← All policies

Ambit — privacy policy

Last updated 2026-08-18

Ambit scans your own network and whatever radios are around you. That sounds invasive, so this page is specific about where the results end up, and about every case where something does leave the phone.

Who is responsible

Marcel Meijer. Contact: info@kynto.eu.

What stays on your device

Your scan results. Device names, hardware addresses, IP addresses, open ports, Wi-Fi networks, Bluetooth devices, NFC tag contents, satellite data, every security finding — all of it is stored on the phone. You don't make an account, you don't sign in, and no server holds a copy of your network.

Pairing keys, a Fingerbank API key if you entered one, your scan history and your tracker history are also left out of Android's cloud backup, so they don't end up in your Google account either.

The rest of this page lists what does leave the device. Some of it happens automatically, some only when you use a particular tool, and each case says which.

What leaves your device

Fingerprint databases

Once a day at most, the app fetches the device-identification databases from object storage I rent from OVHcloud in Germany. The same request tells the app whether its version has been withdrawn because of a serious bug. It's an ordinary request for some static files, with no identifier attached, nothing about your network and nothing about you. The storage provider logs what any web server logs, which is an IP address and a timestamp.

All of those databases also ship inside the app, so the fetch is purely about staying current. An app that never touches the network will still identify devices.

Device fingerprints you contribute

When a scan identifies a device with confidence, the app can send what it learned to ambit.kynto.eu, so the database gets better for everyone. This is on by default, and you can turn it off in the scan settings.

What's sent describes the product, not you: the make and model, its open ports, the first three bytes of its hardware address (which only say who manufactured it), the icon of its web page, and that page's server name, title and login prompt. Where a model name contains a serial number, only the part shared by several devices on your network is sent, never the serial.

What's never sent: the full hardware address, any IP address, a hostname, your Wi-Fi network's name, your location, or any identifier for you or your phone. Two people with the same router send identical submissions. One caveat worth knowing: a device's web page title is whatever its owner or manufacturer set, and occasionally someone puts a name in it. The server logs the IP address a submission came from, like any web server.

Internet tools

Each of these services sees your IP address, as any server you connect to does, and handles it under its own privacy policy.

Cloud identification (optional)

Off unless you enter your own Fingerbank API key. With a key, devices the app couldn't identify itself are looked up at api.fingerbank.org, which means sending their hardware address, hostname and the service names and descriptions they announce on your network. The app tells you this when you add the key, and removing the key stops it.

Analytics

The app uses Google Analytics for Firebase to learn which features get used and where it goes wrong. That's a Google service and it collects data under Google's terms, not mine. It can collect an app-instance ID, a Firebase installation ID, your phone's advertising ID, which screens you open and how long sessions last, purchase events, and your approximate location, which Google derives from your IP address and then discards the address. Everything is sent encrypted.

Analytics starts with consent denied. Until you agree, it sends only minimal signals without identifiers. Your answer to Google's consent form (see Advertising below) decides what it may do from then on, and where the law requires that choice, you can change it any time under Privacy options in the network screen's menu. People who bought the paid version are never shown that form, so for them analytics stays in the denied state.

Advertising

The free version shows ads through Google AdMob, under Google's terms. AdMob collects your approximate location, how you interact with ads, diagnostic information and your phone's advertising ID. You're asked for consent through Google's consent form before any ad is requested, and whatever you pick there decides what AdMob is allowed to do, personalisation included. The paid version never shows that form and requests no ads.

No ad is ever shown on the screen that checks whether a Bluetooth device is following you.

Purchases

You buy the paid version through Google Play Billing. Google handles the payment. The app never sees your card details, only whether you bought it.

Every permission, and why

The desktop companion

Pair your phone with the companion program and the two talk directly over your own network, encrypted with a key you exchanged by QR code.

If the phone can't reach the computer directly, for example because you're away from home, and the pairing includes a relay, the traffic goes through that relay instead. It is still encrypted with the key from your QR code, which the relay never has, so it can't read what passes through and doesn't store it. What a relay does necessarily see is that two devices are talking, when, and how much.

Children

Ambit is a network diagnostic tool. It isn't aimed at children.

Your rights

Under the GDPR you can ask what personal data is held about you, and have it corrected, exported or erased. In practice for Ambit:

For anything else, or if you think something here is wrong, write to info@kynto.eu. You can also complain to your national data protection authority, which in the Netherlands is the Autoriteit Persoonsgegevens.

Changes

If this policy changes, so does the date at the top, and the old version goes away. Anything significant about what leaves your device gets written up in the app's release notes too.

Data licences and attribution →