Privacy Policy — WiFi Heatmap

Effective date: October 6, 2026 Last updated: October 6, 2026

This Privacy Policy explains what information is collected when you use WiFi Heatmap (the "App"), how it is used, who it is shared with, and the choices and rights you have.

1. Who we are

The App is developed and published by BrightPixel (Suleiman Jaber), Israel ("we", "us"). We are the data controller for the limited processing described below.

Contact: [email protected]

We aim to reply to every privacy request within 30 days (sooner where the law requires).

2. Summary

The App has no accounts, no sign-in, no cloud sync and no in-app purchases. We never ask for your name, e-mail, phone number or contacts.
Your floor plans, Wi-Fi readings and settings are stored only on your device. We do not run servers and we do not receive them.
The App asks for location permission only because Android requires it to read the name and signal of the Wi-Fi network you are connected to. The App does not read your GPS position and does not use location in the background.
The App does not use analytics or crash reporting.
The App shows ads through Google AdMob. Google and its ad partners may collect device and usage information to show, measure and (where you allow it) personalize ads. This is the only data that leaves your device without you choosing to share it.
Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), we ask for your consent before personalized ads are shown, and you can change your choice at any time.
We do not sell your personal information for money. Ad-related sharing that some laws treat as "selling" or "sharing" is explained in section 10, with how to opt out.

3. Information stored on your device

The App saves the following locally, inside the app's private storage on your device:

| Data | Why | |---|---| | Floor plans: rooms, doors, room names, router positions, map names | To draw your home and the heatmap | | Floor plan images or PDF pages you import (a copy is kept in the App) | To show them under your drawing | | Wi-Fi readings at each test point: signal strength (dBm), frequency band, link speed, time of the test | To build the heatmap, weak spots, suggestions and survey history | | Details of the network you confirm: network name (SSID) and router hardware address (BSSID) | To make sure every reading comes from the same network and to tell your routers apart | | Settings: language, units, signal format, theme, last test accuracy, intro and rating-prompt flags, ad timing | To remember your preferences and space out ads |

This information is not sent to us or to anyone else. Uninstalling the App, or clearing its data in your device settings, deletes all of it permanently. Because we never receive it, we cannot recover it.

The App only reads the Wi-Fi network your phone is already connected to. It never scans for, lists or connects to other networks, and it does not run an internet speed test.

4. Device permissions

| Permission | Why it is used | |---|---| | Location (precise), while the App is in use | Android only reveals the connected network's name and router address to apps that hold location permission. The App uses it for that alone. It does not request GPS coordinates and blocks background location. | | Wi-Fi state and network state | To read the signal strength of the connected network and notice when the connection is lost | | Internet | To load and show ads | | Vibration | Short haptic feedback |

The App does not use the camera, microphone, contacts or your photo library permission. Floor plans are imported through Android's own picker, which gives the App access only to the file you pick.

Exports. When you export a heatmap image or a PDF report, the file is created on your device and passed to Android's share sheet. It goes only where you send it (for example a messaging app or e-mail), and that service's privacy policy then applies. The report can include the map name, room names and Wi-Fi readings.
Backups. A backup is a file you save yourself. It contains your maps, readings, network names and imported floor plan images. Keep it somewhere you trust. Restoring a backup reads only the file you pick.

6. Advertising (Google AdMob)

The App uses Google AdMob, an advertising service provided by Google LLC / Google Ireland Limited. The App shows:

Banner ads at the bottom of some screens.
Rewarded ads: an optional short video before exporting a PDF report or adding a map after your first one. If no ad is available, the action goes ahead anyway.
Interstitial ads: occasional full-screen ads at natural breaks, such as after you share an export (never in the first minutes of first use, never while you draw or measure, and not more often than every few minutes).

When an ad is requested or shown, the Google Mobile Ads SDK may automatically collect and process:

Device identifiers: the Android Advertising ID (or similar resettable identifiers) and app-set ID;
Device and app information: device model, operating system and version, language, screen size, app version, mobile carrier and network type;
IP address, which can be used to estimate your approximate (coarse) location (country/city);
Ad interaction data: which ads were shown, clicked or watched, and ad performance and diagnostic data (crash and performance logs of the ad SDK).

The ads SDK does not receive your floor plans, Wi-Fi readings or network names.

Google uses this information to deliver ads, limit how often you see the same ad, measure ad performance, prevent fraud and abuse, and — only where you have allowed it or where the law permits — to show ads based on your interests. Google may share it with its advertising partners as described in its policies:

How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites
Google Privacy Policy: https://policies.google.com/privacy
Google advertising technologies: https://policies.google.com/technologies/ads

We do not receive the advertising identifier or the other raw data the SDK collects. We only see aggregated reports in AdMob (for example how many ads were shown and earnings per country).

7. Legal bases (EEA, UK and Switzerland)

Where the GDPR, UK GDPR or the Swiss Federal Act on Data Protection applies:

Personalized ads and the use of device identifiers for advertising are based on your consent (GDPR Art. 6(1)(a) and the ePrivacy rules). We ask for it through Google's consent form (a certified consent management platform under the IAB Transparency & Consent Framework) the first time you open the App, before any ad is requested.
Non-personalized ads, ad delivery, frequency capping, fraud prevention and ad measurement are based on our legitimate interest in funding a free app (Art. 6(1)(f)), within the limits allowed by your consent choices.
Your maps and readings are processed only on your device, to provide the App's features you ask for.

You can withdraw or change your consent at any time in the App: Settings → Privacy choices. Withdrawing consent does not affect processing done before you withdrew it. If you refuse consent you can still use the full App; you may see non-personalized or limited ads.

We share information only as follows:

Google (AdMob) and the advertising partners Google works with, as described in section 6, under Google's terms, which include the EU Standard Contractual Clauses for international transfers.
When required by law, to respond to a valid legal request, or to protect rights, safety and security.

We do not use any analytics, attribution, crash-reporting or social-media SDKs, and we do not share data with data brokers.

9. International transfers and retention

Google may process advertising data on servers in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred to countries without an adequacy decision, Google relies on safeguards such as the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.

On-device data is kept until you delete it in the App, delete the App or clear its data.
Advertising data is retained by Google according to its own retention policies (https://policies.google.com/technologies/retention).
E-mails you send us are kept only as long as needed to answer your request, and then deleted (at most 24 months).

10. Your rights and choices

Everyone

Reset or delete your advertising ID: Android Settings → Google → Ads (or Privacy → Ads).
Opt out of personalized ads: Android Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalization", and in the App: Settings → Privacy choices (where shown).
Manage Google ad settings: https://adssettings.google.com
Revoke location permission: Android Settings → Apps → WiFi Heatmap → Permissions. The App then cannot read the network name or take readings until you allow it again.
Delete your data: delete maps in the App, or uninstall it or clear its storage in Android Settings → Apps.
Contact us at [email protected] with any question or request.

You have the right to access, rectify, erase, restrict and object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. Because we do not hold personal data about you ourselves, we will help you exercise these rights and point you to Google, which holds the advertising data.

United States (California CCPA/CPRA and other state privacy laws)

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with consumer privacy laws have the right to know what personal information is collected, to access and delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information for targeted (cross-context behavioral) advertising.

In the last 12 months, the categories collected through the ad SDK are: identifiers (advertising ID, IP address), internet or other electronic network activity (ad interactions), and approximate geolocation. They are disclosed to Google and its ad partners for advertising.
We do not sell personal information for money. Using advertising IDs for targeted ads may count as "sharing" or "selling" under some state laws. To opt out, use Android's "Delete advertising ID" / "Opt out of Ads Personalization" setting, the App's Privacy choices (where shown), or e-mail us.
We do not use or disclose sensitive personal information, and we will not discriminate against you for exercising your rights.
You may use an authorized agent; we may need to verify the request.

Israel (Protection of Privacy Law, 5741-1981, as amended)

You have the right to review information about you held in a database and to request its correction or deletion. Contact us at [email protected]. You may also contact the Israel Privacy Protection Authority.

Brazil (LGPD), Canada (PIPEDA) and other countries

You have similar rights to access, correct and delete your personal information and to withdraw consent, as provided by your local law. Contact us and we will respond within the time the law requires.

11. Children's privacy

The App is a general-audience utility and is not directed at children under 13 (or under 16 where that is the age of digital consent in your country). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has used the App in a way that caused personal information to be collected, contact us at [email protected]. Because the App does not collect personal information itself, you can also reset the device's advertising ID and uninstall the App to remove all data.

12. Security

Your maps and readings stay in the app's private storage, which other apps cannot read on a standard (non-rooted) device. Communication with Google's ad servers is encrypted (HTTPS). Backup and export files are not encrypted, so store and share them with care. No method of storage or transmission is 100% secure, but we keep the data we handle to a minimum.

13. Changes to this policy

If we change this policy (for example if we add a feature that collects new data, such as analytics, accounts, cloud backup or in-app purchases), we will update this page and its "Last updated" date before the change takes effect, and where required by law we will ask for your consent again.

14. Contact

BrightPixel — Suleiman, Israel E-mail: [email protected]