AckerWorx UK · Android App

Privacy Policy — NodeSpectra

Effective date: 26 June 2026 · com.ackerworx.nodespectra

NodeSpectra is a local-first network-analysis toolkit for Android. By design, every scan, diagnostic, and device list stays on your device. There are no accounts, no cloud sync, no analytics, no advertising, and no subscriptions.

1. Information We Collect

NodeSpectra does not collect, transmit to us, or share any personal data. We operate no backend that receives your data and we run no analytics, crash-reporting, or advertising SDKs of any kind.

•No accounts, sign-in, name, email address, or phone number.
•No analytics, telemetry, crash reporting, or advertising trackers.
•No third-party advertising and no ad identifiers.
•We never sell, rent, or share your data — there is no data leaving the app for us to share.

2. What NodeSpectra Stores On Your Device

The app stores the following locally on your device only, using a local database and encrypted storage. You can erase all of it at any time via Settings → Data Management → "Delete all local data".

•Network scan history and discovered-device records.
•Diagnostic history (ping, traceroute, DNS, port scan, speed test).
•Saved network profiles, consent records, and security score history.
•API keys you choose to provide, encrypted with an Android-Keystore-bound key.
•Bluetooth, Wi-Fi, and cellular samples that you explicitly choose to save.

3. Network Traffic You Initiate

NodeSpectra only sends network traffic in response to actions you take. This includes the local network scan on your own LAN, the speed test against a public measurement endpoint, ping / traceroute / DNS / port-scan requests to the hosts or resolvers you enter, and Wake-on-LAN packets to your LAN. Standard request metadata (such as your IP address) is handled by the destination servers, as with any internet-connected app.

4. Optional Remote Enrichment (Local-Only Mode is ON by default)

NodeSpectra includes an optional "Remote Enrichment" feature that is OFF by default. No enrichment request is ever made until you explicitly disable Local-Only Mode and grant consent for a specific provider. When enabled, NodeSpectra uses your own API keys to query third-party services you select, on your behalf.

Hard privacy rules are enforced before any data leaves the device: private/internal IP addresses are never sent to public providers; full MAC addresses are never sent (only the 3-byte vendor prefix); and SSIDs, BSSIDs, hostnames, custom names, and notes are never uploaded.

AbuseIPDB, GreyNoise

IP reputation lookups (public IPs only).

Shodan, Censys

Public-exposure information for public IPs.

ipinfo.io

ISP / ASN attribution for public IPs.

VirusTotal

Domain reputation for domains you enter.

NVD (NIST)

CVE / vulnerability matching.

RDAP (rdap.org)

Registration / abuse contact for public IPs.

Google Play Billing

Used only to process one-time in-app purchases.

5. Permissions

NodeSpectra requests permissions only when a feature you open needs them, and uses each narrowly:

Location (fine)

Required by Android to read Wi-Fi SSID/BSSID and to surface Bluetooth scan results on older Android versions. Bluetooth scanning is flagged "neverForLocation". Never used for advertising or tracking.

Bluetooth scan / connect

Only when you open the Bluetooth Analyzer. Reads device metadata only — no pairing, no GATT, no file transfer.

Phone state

Only when you open the Cellular Analyzer and opt in. Reads carrier, network type, and signal only — never IMEI, IMSI, SIM serial, phone number, call log, SMS, or contacts.

VPN / foreground service

Only when you start the local Packet Metadata preview. Reads packet headers only — never payload bytes. The data never leaves your device.

6. Children's Privacy

NodeSpectra is not directed to children under 13 and does not knowingly collect data from anyone. We collect no data from any user.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Provider-specific disclosures are also versioned inside the app, and re-consent is requested when a provider disclosure changes.

8. Contact Us

For any questions about this Privacy Policy or how NodeSpectra handles data, contact us at [email protected]