NetOS is built to keep your data on your device. This policy explains what the NetOS mobile app processes, where that information lives, and the very few technical exceptions that involve any outbound connection.

1. Who is responsible

The controller responsible for data processing in connection with the NetOS app, within the meaning of the EU General Data Protection Regulation (GDPR), is:

Coderilla GmbH
Alte Kasernstraße 16
97082 Würzburg, Germany
Email: contact@coderilla.de

Full company details are available in our Imprint.

2. Scope

This policy covers the NetOS mobile application for iOS and Android. Data handling for this website is described separately in section 10. NetOS is a network monitoring and logging tool: it lets you scan the Wi-Fi networks, local-network hosts, open ports and Bluetooth Low Energy devices around you, and keeps a log of what you find.

3. What NetOS processes, and where it stays

All of the following is processed locally on your device and stored in an on-device database. None of it is transmitted to Coderilla GmbH or to any third party by the app.

Network & scan data

Wi-Fi network identifiers (such as SSID/BSSID and signal strength), local-network hosts you scan (IP addresses, detected services and open ports), and related metadata. This is generated when you actively run a scan and is stored on your device so you can review your history.

Bluetooth Low Energy data

When you use the Bluetooth scanner, NetOS reads the advertisements that nearby BLE devices broadcast — such as advertised names, signal strength and company/service identifiers used to fingerprint the device vendor and type. This is stored on your device only.

Location

If you grant location access, NetOS uses your device's location solely to place discovered networks and devices on the in-app map and to estimate their bearing/distance. Location is used on-device for this purpose and is never transmitted off the device. You can deny or revoke this permission at any time in your system settings; the map features simply won't be able to position nodes.

Saved Wi-Fi passwords

If you choose to save a Wi-Fi password, it is stored in your operating system's secure credential store (Apple Keychain / Android Keystore) — not in the app's regular database. Coderilla GmbH never receives or has access to these passwords.

Requests you make with the API console

The API tab is a REST client you can point at any address you type in. When you send a request, it goes directly from your device to the address you entered — for example a host on your own network. That traffic, and any data you put in it, is between your device and that destination. It does not pass through, and is not seen by, Coderilla GmbH. You are responsible for the requests you choose to send.

4. App updates

NetOS uses Expo's over-the-air update service (EAS Update) to deliver app updates. To check for updates, the app contacts the Expo update server, which necessarily receives the technical information required to serve the correct update (such as your app version/runtime and the IP address inherent to any internet request). This mechanism is used only to keep the app up to date; it does not transmit your scan data, discovered devices, location, or saved passwords. Expo (Expo, part of the Expo/EAS platform) processes this as our technical service provider. The legal basis is our legitimate interest in maintaining and securing the app (Art. 6(1)(f) GDPR).

App downloads, installations and any purchases are additionally handled by the Apple App Store and Google Play under their own terms and privacy policies (see section 9).

5. What we never do

• No user accounts, sign-up or login.
• No analytics, tracking, or advertising SDKs are bundled in the app.
• No server operated by Coderilla GmbH receives your scan data, devices, location or passwords.
• We do not sell, rent, or share your data with third parties for their own purposes.
• No advertising and no user profiling.

6. Your control over your data

Because everything is stored locally, you are in direct control of it:

• Export / import — you can export your data from the app and import it again.
• Total wipe — you can erase all NetOS data stored on your device with one action in the app's settings.
• Uninstalling the app removes its on-device database. Passwords held in the OS keychain follow your operating system's rules for app credential storage.

7. Your rights under the GDPR

As NetOS stores your data on your own device and Coderilla GmbH does not hold it on any server, we generally cannot access, retrieve or delete data that exists only on your device — you control it directly through the app. Where we do process personal data relating to you (for example if you email us), you have the right to:

• access the personal data we hold about you (Art. 15 GDPR);
• rectification of inaccurate data (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. In Bavaria, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA). To exercise any right, contact us at contact@coderilla.de.

8. Children

NetOS is a technical utility not directed at children, and we do not knowingly process data of children. It is intended for users who are legally able to accept the terms and who understand the responsible-use requirements.

9. Apple and Google

When you download or purchase NetOS, the distributing platform — Apple (App Store) or Google (Google Play) — processes the associated account, download and payment information under its own privacy policy, independently of us. Please refer to Apple's Privacy Policy and Google's Privacy Policy for details.

10. This website

This website (netos.coderilla.de) is a static site hosted on Firebase Hosting (Google Ireland Ltd. / Google LLC). It does not set cookies, run analytics, or load any third-party trackers or fonts — all fonts and assets are served from this domain. As with any web server, the hosting provider processes standard technical server logs (including the requesting IP address) as necessary to deliver the site and maintain its security, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Google acts as our processor for hosting.

11. Changes to this policy

We may update this policy to reflect changes in the app or legal requirements. The "last updated" date at the top always reflects the current version. Material changes will be communicated as appropriate.

12. Contact

For any privacy question or to exercise your rights:
Coderilla GmbH · contact@coderilla.de