ISPFindr Privacy Policy

Information we collect

You can use many ISPFindr features without an account, including Wi-Fi analysis, connection tests and browsing providers. When you create an account or use features that need our servers, we collect the following.

Information you give us

Information we collect as you use our services

What stays on your device

The following readings are measured, analysed and shown within the ISPFindr app on your device. They are not sent to us or anyone else, unless you choose to attach some of them to a report.

• Wi-Fi analysis. Names and hardware addresses of nearby networks, channels, signal strength, link speed and channel congestion. Only your own router's address can leave your device, and only inside a report you send (see Reports sent to providers).
• Bluetooth overlap. Nearby Bluetooth devices, used only to check whether they interfere with your 2.4 GHz Wi-Fi channel.
• Local network devices. Your router and the devices found on your Wi-Fi network.
• Connection tests. Ping, traceroute, DNS response times and your device's memory usage.
• Network traffic inspector. The apps you choose to inspect and the servers they connect to.

These readings stay in the app until you clear them or uninstall the app.

Network traffic inspector

Voice calls dropping or games lagging are often caused by the route between your internet provider and an app's servers. The network traffic inspector shows which servers an app connects to and how well those connections perform, so you or a network engineer can find the cause.

How it works

• It uses Android's VpnService API to create a local VPN that runs entirely on your device. No remote VPN server is involved, and your traffic is never routed through our servers.
• Only the apps you select are inspected. All other apps connect as usual.
• It starts only after you read an explanation in the app, agree to it, and accept Android's VPN connection request. A notification is shown while it runs, and you can stop it at any time.

What it reads

Connection details only: the destination IP address and port, the protocol, the server's hostname where the app reveals it, and latency and packet loss. The app uses this to show which network operator each server belongs to.

What it doesn't do

• It doesn't read, store or decrypt the content of your messages, calls or other traffic.
• It doesn't install certificates or intercept encrypted connections.
• It doesn't upload what it captures. Network operator names are looked up on your device using a database file the app downloads from ispfindr.com. That download contains none of your data.
• It isn't used for advertising and never redirects or changes your traffic.

Device permissions

The app asks for each permission when you first use the feature that needs it. If you decline, the rest of the app continues to work. You can change these permissions at any time in your device settings.

The app doesn't use background location and doesn't access your contacts, messages, call logs or microphone.

How we use information

We use the information we collect to:

• Provide our services. Create and secure your account, show providers near you, publish your reviews, and deliver your reports.
• Maintain and improve our services. Run speed tests on our own servers, fix errors and understand which features work well.
• Communicate with you. Send verification codes and messages about your account or reports.
• Protect ISPFindr and our users. Detect fake reviews, spam, fraud and abuse, and enforce our Terms of Service.
• Meet legal obligations. Comply with applicable law and respond to valid legal requests.

Where the law requires a legal basis for processing, as in the European Economic Area and the United Kingdom, we rely on performing our contract with you when we provide the services you request, our legitimate interests in keeping ISPFindr secure and working well, your consent for optional features such as location and the network traffic inspector, and legal obligations where they apply. You can withdraw consent at any time.

We don't sell your personal information, we don't show ads, and we don't use your information for advertising or share it with advertising networks.

Reports sent to providers

A report is only useful if the provider can find your connection in its own systems. When you send one, the provider that operates that network receives:

• The issues you selected, your description and an optional rating.
• The public IP address and connection port our server saw, and the time you sent the report. These are always included, because they are how the provider finds your connection.
• Your display name and any customer ID you linked for that provider.
• Whether the report was sent from inside the provider's network, which we check by comparing your IP address with the address ranges the provider publicly announces.

Before you send, the app lists what the provider will receive. The following are included only if you leave them switched on:

• Phone and router addresses. Your device's local IP address, your router's IP address and your router's hardware (MAC) address, also called the BSSID. You can switch these off by default in Settings under Report.
• PPPoE username. Only if you saved one in the app.
• Test results. Your Wi-Fi network name, band, channel and signal strength, ping times, your latest speed test, and your phone's free memory, storage and temperature.
• Route. A traceroute you chose to attach.

Reports are private by default. They're visible to you, the provider and our moderators. Your rating and description become a public review only if you switch the review to Public before sending; it starts as visible only to the provider. If the provider hasn't joined ISPFindr yet, the report is held under its network number and becomes visible to the provider once it registers and verifies that network.

Sharing your information

Information that's public

Your display name, profile photo, bio, reviews, ratings and comments are visible to anyone using ISPFindr. Provider listings are public and may appear in search engines. Your email address, password, phone number and private reports are never made public.

With providers

Reports go to the provider concerned, as described in Reports sent to providers.

With service providers

We work with trusted companies that help us run ISPFindr. They receive only the information needed for their task. Speed tests run on servers operated by ISPFindr, not by a third party.

For legal reasons

We may share information if we believe in good faith that it's reasonably necessary to comply with applicable law or a valid legal request, enforce our Terms of Service, or protect the rights, property or safety of ISPFindr, our users or the public.

Business transfers

If ISPFindr is involved in a merger, acquisition or sale of assets, your information may be transferred. We'll notify you before it becomes subject to a different privacy policy.

Google API data

ISPFindr's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data only to create and manage your ISPFindr account and don't request access to any other Google data.

Keeping your information

We may keep some information for longer where required by law, or to resolve disputes and prevent abuse.

Your controls and deletion

• Edit or delete your reviews, comments and reports from your profile.
• Report any review you think breaks our Terms of Service, from the menu on the review. Our moderators check every report and remove reviews that break the rules. The author isn't told who reported it.
• Block another user so you no longer see their reviews and comments. Manage the people you blocked in the app under Settings, Blocked users. They aren't told.
• Update your profile details in your account settings.
• Turn device permissions on or off in your device settings.
• Remove ISPFindr's access to your Google account from your Google Account settings.

Deleting your account

You can delete your account at any time in the app under Settings, or on the web. To make sure it's really you, we first email a 6-digit code to the address on your account; the account is deleted only after you enter it. Deleting your account permanently removes your profile and the information linked to it, and can't be undone.

If you can't sign in, email [email protected] from the address linked to your account and we'll delete it within 30 days.

Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your information.
• Receive your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent you've given, without affecting processing that happened before.
• Lodge a complaint with your local data protection authority.

To make a request, email [email protected]. We may need to verify your identity first, and we respond within 30 days, or sooner where the law requires. We won't treat you differently for exercising your rights.

California residents. We don't sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information for purposes that require an opt-out.

International transfers

ISPFindr is available internationally. Your information may be processed on servers in countries other than the one where you live, which may have different data protection laws. Wherever your information is processed, we protect it as described in this policy, and where required we use appropriate safeguards for transfers.

Security

We build security into ISPFindr to protect your information. Connections to our servers are encrypted with TLS, passwords are stored as salted hashes, and sign-in sessions use signed tokens that expire. Access to personal information is limited to the people who need it to operate the service. No method of transmission or storage is completely secure, but if a breach affects your information we'll notify you as required by law.

Children

ISPFindr isn't intended for children under 13, or the minimum age required to consent to data processing in your country if that is higher. We don't knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we'll delete it.

Changes to this policy

We change this policy from time to time. We won't reduce your rights under this policy without your consent. We always show the date the latest changes took effect, and if changes are significant we'll provide a more prominent notice, such as a message in the app.

Contact us

If you have questions about this policy or how we handle your information, contact GenByte at [email protected].