Ambit — privacy policy

Last updated 2026-08-18

Ambit scans your own network and whatever radios are around you. That sounds invasive, so this page is specific about where the results end up, which is almost nowhere.

Who is responsible

Marcel Meijer. Contact: info@kynto.eu.

What stays on your device

Everything the app finds. Device names, hardware addresses, IP addresses, open ports, Wi-Fi networks, Bluetooth devices, NFC tag contents, satellite data, every security finding — all of it is stored on the phone and none of it is sent anywhere. You don't make an account, you don't sign in, and no server anywhere holds a copy of your network.

What leaves your device

Fingerprint databases

Once a day at most, the app fetches the device-identification databases from ambit.kynto.eu. It's an ordinary request for some static files, with no identifier attached, nothing about your network and nothing about you. The server logs what any web server logs, which is an IP address and a timestamp.

All of those databases also ship inside the app, so the fetch is purely about staying current. An app that never touches the network will still identify devices.

Advertising

The free version shows ads through Google AdMob. That's a Google service and it collects data under Google's terms, not mine. You're asked for consent through Google's consent flow before any ad loads, and whatever you pick there decides what AdMob is allowed to do, personalisation included. The paid version shows no ads and doesn't even load the ad code.

Purchases

You buy the paid version through Google Play Billing. Google handles the payment. The app never sees your card details, only whether you bought it.

Every permission, and why

Location (ACCESS_FINE_LOCATION, NEARBY_WIFI_DEVICES) — this is the one that worries people, so, plainly: Android makes any app ask for location permission before it can list Wi-Fi networks or scan for Bluetooth, because the set of networks around you can give away where you are. That's the only reason Ambit asks. Your coordinates aren't collected, stored or sent anywhere.
Wi-Fi state (ACCESS_WIFI_STATE, CHANGE_WIFI_STATE, CHANGE_WIFI_MULTICAST_STATE) — to list networks, read signal strength, and receive the multicast traffic devices use to announce themselves.
Bluetooth (BLUETOOTH_SCAN, BLUETOOTH_CONNECT, and the older BLUETOOTH/BLUETOOTH_ADMIN on Android 11 and earlier) — to see nearby devices and to notice which ones keep travelling with you.
NFC — to read and write tags you hold against the phone.
Network access (INTERNET, ACCESS_NETWORK_STATE) — to scan your local network, and to fetch the databases described above.
Notifications (POST_NOTIFICATIONS) — only so it can tell you when an unfamiliar device joins a network you asked it to watch.

The desktop companion

Pair your phone with the companion program and the two talk directly over your own network, encrypted with a key you exchanged by QR code. None of that traffic goes through a server of mine, and there's nothing sitting in the middle of it.

Children

Ambit is a network diagnostic tool. It isn't aimed at children.

Your rights

No server holds personal data about you, so there's nothing here for you to request, export or have erased. Uninstalling the app takes everything it stored with it. If you think that's wrong, write to info@kynto.eu. You can also complain to your national data protection authority, which in the Netherlands is the Autoriteit Persoonsgegevens.

Changes

If this policy changes, so does the date at the top, and the old version goes away. Anything significant about what leaves your device gets written up in the app's release notes too.

Data licences and attribution →