1. Scope and summary
This privacy policy applies to schukai WiFi Mess, the Android app with package ID com.schukai.wifimess. The app works without a user account, advertising, a server for its measurement functions or cloud synchronisation.
Wi-Fi readings, room outlines, walking paths and temporary camera and depth data remain in protected storage on your device. schukai does not receive these data. Separately, Google processes certain technical identifiers and diagnostic and usage data when ARCore is used; section 5 explains this.
WiFi Mess is offered exclusively to people aged 18 and over.
Document version 1.0.0 · Effective: 3 November 2026
2. Controller and privacy contact
schukai
Eichenstraße 26
82290 Landsberied
Germany
Email: hey@schukai.com
Further provider and contact information is available in the imprint and on our support page.
3. Measurement and room data processed locally
Depending on use, WiFi Mess processes the connected Wi-Fi network's SSID and BSSID, frequency, signal strength, link rates, timestamps and technical quality information. It also processes buildings, floors and rooms named by you, relative positions and orientations, walking paths, scan viewpoints, detected surface hits, confirmed room outlines and heatmaps calculated from them.
These data may allow conclusions to be drawn about a network, a person's location and the geometry of a building. They are processed exclusively in private app storage. The app includes no transmission of these measurement data, developer analytics, crash reporting or export of these data.
4. Camera, depth data and permissions
With your permission, the app needs camera access for room scanning and spatial tracking. During an open room scan, it may briefly store selected RGB images, raw depth data, confidence images, camera poses and camera parameters. RGB images may show people, objects and interiors.
These temporary data are stored with authenticated encryption in the app's no-backup area using a non-exportable Android Keystore key generated solely for the particular scan. Once the editable floor plan has been calculated or the scan discarded, the app deletes the archive and key. Nothing is uploaded to schukai.
For Wi-Fi detection, the app uses Android's permissions for Wi-Fi status, nearby devices and, depending on the Android version, location. WiFi Mess uses these permissions to identify the connected Wi-Fi network. It uses neither GPS to determine room geometry nor the ARCore Geospatial API or Cloud Anchors.
5. Google Play Services for AR (ARCore)
WiFi Mess uses Google Play Services for AR to determine camera positions, movement and, on supported devices, depth information. Google states that ARCore collects user or device identifiers, ARCore API usage and app interactions, as well as performance and diagnostic data. This processing is separate from the locally stored measurement projects and room recordings.
In the reviewed product state, WiFi Mess uses neither the ARCore Geospatial API nor Cloud Anchors. Operating-system permission to use the camera is not blanket consent to every technically possible analytics operation. Roles, legal bases and any need for consent to access the device are reviewed separately for the particular SDK version and its initialisation.
Further information is available in the ARCore data safety information and Google's privacy policy.
6. Storage and deletion
Confirmed building plans and measurement sessions remain stored locally until you delete them in the app, clear the app's data through Android or uninstall the app. Android system backups for the app are disabled.
Temporary RGB-D archives and their keys are removed after successful analysis or deliberate discarding. Orphaned archives are cleaned up when the app starts. An unconfirmed scan draft deliberately kept available for continuation currently remains stored locally until it is continued or discarded, or the app's data are removed; no automatic time-based deletion period is implemented in the reviewed product state.
Because schukai stores neither measurement projects nor ARCore data on its own server, it can neither view these data nor delete them centrally. Google provides information about retention and deletion of technical data collected by ARCore in its privacy notices.
7. No accounts, advertising or developer-operated user tracking
The current app version offers no registration or sign-in. It contains no advertising, advertising-ID analysis, in-app purchases or developer-operated user tracking or crash-reporting SDK. This excludes the ARCore technical diagnostic and usage data described in section 5.
Later optional paid features, accounts, exports, cloud services or additional analytics tools will be introduced only after this policy and the corresponding Play Store declarations have been updated.
8. Your rights and complaints
Subject to the statutory conditions, rights include access, correction, deletion, restriction of processing, data portability, objection and complaint to a data protection supervisory authority.
During local operation, schukai receives no measurement or room data and therefore cannot associate these data with a user, provide them or delete them centrally. Questions about the app and schukai's role can be sent to hey@schukai.com. Google's contact and data-subject channels apply to technical data processed by ARCore.
9. Changes to this policy
We update this policy before introducing new data flows, for example through accounts, cloud synchronisation, exports, analytics, crash reporting, in-app purchases or additional external services. The date above identifies the current version.
Further privacy rights and material changes
schukai does not sell personal data.
The data processing and contact channels described in this notice also apply when the app is used outside Germany. Mandatory rights under applicable privacy law remain available and are not limited to the GDPR rights expressly mentioned here. Depending on the applicable law and its conditions, these may include confirmation of processing, access, correction, deletion, anonymisation or blocking of data processed unlawfully or no longer needed, data portability, objection and withdrawal of consent. Requests concerning data processed by schukai can be sent to hey@schukai.com. You may also complain to a competent data protection authority.
Where the Brazilian LGPD applies to the processing, its rights remain available, including confirmation and access, correction, anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data, statutory data portability, information about recipients and about the possibility and consequences of refusing consent, withdrawal of consent and consent-related deletion. Statutory exceptions and retention duties continue to apply. Requests can be submitted through the privacy contact above; the right to complain to the ANPD remains unaffected.
If the processing described here changes materially, we will expressly inform affected users about the change, when it starts, its consequences and the relevant rights. For changes to an app function, a prominent in-app notice will be provided before the affected processing starts. Where a service or support change also affects older app versions, we will additionally ensure suitable direct notice through an existing contact or service channel that may lawfully be used, in good time before the change starts. Quietly changing a website or merely publishing an update is insufficient for this purpose. Where consent is required, it will be obtained before the processing that depends on it. A privacy notice does not constitute agreement to a contractual amendment.