🔒 Privacy Policy — Tahakkum Al-Shabaka (Network Control)

Last updated: October 2026 · Applies to Tahakkum Al-Shabaka (Network Control) — app.taskguardian.scanner

Core Principle: Fully Local Processing

Tahakkum Al-Shabaka (Network Control) processes all data locally on your device. No personal data content is sent to our servers or any third party, except the optional features listed below, and only when you ask.

Permissions & Data

PACKAGE_USAGE_STATS: Reads per-app data usage (WiFi vs. mobile data) locally via Android's NetworkStatsManager. Never transmitted. Required for the core Usage screen feature.

CAMERA: Used to scan router QR codes and capture internet bills for local OCR (ML Kit, on-device). Images are uploaded only for the optional "Cancel subscriptions" feature described below.

ACCESS_FINE_LOCATION (Android app): Required by Android 9+ APIs for Wi-Fi scanning. The app does not store or transmit those coordinates. Website visit locations are handled only if you separately request location sharing in the booking form.

Activation (Google Firebase): when you enter an activation code, the code and a hashed device fingerprint are sent to bind the code to your device.

ISP lookup: the app calls ipwho.is, which sees your public IP address to return your provider's name. We do not store it.

Speed test: test data is downloaded from and uploaded to Cloudflare and M-Lab servers, which see your IP address like any website.

Password leak check: only the first 5 characters of the password's hash are sent to Have I Been Pwned; the password itself never leaves the device.

Link scanner: checking a link contacts that link's domain and a domain-registry (RDAP) service to learn its age and status.

Remote control (optional): if you enable it on your router, the router sends the list of connected devices (name, MAC address, IP address) and blocked devices to a Google Firebase database about once a minute, under a random secret ID known only to your phone and router, so you can see and control them away from home. It stops when you turn the feature off or remove the agent.

Router password: stored encrypted on your phone only, and sent only to the linked router while you are on the home network you linked it on. It never reaches our servers.

Bill check (optional): the bill is read only on your phone: the text of a PDF, or the digits and Latin letters of a photo using an on-device text reader. The bill, its image and its text are never sent to any server, and no AI service is used. Results are stored only on your phone; clearing the app's data deletes them.

Prepaid deduction messages (optional): we never read your messages and never request SMS permission. If you paste or share a deduction message yourself, the app classifies it only on your phone and its text is never sent to any server. The optional balance check uses a USSD code you type; the balance is stored only on your phone.

Cancel unwanted subscriptions (optional): the app finds content subscriptions in your bill only on your phone and never sends the bill to any server. To cancel, the app opens your messaging app with the number and text pre-filled; we never request SMS send/read permission, and you decide whether to tap Send.

"Notify me" waitlist (optional): the phone number (and email, if you give one) you enter with consent is stored in a Google Firebase database only to notify you when the product is available. If you choose to send your network report with it, it includes your operator, signal, speed, nearby networks and approximate location (about 100 m). We receive an email with all of these details via the Resend email service. These services' servers may be outside Saudi Arabia. Everything is deleted on request.

Crash reports: if the app stops unexpectedly, on next launch it sends a technical report to Google Firebase (app version, device model, Android version and the stack trace with any IP, MAC, email or number removed). No personal data; used only to fix crashes.

In-App Purchases

All payments are processed exclusively through Google Play Billing. The app never handles payment card data.

WhatsApp booking agent

Messages to our WhatsApp number are answered by an automated AI agent (models run on Cloudflare Workers AI; your messages are not used to train any model). It answers questions, suggests available slots, books only after your explicit confirmation, and hands you to the owner whenever you ask. We store your number, WhatsApp name, the conversation text, district, issue and visit time on our Cloudflare server (may be outside Saudi Arabia) to arrange the visit, follow up and improve replies; only the business owner can view them through a protected dashboard. Messages pass through Meta (WhatsApp), whose servers may be outside Saudi Arabia. Conversations and booking records are kept for service follow-up until you ask us to delete them.

Website booking

Website bookings store your name, phone number, district, any address you enter, requested service, issue and visit time in Cloudflare to manage availability, and sync the booking to Google Firebase/Firestore for management. Your precise location is sent only if you press the location button and grant browser permission. Unconfirmed holds expire after 6 hours; booking records are kept in our Cloudflare database for service follow-up until you ask us to delete them. Visit fees remain fixed by area; any requested device is priced by agreement before purchase.

Data deletion

To delete any data we hold (bookings, WhatsApp conversations or account data), send «احذف بياناتي» on WhatsApp or email apps@alhumaidi.sa. We delete it within 30 days and confirm. Data stored on your device is removed when you uninstall the app.

Children

This app is intended for users 18 and older. We do not knowingly collect data from children.

Contact

Privacy inquiries: apps@alhumaidi.sa