Privacy Policy
RoamGauge checks whether the network you are on will let your VPN, streaming apps and everyday services work. It runs on your phone. There are no accounts, no advertising and no analytics of our own; the one exception is the purchase library's dashboard, which shows us purchase totals and is described in the RevenueCat row below. This page lists everything that leaves the device and why.
Who we are
RoamGauge is a Kinship360 app. Kinship360 is a brand of ExecutorPlus, Inc. ExecutorPlus, Inc. is the data controller for the little that this policy describes.
What leaves your phone
| Data | Where it goes | Why | Kept? |
|---|---|---|---|
| Your public IP address | Our identity service (api.roamgauge.com), which asks ipinfo.io for the network owner and country | To show how you appear to the outside world and whether a VPN changed it | Not stored by us. Our hosting provider, Vercel, keeps ordinary request logs that include the address for a short time under its own policy. On your phone it is kept with that scan's history (see “What stays on your phone”). |
| Probe packets | Our reference servers, the public services being checked (DNS, STUN, VPN handshakes, service front doors), and — if you add checks of your own — the addresses you typed in, which may be private ones such as your office portal or a server at home | To test whether each protocol and service gets through, and whether the things you rely on can be reached from here | Not stored. Our reference servers keep only brief, automatically cleared system logs and never a record of who probed them. We never learn the addresses of your own checks: your phone contacts them directly and tells us nothing about them. |
| Speed-test transfers | Cloudflare's speed test endpoint, or OVH's if Cloudflare cannot be reached | After a full check unless you turn it off under Settings → Speed test, or when you tap one | Governed by the privacy policy of whichever one answered, Cloudflare's or OVH's. |
| A random app user ID and the device's vendor identifier, created by the purchase library when the app starts; your purchase receipt only if you subscribe or restore a purchase | RevenueCat, which validates the receipt with the store you bought from: the App Store on iOS, Google Play billing on Android | To unlock Paid and restore purchases | Per RevenueCat's privacy policy. No name or email is involved, and the IDs are not linked to anything else we hold. |
| Optional: one anonymous result for a public-venue network (see below) | Our contribution service (api.roamgauge.com) | To build a shared map of how hotel, airport and café Wi-Fi behaves, so travellers can check a place before they arrive | Kept indefinitely as its own record, with the month it arrived and any data-quality flags we derive from the result itself; nothing from the request is added. Contains nothing that identifies you or that could place you anywhere. |
| Optional: a diagnostic report, only when you choose to send one from Settings → Diagnostic report | Your own mail app, addressed to support@executorplus.com, or wherever you share it | To help us work out why a check failed | The report lists the network name, your phone model and OS version, the app version, the network owner and country from the identity lookup, and each check's outcome. It never contains your IP address or location. We keep it as long as the support conversation is open. |
Optional contributions
This is off until you turn it on. After your first successful test the app asks once whether you want to join; you can say no, and you can turn it on or off at any time under Settings → Contribute anonymous results. Even when it is on, nothing is sent silently: each result is offered to you first (“this looks like a hotel network — contribute it?”) and you decide one at a time. Only networks the app is confident belong to a public venue are ever offered. Home, office and personal networks, and anything it is unsure about, never leave your phone.
When you contribute a result, exactly this is sent:
- The network name, once it clearly belongs to a hotel, airport, café or other venue
- The country, from the same lookup that shows your provider
- The month and a rough time of day (morning, afternoon, evening, night)
- What the venue is like: sign-in page, security type, DNS filtering, IPv6, shared address, and the name of the network's internet provider
- What you measured: latency, speed sample, and which services and VPNs got through
- An optional tag you choose, like “high floor” or “lobby”
- The app version
And this is never sent:
- No account, device or install id, and nothing hashed that could stand in for one
- No IP address, router address (BSSID) or location
- No exact date or time
- No home, office or personal network, ever, and nothing we are unsure about
- No VPN endpoints you added, and no notes you wrote
- None of your own checks — not their names, not the addresses they point at, not whether they worked
Because there is no identifier of any kind, we cannot link two contributions to the same person. We are not saying we won't reconstruct anyone's travel history; we are saying we can't. Our server stores the result together with the month it arrived and any data-quality flags it derives from the result itself, and discards the request's IP address and headers. The storage system records when each upload arrived. We do not keep request addresses alongside it. To stop contributing, turn the switch off in Settings → Contribute anonymous results. Results already contributed cannot be traced back to you, which also means they cannot be individually deleted.
What stays on your phone
- Scan history, including network names and results. History on your phone includes each network's access-point address (BSSID) and the public IP we saw, with what the lookup said about it — the network owner, the country and, where the lookup provides one, the city — kept for up to two years. Delete all of it any time from Settings → Your data.
- VPN endpoints you add, including imported WireGuard configurations. Private keys are stored in the operating system's own secure store — the keychain on iOS, the keystore-backed secure store on Android — and are used only to send handshake packets. They are never uploaded and no VPN tunnel is ever established by RoamGauge.
- Your own checks — the names you gave them, the web addresses or host and port they point at, and their results. Your phone contacts those addresses directly; the name, the address and the outcome are never sent to us and are never part of a contributed result, even when the rest of that result is contributed. They are deleted with the rest of your data from Settings → Your data.
- Settings such as your cellular data policy and whether contributions are on.
Permissions
- Location (while using). The phone only reveals the Wi-Fi network name and details to apps with location access. RoamGauge reads the network name to label your scan, and nothing else. On Android that access has to be “Precise” and location services have to be switched on; “Approximate” hides the network name. Your GPS location is never read, stored or sent; what the app keeps about each network is listed under “What stays on your phone”.
- Camera. Only to scan a WireGuard QR code. Nothing is recorded.
- Local network (iOS). One DNS test query per check may go to this network's own resolver, which is often the router, to see whether it rewrites answers. Nothing else on the local network is contacted; every other probe goes out to the internet. Android has no equivalent permission.
Remote configuration
At launch the app fetches a small configuration file from our server listing reference servers and the services to check. That request carries no identifier beyond what any HTTPS request carries.
Children
RoamGauge is not directed at children under 13 and collects no personal information from anyone.
Changes
If this policy changes, the effective date above changes with it and the app will link to the current version.
Contact
ExecutorPlus, Inc., 5865 Neal Ave N, PMB 205, Stillwater, MN 55082, USA
support@executorplus.com