Privacy

Privacy Policy

← Back to User Agreement

Last updated: 10 October 2026

NetPeek (“the App”, “we”, “us”) respects your privacy. The App is an on-device network debugging tool for developers. Capture, decryption and analysis all run locally on your own device, not on servers or relay nodes that we operate.

In one sentence: your captured data stays on your device by default. We do not collect, upload, or sell your captured bodies, and we operate no relay / proxy servers: your original traffic is not routed or forwarded to any node we control. NetPeek uses the system network extension to capture on your device. Account, configuration, purchase status, and the crash reports, usage statistics, or exports you choose to share under Analytics & Improvements may leave your device as described below.

This Policy explains what information is processed, how it is used, and the choices available to you. By using the App, you acknowledge this Policy. Where accounts or subscriptions are involved, please also read the User Agreement.

1. Information we process

1.1 On-device data (does not leave the device by default)

To provide capture and debugging features, the App may create and store on your device:

  • Network debugging records — such as request URLs, methods, status codes, timing, hostnames, and, when you enable related features, request/response content;
  • Debugging configuration — such as rules, scripts, filters, rewrite and replay settings;
  • Preferences — such as UI and feature switches; and
  • Certificate materials for HTTPS debugging — generated and stored on device only if you choose to enable HTTPS decryption.

This data is stored locally on your device by default. You may delete individual records, clear captures, remove configuration, or uninstall the App. The App may also prune older records under a storage policy to manage space.

1.2 Account data (optional sign-in)

Sign-in is not required for basic on-device capture. If you sign in (for example with Sign in with Apple), we may process:

  • account identifiers and session information;
  • device authorization / seat information (for multi-device management and abuse prevention); and
  • configuration data you choose to sync (such as personal rules and constants).

Capture records and request/response bodies are not included in account sync and are not automatically uploaded to our services because you signed in.

1.3 Subscription and payment information

In-app purchases and subscriptions are processed by the Apple App Store. Payment card details are collected and processed by Apple; we do not receive or store full payment details. To unlock features, we may receive limited purchase/subscription status (for example active status, product identifiers, and related validity information), associated with your account when you are signed in.

1.4 Product usage analytics

The App sends usage statistics only after you turn on “Share Analytics with Developers” in Settings → General Settings → Analytics & Improvements. That switch is off by default. When you are signed in, statistics may include limited product-interaction events, such as a paywall view, trial start, the first successfully viewed HTTPS-decrypted session, and whether a qualifying professional debugging task was completed. An event contains only a predefined milestone, entry source, task category, App version, and time. It is associated with the account to prevent duplicate counting and measure the conversion funnel. The same switch also sends anonymous usage counts, such as an app launch, to TelemetryDeck. A signal has a fixed name and does not include an account, captured URLs, headers, or bodies.

We use this data only for product analytics and improvement, not for advertising or cross-app tracking. The event schema accepts no free-form text and does not contain or upload captured URLs, hostnames, headers, cookies, authorization values, request/response bodies, or rule and script content. Turning the switch off stops further reports.

1.5 Optional sync and local-network features

  • Account configuration sync (when signed in) — your personal rules, constants, rule groups, and scripts sync through NetPeek's encrypted backend so you can use them on your devices. Capture content is not part of this sync.
  • On-device AI / LAN debugging interface (optional, off by default) — if you enable it, authorized clients on your local network may access capture data already on your device. Access requires credentials you control. Do not enable this on untrusted networks or share credentials with untrusted parties.

1.6 Crashes and uncaught exceptions

The App installs crash and uncaught-exception monitoring only after you turn on “Share Crash Data with Developers”. Reports of crashes, uncaught exceptions, serious hangs, and watchdog terminations are sent to Sentry (Functional Software, Inc.) so we can fix stability issues. That switch is off by default. A report may include a stack trace, device model, OS version, App version, and a limited set of technical breadcrumbs.

We do not attach screenshots, view hierarchies, or network bodies, and we do not introspect memory contents, so capture buffers are not intentionally included. Reports are not used for advertising. You can turn the switch off at any time; monitoring is then uninstalled and further uploads stop.

2. How we use information

We use information only as needed to provide and improve the service, including to:

  • provide on-device capture, inspection, rules, scripts, and related features;
  • provide account, device management, and configuration sync when you sign in;
  • validate subscription entitlements and prevent fraud or abuse;
  • when statistics sharing is on, measure the product funnel from paywall and trial to first professional value so we can improve the experience;
  • when crash sharing is on, diagnose crashes and uncaught exceptions; and
  • respond to support requests and meet legal obligations.

We do not sell your personal information, and we do not use capture bodies for advertising or sell them to third parties.

3. HTTPS decryption and certificates

Viewing HTTPS plaintext is optional. It takes effect only after you install and trust a certificate in iOS Settings and enable the related features in the App. Certificates are generated and stored on your device for local debugging and are not uploaded to our servers.

Decrypted content, like other captures, remains on-device by default. If you export files or authorize a local-network client to read data, you are choosing to share that data with the recipient—please ensure they are trustworthy.

4. Sharing

We share information only when necessary:

  • Service providers — such as Apple (Sign in, App Store, iCloud) and subscription status services, to complete sign-in, payment, and entitlement checks. When you turn on the matching switch under Analytics & Improvements, Sentry receives crash reports and TelemetryDeck receives anonymous usage statistics;
  • Legal requirements — when required by law or to protect rights and safety; and
  • Your direction — for example when you export or share data, or enable a local interface for a client you authorize.

Third-party services are governed by their own privacy policies; we do not control their independent processing.

5. Retention and deletion

  • On-device data — until you delete it, it is pruned by the App’s storage policy, or you uninstall;
  • Account and synced configuration — updated as you change items in the App; after account deletion, server-side account data is deleted or anonymized per product process (except where law requires retention);
  • Subscription status — retained only as reasonably needed to provide access; Apple’s retention is governed by Apple’s policies;
  • Product usage milestones — account-level detail is retained for up to 180 days by default; after expiry, only daily aggregate counts without a user identifier are retained;
  • Crash reports and anonymous statistics — uploaded only while the matching switch is on. Turning crash sharing off stops Sentry monitoring; turning statistics sharing off stops TelemetryDeck. Data already sent is kept for that service’s retention period; and
  • Support communications — retained for a reasonable period after handling.

Where applicable law grants rights to access, correct, delete, restrict, port, or withdraw consent, you may contact us. We may need to verify identity and will handle requests as permitted by law.

6. Children

The App is not directed to children under 16 (or a higher minimum age where required). We do not knowingly collect personal information from children. If you believe this has occurred, contact us so we can delete it.

7. Changes

We may update this Policy and publish the revised version in the App or on this page with an updated date. For material changes we may also provide additional in-app notice. Continued use after an update means you understand the revised Policy.

8. Contact

For privacy questions, rights requests, or complaints, contact us at support@netpeekapp.com. We will respond within a reasonable time.