Wi-Fi Toolbox by SiggySoft Privacy Policy
For Wi-Fi Toolbox by SiggySoft on Android (and on iPhone once released), published by SiggySoft LLC. Effective 2026-10-29.
Who we are
Wi-Fi Toolbox by SiggySoft is made by SiggySoft LLC (www.siggysoft.org). Send privacy questions to contact@siggysoft.org.
What we collect
Nothing, unless you send us feedback or a survey for checking. The app has no account, no analytics, no advertising and no tracking, and it sends SiggySoft nothing about you, your phone, your location or the networks around you.
What the app reads on your phone, and why
- Precise location: Android requires it to hand any app Wi-Fi scan results, the joined network's name and address, cell tower details and Bluetooth beacons, because these can reveal where the phone is. Surveys also use GPS to place readings on the map. Asked the first time a tool needs it.
- Nearby devices (Wi-Fi and Bluetooth): Bluetooth scanning and device names, Wi-Fi RTT ranging and Wi-Fi Easy Connect.
- Physical activity: The step detector that moves your dot on a floor plan between taps during a survey. Only counts steps while a survey is recording.
- Notifications: The notification shown while a roaming test, survey or Bluetooth log runs with the screen off.
- Internet and network state: The tests you start (portal test, network checks, network tools), map tiles, and feedback you choose to send.
- Wi-Fi state and multicast: Asking for Wi-Fi scans, reading the joined network, and finding devices on your own network (mDNS and SSDP).
What stays on your phone
Survey sites, floor plans and surveys (with the positions where readings were taken, network names, access point addresses and signal values), the connection history, roaming test results (with the positions where you walked during the test, while location is allowed), the Bluetooth device log (with the place a device was heard, only if you switch that on), your names for access points, the networks you mark as yours, and the latest portal test and network check results are saved in the app's own storage on the phone. They stay until you delete them in the app or uninstall the app. The app does not include them in Android's cloud backup.
When information leaves your phone
Only when you start something that needs it:
- connectivitycheck.gstatic.com and www.google.com: the captive portal test: the same HTTP and HTTPS checks Android makes to find a login page, then the portal's own pages, which the app reads but never fills in
- www.google.com, www.cloudflare.com, www.apple.com, www.microsoft.com and www.wikipedia.org: the portal test and network checks: whether something on the network interferes with secure connections
- dns.google and cloudflare-dns.com (and dns.quad9.net when you pick it): network checks and the DNS lookup tool: answers to compare with your network's
- o-o.myaddr.l.google.com: network checks: which DNS resolver your network uses (a DNS question, sent through your network's DNS)
- stat.ripe.net: network checks: your public internet address and the operator of the networks involved
- ipv6.google.com: network checks: whether IPv6 works on the network
- Your Wi-Fi gateway: network checks: one HTTP and one HTTPS request to its admin page; no password is tried
- Devices on the Wi-Fi network you joined: device discovery, port check, Wake-on-LAN and the guest isolation test, only when you start them, and never outside that network
- 1.1.1.1, or the host you set: the roaming test: one ping a second over Wi-Fi while the test runs
- tile.openstreetmap.org: outdoor surveys and the roaming test's map: street map pictures for the area on screen
- Google's map servers, through Google Play services: the same maps with Satellite chosen (Android): Google's satellite view of the area on screen, only while it is shown
- rdap.org, whois.iana.org and the registries they point to: WHOIS and RDAP lookups you ask for
- Hosts you type: ping, traceroute, DNS, the HTTPS inspector and iperf3: the targets you choose
- www.siggysoft.org: only when you send feedback or a survey for checking, after showing you every word
Those servers see your phone's internet address, as any website does, and the request itself. Their own privacy policies apply: for street map tiles, the OpenStreetMap Foundation's; for the satellite view, Google's; for DNS-over-HTTPS, Google's and Cloudflare's; for RIPEstat, the RIPE NCC's.
Sharing. Exports (images, survey packages, CSV, GeoJSON, KML, WiGLE CSV, Sweet Home 3D files, PDF reports, logs) go only to the app you pick in Android's Share menu. Before a survey is shared, the app lists what the file contains and lets you leave out GPS positions or replace access point addresses.
Satellite view (Google Maps). On Android, the outdoor survey and roaming test maps offer Street (OpenStreetMap) or Satellite. Satellite is drawn by Google's Maps SDK for Android, part of Google Play services, and contacts Google's map servers only while it is on screen. Google receives the area shown, which on a live map is centred on your phone's position. By Google's own list for its map code, it also receives the phone's Android version, model and brand, the map code's version, your internet address, a pseudonymous identifier for the map code, crash data, and your pans and zooms on the map, and uses them to improve Google services. The app never saves Google's map pictures or puts them in an exported file. Choose Street to keep Google out of the maps. This app includes Google Maps features and content; their use is subject to the Google Maps End User Additional Terms of Service and the Google Privacy Policy.
QR codes. Reading a QR code with the camera uses Google's code scanner, which runs in Google Play services on the phone; the app receives only the decoded text. The camera picture is not sent anywhere, but Google's code scanner sends Google device information, the app's name and version, performance data and identifiers, which Google uses for diagnostics and usage analytics. Google's privacy policy applies to Google Play services.
Feedback you send
If you use Send feedback, the app first shows you everything that will be sent: your message, the e-mail address you choose to give (optional), and, if you leave the box ticked, the app version, phone model and Android version. Only the Send button on that screen sends it, over HTTPS, to SiggySoft's feedback service on www.siggysoft.org. Scan results, network names, addresses and positions are never added to it. The first time you send a report, the app registers with the service and receives a random identifier for this installation, which it uses to sign its reports; it is not linked to your name or your Google account. Like any website, the service also receives your internet (IP) address, and it keeps it with the report to limit misuse.
A survey sent for checking. A survey's share screen has Send to SiggySoft for checking, for when a survey does not work as expected. It sends, the same way and to the same service: what you write, the survey with every reading's position (GPS outdoors), network name, access point address, signal and ping times, and the survey's log of what each reading did (for example the GPS fix, the networks heard, the pings, and on iPhone the answer of the Shortcuts reading). The screen before sending shows all of it, word for word, and nothing is sent until you tap Send there. SiggySoft uses it only to find and fix the problem, and deletes it on request by ticket number like any other report.
We use reports only to answer you and to fix and improve the app. Reports are kept on SiggySoft's own server and are not sold or shared. To have a report deleted, e-mail contact@siggysoft.org with its ticket number (the app shows it after sending). If you email us instead, we receive your address, your message and any attachment, and handle them the same way.
Children
The app is a tool for network and security staff and is not directed at children. It collects nothing from anyone.
Changes and contact
If a later version changes what the app sends, this policy will say so before that version is released, with a new effective date at this address. Questions: contact@siggysoft.org.