID associated with the matched signature, if any (a 16-bit company code, not a device identifier)
• The name Serin displayed for the device
• What you say the device actually is (optional free text)
• Your free-text note
• App version
• The same installation identifier described above, used for rate-limiting and to enable "Delete My Data"

We do not transmit BLE MAC addresses, raw advertisement payloads, service UUID lists, or any location data through the feedback flow.

Cloud Sync & Device Backup

Serin for Android does not sync your data to any cloud service. There is no Serin account and no server-side copy of what Serin sees. Your detection logs, ignore list, trusted devices, and audit reports live in a local database in Serin's private app storage on your device.

• No cloud database. Summit Veil operates no user-data store: we cannot read your scan history, ignore list, trusted devices, or audit reports, because we never receive them.
• Android Backup. If you have Android's backup service turned on (Android Settings > System > Backup), Android may include Serin's app data in your device backup so it can be restored to a new phone. That backup is handled by Google under your Google Account, and on Android 9 and later it is encrypted with a key derived from your device PIN, pattern, or password — Summit Veil has no access to it. You can turn backup off, or delete existing backups, in Android Settings. Serin excludes its purchase-entitlement cache from backup.

Third-Party Services

Google AdMob (Free tier only)

The free tier of Serin displays advertisements provided by Google AdMob. Serin never asks you to consent to personalized advertising, and correspondingly every ad request Serin makes is flagged non-personalized, which instructs Google not to use your Android advertising ID to build an advertising profile or to target ads at you. AdMob acts as an independent data controller for the ad-related data it still collects to serve, measure, and protect those non-personalized ads. Categories of data Google may receive include:

• IP address and coarse location derived from it
• Device type, Android version, and general App-usage signals
• Ad interaction data (impressions, clicks)
• Your Android advertising ID, which the Google Mobile Ads SDK may still use for frequency capping, ad measurement, and fraud prevention even when personalization is switched off

For details, see Google's Privacy Policy. You can reset or delete your Android advertising ID at any time in Android Settings (Privacy > Ads, or Google > Ads, depending on your device). You can remove all advertising by upgrading to Serin Pro.

Google Play Billing

In-app purchases are processed by Google through Google Play Billing. We do not receive your payment information — Serin only receives confirmation from Google Play that a purchase exists, which it stores on your device to unlock Pro features. Purchases are governed by the Google Play Terms of Service.

Analytics & Crash Reporting

Serin does not integrate any third-party analytics or crash-reporting SDKs (such as Firebase Analytics, Crashlytics, Sentry, Mixpanel, or Amplitude). If you have Android's "Usage & diagnostics" setting enabled, Google Play may share aggregated, anonymized crash, ANR, and performance reports with us through the Google Play Console; this is governed by Google's privacy practices, and those reports do not identify you to us.

Permissions

Serin requests the following device permissions, each for a specific purpose:

• Nearby devices (Bluetooth scan and connect) — Required for BLE device scanning.
• Location (precise) — Required by Android itself before any app may receive Bluetooth scan results; Android's "Approximate" option is not sufficient for Bluetooth scanning. Serin requests it only for that reason and never asks Android for your position. See the Location note above.
• Camera — Used by the IR Camera Finder to detect hidden camera lenses via infrared reflection. Frames are analyzed on your device in real time and are not stored unless you save one.
• Notifications — Used for detection alerts, the ongoing scan notification, and the optional weekly digest.
• Network and Wi-Fi state, multicast — Used for local network (Bonjour/mDNS) discovery of networked cameras and streaming devices on the network you are already connected to. No traffic is captured.
• Foreground service (connected device) — Lets scanning continue while Serin is not on screen. While it runs, Android shows a persistent Serin notification, and you can stop it at any time.
• Vibration — Used for the optional haptic heartbeat and alert feedback.
• Billing — Used only to process the optional one-time Serin Pro purchase through Google Play.

Serin does not request permission to read your photos, contacts, files, call logs, SMS, microphone, or physical activity, and it does not request background location.

Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the legal bases on which we process limited data are:

• Performance of a contract — processing necessary to provide the App's core features.
• Consent — for opt-in features such as community device submissions and detection feedback. You may withdraw consent at any time by simply not using those features.
• Legitimate interests — improving and securing the App, deduplicating community submissions, and preventing abuse.

Your Rights

Because Summit Veil does not maintain user accounts or hold personal information that identifies you, most data-subject rights can be exercised directly from the App or your device:

• Delete My Data (in-App) — Settings > Delete My Data sends a request to our servers to remove any user-submitted device reports and in-App feedback associated with your installation identifier. See the next section for exactly what this does and does not cover.
• Delete on-device data — use in-App settings to clear logs and ignore lists, or clear everything at once with Android Settings > Apps > Serin > Storage & cache > Clear storage, or simply uninstall the App.
• Remove backed-up data — turn off Android backup or delete your device backup in Android Settings; see "Cloud Sync & Device Backup" above.
• Withdraw consent — simply stop using the opt-in community submission and detection feedback features; no personalized-advertising consent exists to revoke, since Serin serves only non-personalized ads. You may also reset or delete your Android advertising ID in Android Settings.

Scope of "Delete My Data"

Tapping Delete My Data in Settings asks our servers to remove records associated with your installation identifier. Specifically:

• Deleted: any user-submitted device reports (forms you have filled out to tell us about an unknown device or one Serin failed to identify) and in-App feedback you have sent to Summit Veil, where the record was tagged with your installation identifier.
• Not deleted (because they do not live on our servers): on-device logs, ignore lists, trusted-device lists, audit reports, IR captures, and anything contained in an Android device backup. To remove these, use the in-App settings, clear the App's storage, uninstall the App, or delete your backup in Android Settings.

If you are an EEA, UK, or Swiss resident, you also have rights of access, rectification, erasure, restriction, portability, and objection under the GDPR, and the right to lodge a complaint with your supervisory authority.

If you are a California resident, you have the right under the CCPA/CPRA to know what personal information we collect, to delete it, to correct it, to opt out of "sale" or "sharing" of personal information, and to be free from retaliation for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA.

To exercise any right that requires our action, contact us at support@serinradar.com. Because we generally do not hold information that identifies you, we may be unable to verify or fulfill some requests.

Data Retention

• On-device data — retained until you delete it, clear the App's storage, or uninstall the App.
• Android backup data — if backup is enabled, retained in your Google Account backup until you or Android deletes it. Summit Veil cannot read or delete it.
• Community submissions — retained for the purpose of improving the detection database; the anonymous device identifier is purged after deduplication windows close (typically 90 days).
• AdMob data — retained by Google per its policies; Summit Veil does not receive or retain copies.

International Data Transfers

Summit Veil operates in the United States. Google's AdMob and Google Play also process data internationally. If you access the App from outside the United States, you understand that information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate, which may have data-protection laws different from those in your jurisdiction. Where required, transfers from the EEA/UK/Switzerland rely on appropriate safeguards such as the EU Standard Contractual Clauses adopted by our service providers.

Children's Privacy

Serin is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact support@serinradar.com and we will take appropriate action.

Security

The limited data Serin sends to our servers travels over HTTPS (TLS). Your on-device data is held in Serin's private app storage, which Android isolates from other apps on the device, and is covered by your device's own encryption. No method of transmission over the Internet is 100% secure, but because the App is designed so that we never receive PII, the practical exposure of any breach to you is limited.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted in the App or on our website, with an updated "Effective date." Continued use of the App after the effective date constitutes acceptance of the revised policy.

Contact

For privacy questions, requests, or complaints, contact:

Summit Veil LLC
United States
Email: support@serinradar.com