1. Data that stays on your device
- Router addresses and credentials are stored only in your phone's secure storage (Android Keystore / iOS Keychain). They are never transmitted to us.
- Hotspot users, vouchers and sessions live on your own MikroTik router. The app talks to your router directly over your local network or a connection you configure.
2. Data we process if you create an account
An account is optional — it unlocks premium, cloud backup and support tickets. With an account we store:
- Email address (and, if you use Google/Apple sign-in, the identifier those providers share) — to operate your account, and occasionally to email you about the service: app updates, surveys, or asking whether something isn't working. Every such email has a one-click unsubscribe link.
- Subscription state — plan, period and expiry, derived from store receipts verified server-side. We never see your payment card; payments are processed by Google Play or the Apple App Store.
- Support tickets — the messages you send us.
- Push notification token — if you allow notifications, a Firebase Cloud Messaging token so we can notify you when support replies. Deleted when invalid and removable by deleting your account.
- Usage counts — once a day: app version, how many routers you manage, how many hotspot users and vouchers they have, and which features you used (for example, that you set up a hotspot). Counts only, never the users themselves.
- Router fingerprint — for each router you connect: a one-way hash of its hardware ID (the RouterOS licence ID or serial number), its model and RouterOS version, and when it was first and last seen. It gives each router one free trial, counts your routers toward your plan's router limit across all your devices, and helps support answer questions about your setup. The hardware ID itself never leaves your phone.
3. Cloud backups are end-to-end encrypted
If you use cloud backup, your data is encrypted on your device with a passphrase only you know (AES-256-GCM) before upload. We store ciphertext we cannot decrypt. If you lose the passphrase, we cannot recover the backup.
4. Crash reports and usage statistics
To find and fix problems, the app uses Google Firebase Crashlytics and Google Analytics for Firebase. They receive:
- Crash and error reports — what went wrong in the app (for example a router command that failed), the app and Android or iOS version, the device model, and the kind of router (RouterOS version and model).
- How the app is used — which screens are opened and which actions succeed or fail: adding a router, setting up a hotspot, creating and printing vouchers, buying a plan.
- Hotspot totals — how many guests are online and whether they signed in with a voucher, a username and password or a free trial, and how many vouchers have been used. Totals only.
- If you are signed in, your account's random ID, so a support ticket can be matched to what happened on your phone.
You can turn all of this off in the app under More → Share crash reports and usage data.
5. What we do NOT collect
- No location, contacts or files. A logo or cover photo you pick from your photos is sent only to your own router.
- No advertising identifiers and no ads. Analytics is used only to improve the app, never for advertising or to track you across apps.
- No router addresses or passwords, and nothing that identifies your Wi-Fi customers — no names, voucher codes or device addresses. Their sessions stay on your router.
6. Where data is stored and who sees it
Account data is hosted on Supabase (managed Postgres) with row-level security: our support staff can read only support tickets, nothing else. Data is encrypted in transit (TLS). We do not sell or share personal data with third parties, except the processors needed to run the service: Supabase (hosting), Google Firebase (push delivery, crash reports and analytics), Resend (email delivery), Google Play / Apple (payments).
7. Retention and deletion
Account data is kept while your account exists. You can delete your account at any time in the app (More → Account → Delete my account). It is closed at once: you are signed out on every device and can no longer sign in. We keep its data for 90 days — to answer support questions about it and to prevent abuse such as repeated free trials — and then erase your profile, tickets, devices, backups and subscription records for good. After that we keep only a one-way hash of your email address, the hashed router IDs described above with whether their free trial was used, the platforms you used and the relevant dates, so the same router cannot receive another free trial. If you want your data erased before the 90 days are up, write to us and we will do it. Deleting the account does not cancel a Google Play or App Store subscription; cancel it in the store. Store purchase records remain with Google/Apple under their policies.
8. Children
MikroWiFi is a business tool and is not directed at children under 13. We do not knowingly collect data from children.
9. Changes
We will post any changes to this policy on this page and update the effective date. Material changes will be announced in the app.
10. Contact
Questions or data requests: support@mikrowifi.com