Privacy Policy — NetBlade
Last update: August 2026
This notice describes how the NetBlade app (package com.netblade.tools), developed by Innovatek Software (Innovatek di Cafaro Carmelina, VAT IT06424410659), handles data during use. NetBlade requires no account and does not collect personal data for its own purposes.
Scan data
Local network scans (devices, ports, Wi-Fi, diagnostic tools) run and are processed exclusively on the device. Saved results stay in the app's local storage and are never sent to our servers: Innovatek Software receives no data about your networks. A few optional tools query public third-party services, but only when you start them yourself — they are listed under “External services”. Exporting (CSV, JSON, PDF) and sharing happen only on an explicit action by the user.
Local storage, credentials and backup
App data — saved scans, recognised devices, networks, monitoring history — lives in a local database on the device. If you enter SNMP credentials to query your own equipment, they are stored in that same database unencrypted, because they must stay usable for later queries; for SSH connections the app saves host, port and username, never the password. The database is included in Android's standard Google backup, so your data can be restored on a new phone: that backup stays in your own Google account, encrypted, and is not accessible to us; you can turn it off in your device's backup settings. The backup file you can export manually from the app (.nbak) is not encrypted and contains the same credentials — keep it somewhere you consider safe.
Location permission
Android requires the location permission (or, from Android 13, the “nearby Wi-Fi devices” permission) in order to read Wi-Fi scan results, i.e. network names and access-point identifiers. NetBlade uses this permission only while the app is in use: there is no background location access. If you use the map features, the app saves the coordinates associated with a saved network or scan so it can show it on the map: they stay in the local database on your device and are not transmitted to us. Maps are drawn with OpenStreetMap, which receives the requests for the map tiles needed to display them. You may deny the permission: every other feature remains available.
External services
A few tools, and only when you start them yourself, query public third-party services: ipinfo.io for public-IP information and the geolocation of an IP address, crt.sh to look up a domain's certificates, speed.cloudflare.com for the speed test, and api.pwnedpasswords.com (Have I Been Pwned) to check for breached passwords. In that last case the password never leaves the device: only the beginning of its cryptographic hash is sent (k-anonymity), which cannot be traced back to the password. Each service receives only what that single request needs — the IP address, the domain, or the partial hash — along with the IP address the connection comes from. All requests use HTTPS. Scans of your local network never go through any external service.
Advertising (Google AdMob)
The free version shows ads through Google AdMob. To serve and measure ads, Google may process device identifiers (including the advertising ID) and technical data, as described in Google's privacy policy (policies.google.com/privacy). If you are in the European Economic Area, the United Kingdom or Switzerland, the app collects your consent through Google's form before any ad is requested: you can change or withdraw it at any time from Settings → Privacy options. Ads can be removed permanently with a one-time purchase.
In-app purchases
The "Remove ads" purchase is handled by Google Play Billing. Payment is processed entirely by Google: we never receive or store payment data.
Your rights
Since the app's data lives only on your device, you can delete it at any time by clearing the app's data or uninstalling it. For any privacy request (access, rectification, erasure) write to info@innovateksoftware.com.
Data controller
Innovatek di Cafaro Carmelina — VAT IT06424410659 — info@innovateksoftware.com