Telemetry: zero

“Telemetry: zero.” is a specific claim, so here it is in specific words.

What it means

Hexpit does not collect usage data, crash reports, device identifiers or analytics, and it sends none to the developer or to anyone else. There is no account, no sign-in and no advertising. The app contains no analytics, crash-reporting or advertising SDK, and it has no backend of ours to talk to.

What Hexpit does not do

  • It does not ask you to create an account.
  • It does not phone home: no usage events, no “anonymous” statistics, no crash uploads.
  • It does not show ads or load ad networks.
  • It does not request a permission when it starts. Camera and location are asked for only at the moment you tap a feature that needs them.
  • It does not back up or transfer its data off the device. Cloud backup and device-to-device transfer are switched off for every kind of app data.
  • It does not send what you type into a tool to any AI service. The app has no such feature.

What can leave your phone

Hexpit does not claim to work without a network, because some tools exist to talk to one. They do:

  • Network tools talk to the host you enter. Ping, port scan, TLS probe, HTTP headers, WebSocket client, Wake-on-LAN, NTP and the others send their traffic to the address you type, and only when you run them. That traffic goes to that host, not to the developer.
  • A few tools use a fixed public service when you tap their button. My IP asks Cloudflare (one.one.one.one) which public address it sees. DNS lookup uses your system resolver unless you pick a public one (Cloudflare, Google or Quad9, over HTTPS) or enter your own. Whois queries registry RDAP servers, and uses IANA’s RDAP bootstrap data (data.iana.org) to find the right one. Those services see your IP address, as any website you visit would.
  • Files you export are files you chose to create. Hexpit does not upload them.

Because network tools send what you ask them to send, use them only on systems you own or are allowed to test.

How to check it yourself

  • Run the app behind any on-device firewall or traffic monitor you trust and watch what it connects to. With no tool running, it should be silent.
  • Read the permission list below. It is exported from the app build, so it matches the manifest of the same version.
  • When the Google Play listing is live, its Data safety section will state that no data is collected. Google Play itself still handles the install, under Google’s own policy.

Permissions

Permissions declared in the app manifest, with the reason for each. Exported from the app build.
PermissionKindWhy
ACCESS_COARSE_LOCATIONAsked when you use the featureRequested when the user taps Use my location for declination. One coarse fix, used once for the compass magnetic declination, never stored or sent.
ACCESS_NETWORK_STATEInstall time, no promptShow whether the device is online and which network type.
ACCESS_WIFI_STATEInstall time, no promptShow current Wi-Fi details to the user (diagnostics).
CAMERAAsked when you use the featureRequested when the user taps Scan with camera. Reads QR codes; nothing is recorded or stored.
HIDE_OVERLAY_WINDOWSInstall time, no promptStops other apps drawing over confirmation and lock screens.
INTERNETInstall time, no promptNetwork tools run only against hosts the user enters; optional AI provider calls.
USE_BIOMETRICInstall time, no promptOptional app lock uses the system fingerprint or screen-lock prompt.

Camera and location hardware are optional: the app installs and runs without them. The app declares no background location, no foreground services and no VPN service.

Limits of the claim

  • This page describes the app. The website is covered in the privacy policy.
  • If a future version adds anything that sends data off the device, this page and the privacy policy will change first, and the feature will say what it sends before you use it.