insigh.io Node Privacy Policy

1. Who we are and what this policy covers

This privacy policy applies to the insigh.io Node Android application (package identifier com.insighio.node), provided by insighio P.C., 17 Epidavrou Street, 15233 Chalandri, Greece ("we", "us", or "our"). For privacy questions or requests, email info@insigh.io.

This policy covers the app, not the independent operation of device firmware, cloud services you configure on a device, or other websites. Our website privacy policy applies when you visit the company website.

2. Summary

• The app processes Wi-Fi information on your phone to discover and connect to nearby devices.
• Configuration information and files you choose to upload are sent to the device you connect to, not to our company servers by the app.
• The app does not obtain GPS coordinates, track your movements, or transmit your geographic location to us.
• The app has no advertising, analytics, tracking, or remote crash-reporting SDKs. We do not sell app user data or use it for targeted advertising.
• The app does not offer account registration or require an insigh.io account.

3. Information the app accesses and how it is used

Nearby Wi-Fi and connection information

The app accesses Android Wi-Fi scan results, including network names (SSIDs), access-point identifiers (BSSIDs), signal strength, and information needed to check the active network and route traffic. It filters the results to display compatible networks whose names begin with insigh-, selects an access point, and connects to the device you choose. This information is processed locally for discovery, connection, and connection recovery; the app does not send scan results to us or to an analytics service. Wi-Fi identifiers can reveal information about nearby networks, even though the app does not use them to determine your geographic location.

Device configuration and login information

The app displays the selected device's configuration interface in an embedded browser at the local address http://192.168.4.1. It attempts to sign in using the device's factory-default credentials. Information you enter or view in this interface, such as network credentials, device settings, or service credentials, is exchanged with that device over the local connection. The app does not copy this information to a company backend.

Files you select

If you use a file-upload field in the device interface, Android's system file picker lets you choose a file. The selected file and its associated metadata may be made available to the configuration interface and sent to the connected device when you upload it. The app does not request broad access to your phone's storage or scan your files. Selecting a file does not delete the original.

Browser session data and diagnostics

The device interface can use cookies and website storage to operate during a connection. The app also writes connection status and error messages to Android's system log for troubleshooting. The app does not automatically upload these logs to us.

Information you send us directly

If you email us for help or to exercise a privacy right, we receive the contact information, message, and any attachments you send. Please do not include passwords, service credentials, or unnecessary personal information in support requests.

4. Android permissions and your choices

• Precise and approximate location: Android requires location permissions and enabled Location services for Wi-Fi scanning. The app requests precise location for this purpose, including on Android 13 and later. It does not request background location or read GPS coordinates.
• Nearby Wi-Fi devices: On Android 13 and later, this permission enables interaction with nearby Wi-Fi devices. The app does not use it to derive your physical location.
• Wi-Fi and network access: These permissions let the app inspect Wi-Fi state, request scans and connections, observe connectivity, and route traffic to the selected device. Android's permission named "Internet" is needed for network communication, including local device communication; it does not mean the app sends your information to an internet service.

You can refuse or revoke permissions in Android Settings. Without the required permissions, the app cannot discover or connect to devices. You can stop a device session using Disconnect or by leaving the device browser. If you connected through Android's Wi-Fi Settings, Android may keep that network connected after the app session ends; use Wi-Fi Settings to disconnect or forget it.

5. Where information goes and who can receive it

The recipient of configuration requests and selected uploads is the connected device. The app's embedded browser restricts navigation and resource requests to the local configurator address. We do not receive app scan results, configuration values, uploaded files, or usage telemetry through an app-operated server, and we do not share them with advertising or analytics providers.

A device may independently store information or send data to services configured by its owner, including after the app disconnects. That behavior is controlled by the device firmware, configuration, and relevant service policies, not by the app's local connection. Check those settings and policies before entering credentials or uploading personal information.

If you contact us, our business email and support service providers process your correspondence to help us respond. We may disclose that correspondence where required by law or necessary to establish, exercise, or defend legal claims. Android, your device manufacturer, Google Play, and any file provider you choose operate under their own privacy policies; their independent services are not app analytics operated by us.

6. Retention and deletion

• Wi-Fi discovery data: The app holds scan results and connection state in memory for operation; it does not maintain a persistent scan-history database. Android may separately retain its own cached scans and saved networks.
• Browser sessions: Each device visit uses a fresh browser session. The app clears cookies, website storage, HTTP authentication data, and page cache when preparing or ending a device session. If Android terminates the app before normal cleanup finishes, startup cleanup clears stored session data before another device visit. Cleanup is not a guarantee of forensic erasure from the phone.
• Android logs: Local diagnostic messages remain subject to Android's log-buffer retention. They are not stored in a remote app logging service operated by us.
• Files and device settings: Disconnecting, clearing app data, or uninstalling the app does not delete original files on your phone, configuration saved on a device, or data a device has sent to another service. Delete files through your file provider and use the device's configuration or reset procedure, or the relevant service's deletion controls, for those copies.
• Support correspondence: We retain information you send us only as needed to respond, resolve the request, meet applicable legal obligations, or handle legal claims. You can ask us to delete it at info@insigh.io, subject to those obligations.

You can clear the app's local data through Android Settings or uninstall it. App backup through Android's standard app-backup mechanism is disabled. There is no app account or company-hosted app profile to delete. Saved system Wi-Fi networks can be removed separately in Android's Wi-Fi Settings.

7. Security

The app uses Android's permission and network controls, limits its embedded browser to the device configurator, and clears browser session data. Device communication uses local HTTP, not HTTPS: it is not encrypted at the application layer, even though the Wi-Fi connection uses WPA2. Default device credentials are shared defaults, not personal secrets, and a matching Wi-Fi name is not proof of device identity. Only connect to devices and networks you trust, change device credentials where supported, and avoid sending unnecessary sensitive information. No method of transmission or storage is completely secure.

8. Your privacy rights

Where the GDPR or other applicable privacy law applies, you may have rights to access, correct, erase, restrict processing of, or receive a portable copy of personal information we hold about you, and to object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights depend on the circumstances and applicable law.

For personal information you voluntarily send us, insighio P.C. acts as controller. We process support and privacy correspondence as necessary for our legitimate interests in answering requests and supporting our products, to take contractual steps or provide contractual support where applicable, and to comply with legal obligations. Android permission choices control access to phone features; they do not mean we receive your local app data.

Contact info@insigh.io to make a request. We may need proportionate information to verify your request. We cannot retrieve or erase local device information that has never been sent to us. You may also complain to your local supervisory authority, including the Hellenic Data Protection Authority in Greece.

9. Children

The app is intended for business and professional device configuration and is not directed at children. We do not knowingly collect children's personal information through the app. If you believe a child has sent personal information to us, contact info@insigh.io so we can address it.

10. Viewing this page and policy changes

This policy page contains no analytics scripts, tracking cookies, or consent requirement. Serving it involves ordinary web requests to our website host; website handling of those requests is separate from the app's local operation. Other company pages may use optional analytics as described in our website privacy policy and cookie policy.

We may update this policy when the app or our data practices change. We will publish the revised policy here and update the date above. Where required, we will provide additional notice or obtain consent before introducing new processing.

Privacy contact: insighio P.C., 17 Epidavrou Street, 15233 Chalandri, Greece. Email: info@insigh.io.