Privacy Policy
1 Introduction
Undercover IT Firm ("we," "us," or "our") built the OsiNet application as a specialized, operational security (OpSec) focused Open Source Intelligence (OSINT) toolkit for Android. This Privacy Policy outlines how your information is handled when you use the OsiNet application.
Our core privacy principle is simple: OsiNet is a self-contained application. We do not collect, store, track, or transmit any of your personal data or investigation data to our servers.
2 Information Collection and Use
OsiNet operates with a zero-telemetry architecture.
- No Personal Data: We do not require you to create an account, nor do we collect your name, email address, phone number, or device identifiers.
- No Analytics or Tracking: OsiNet does not use third-party analytics SDKs, Firebase, Crashlytics, crash reporting, or advertising trackers. There is no "phone-home" functionality.
- Investigation Data: All data you generate, including investigation cases, scan results, notes, bookmarks, and case history, is stored entirely locally on your device.
3 Data Security and Local Storage
Because OsiNet is designed for investigators, penetration testers, and security researchers, we prioritize the security of your local data:
- Encryption at Rest: All investigation data stored within the app's internal database is encrypted using SQLCipher 256-bit AES encryption.
- Direct Network Routing: All network requests go directly from your device to the target or to the designated public OSINT APIs. There are no intermediary proxy servers operated by Undercover IT Firm.
- Anonymization Support: The application supports SOCKS5 and HTTP proxy routing (such as Orbot/Tor integration) to further protect your IP address and identity during investigations.
4 Device Permissions
To function properly, OsiNet requires certain Android device permissions. These are processed completely locally and are never used to track you:
INTERNET
Required to perform network recon, query OSINT APIs, and fetch external data.
ACCESS_*_STATE
Required to check connectivity before running scans and to operate the internal WiFi Info tool.
ACCESS_FINE_LOCATION
Required strictly for the accuracy of the GeoIP tool and Infrastructure Map. Your location data is never logged or transmitted to us.
READ_MEDIA_IMAGES
Required to perform local EXIF data extraction. Images are processed locally and never uploaded to our servers.
FOREGROUND_SERVICE
Required to keep long-running scans active without being killed by Android.
POST_NOTIFICATIONS
Required to alert you when background scans are completed (Android 13+).
5 Third-Party APIs and Services
While OsiNet does not collect your data, the app directly queries various free, third-party public OSINT APIs to provide its 85+ tools. When you perform a search, your query (such as an IP address, domain name, or email hash) is sent directly to these third-party providers.
These third-party services operate under their own privacy policies. We strongly recommend reviewing the terms of service and privacy policies of the external APIs utilized by OsiNet, which include but are not limited to:
6 Children's Privacy
OsiNet is a highly specialized security research tool intended for adult professionals. We do not knowingly solicit or collect information from or about children under the age of 13 (or the equivalent minimum age in your jurisdiction).
7 Legal Disclaimer
OsiNet is designed strictly for authorized security research, ethical hacking, and legitimate OSINT investigations. Users are solely responsible for ensuring their use complies with all applicable laws. We assume no liability for misuse.
8 Changes to Policy
We may update our Privacy Policy from time to time to reflect changes in the app's features or regulatory requirements. We will notify you of any changes by updating the "Effective Date" at the top of this policy.
9 Contact Us
If you have any questions or suggestions about our Privacy Policy, please contact us:
Developer
Sharodshahi Al-Amin
Organization
Undercover IT Firm
Telegram
@savaskarofficial
GitHub
savaskarofficial