HIKER Privacy Policy
This Privacy Policy explains how the HIKER Android app (“HIKER”, “the app”), published by Shadow Works LLC (“we”, “us”), handles your information. HIKER is a tool for detecting Bluetooth trackers and surveying nearby wireless devices, networks and cell towers.
The short version
- HIKER has no accounts, no ads, no analytics and no crash reporting.
- Everything HIKER records about your scans, including your location, is stored only on your phone. We never receive it.
- A few optional features contact third-party services, listed below. Those services see your IP address and the request the feature needs, and nothing else.
- We do not sell or rent your data.
1. Information stored on your device
HIKER saves the following in its private storage on your phone. It is not uploaded to us or anyone else.
- Location. When you allow location access, HIKER records your precise location to mark where trackers, devices and networks were found and to draw the path you walked during a scan. If you turn on Background Scanning, HIKER continues to collect location while the app is closed or not in use, for as long as that scan runs. A notification is always shown while it does.
- Nearby Bluetooth devices. Device names, addresses, signal strength, manufacturer and the data those devices broadcast publicly, including drone Remote ID broadcasts.
- Wi-Fi networks and local network devices. Network names (SSIDs), access point addresses (BSSIDs), signal and security details, and, when you scan your local network, the addresses, host names and services of devices on it.
- Cellular information. The cell towers your phone sees (carrier and cell identifiers, signal levels). If you turn on Cellular Detail, HIKER also reads which SIMs and carriers are in your phone. HIKER never reads your phone number, call log, contacts or messages.
- Your settings and lists, such as favourites, the ignore list and watchlist.
- Terminal hosts. If you save SSH hosts, their addresses and user names are saved. Saved passwords and the app's SSH key are encrypted with a key held in your phone's Android Keystore.
- Your own API key for OpenCelliD, if you enter one.
2. Information shared with third parties
HIKER contacts the services below only to provide the feature named. They receive your device's IP address, as any internet request does, plus what is listed.
| Service | When | What it receives |
|---|---|---|
| OpenFreeMap | When a map is displayed | Requests for the map tiles of the area you are viewing |
| OpenCelliD | Only if you turn on online tower data and enter your own API key | Your API key, the identifiers of cells your phone has connected to, and the map area being looked up |
| Overpass API (OpenStreetMap), via overpass-api.de or overpass.kumi.systems | Only if you turn on online tower data | The map area being looked up for cell masts |
| Cloudflare (speed.cloudflare.com) | Only when you run a speed test | Test traffic to measure your connection speed |
| Google Play and RevenueCat | When you view plans, start a purchase or restore one | Purchase and subscription status, an anonymous app user ID created by RevenueCat, and basic device and app information (such as device model, OS version and country). Payment details are handled by Google Play; we never see them. |
Hosts you connect to yourself with the Terminal or the network tools receive the traffic you send them, as you direct.
Exports. HIKER can export your scan data (for example as JSON or KML). Exports leave your phone only when you choose to share them, and only to the app or person you choose.
3. Why HIKER uses each permission
- Nearby devices / Bluetooth: to scan for Bluetooth trackers and devices.
- Location: Android requires it for Bluetooth and Wi-Fi scanning, and HIKER uses it to put what you find on the map.
- Wi-Fi state: to survey Wi-Fi networks and discover devices on your local network. HIKER does not join or change your networks.
- Phone state (optional, asked only when you turn on Cellular Detail): to read SIM and carrier details.
- Notifications: for watchlist alerts and the background scan notice.
- Foreground service and battery optimization exemption: so a background tracker scan keeps running with the screen off.
- Internet: for maps, the optional services above, purchases and the network tools.
4. How your data is protected
Your scan data lives in HIKER's private app storage, which other apps cannot read. Requests to the services above are made over encrypted HTTPS connections. Saved Terminal passwords are encrypted using the Android Keystore.
5. Backups
If Android backup is on, your HIKER settings and lists may be included in your Google backup so they restore when you reinstall. Your scan history, locations and exports are excluded from backups and device-to-device transfers.
6. Retention and deletion
- Scan data is kept on your phone for the retention period you choose in Settings → Data Management, and older data is deleted automatically.
- You can delete everything at any time with Clear All Scan Data in the same section.
- Uninstalling HIKER deletes all of its data from your phone.
- We hold no copy of your scan data, so there is nothing for us to delete. For data held by RevenueCat in connection with purchases, contact us and we will request its deletion.
7. Children
HIKER is not directed at children under 13, and we do not knowingly collect information from children.
8. Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date. Significant changes will also be noted in the app's release notes.
9. Contact
Questions or requests about privacy:
Shadow Works LLC
dvance@shadowworksllc.com