Privacy Policy

Effective date: 17 July 2026

MikroWiFi ("the app", "we") helps you manage MikroTik routers and sell Wi-Fi vouchers. This policy explains what data the app handles, where it is stored, and your rights. The short version: your router credentials never leave your device, backups are encrypted so we cannot read them, and we collect only what an optional account needs to work.

1. Data that stays on your device

Router addresses and credentials are stored only in your phone's secure storage (Android Keystore / iOS Keychain). They are never transmitted to us.
Hotspot users, vouchers and sessions live on your own MikroTik router. The app talks to your router directly over your local network or a connection you configure.

2. Data we process if you create an account

An account is optional — it unlocks premium, cloud backup and support tickets. With an account we store:

Email address (and, if you use Google/Apple sign-in, the identifier those providers share) — to operate your account.
Subscription state — plan, period and expiry, derived from store receipts verified server-side. We never see your payment card; payments are processed by Google Play or the Apple App Store.
Support tickets — the messages you send us.
Push notification token — if you allow notifications, a Firebase Cloud Messaging token so we can notify you when support replies. Deleted when invalid and removable by deleting your account.

3. Cloud backups are end-to-end encrypted

If you use cloud backup, your data is encrypted on your device with a passphrase only you know (AES-256-GCM) before upload. We store ciphertext we cannot decrypt. If you lose the passphrase, we cannot recover the backup.

4. What we do NOT collect

No location, contacts, photos or files.
No advertising identifiers, no ads, no third-party analytics or tracking SDKs.
No data about your Wi-Fi customers — their sessions exist only on your router.

5. Where data is stored and who sees it

Account data is hosted on Supabase (managed Postgres) with row-level security: our support staff can read only support tickets, nothing else. Data is encrypted in transit (TLS). We do not sell or share personal data with third parties, except the processors needed to run the service: Supabase (hosting), Google Firebase (push delivery), Google Play / Apple (payments).

6. Retention and deletion

Account data is kept while your account exists. You can delete your account at any time in the app (More → Account → Delete my account) — this permanently removes your profile, tickets, devices, backups and subscription records from our systems. Store purchase records remain with Google/Apple under their policies.

7. Children

MikroWiFi is a business tool and is not directed at children under 13. We do not knowingly collect data from children.

8. Changes

We will post any changes to this policy on this page and update the effective date. Material changes will be announced in the app.

9. Contact

Questions or data requests: support@mikrowifi.app