Privacy Policy
Overview
BLE Workbench (“the app”, “we”) is a developer tool, built and operated by Rapidcircuitry, for inspecting and driving Bluetooth Low Energy (BLE) devices. This policy explains what the app collects, what stays on your device, and why — and it covers this website too, which is static, sets no cookies, and runs no analytics of its own.
Data we collect
The table below is the short version — every field the app touches, and exactly where it goes.
- Email, password, display nameSENT TO SERVERSent to our authentication server to create and sign in to your account. Passwords are hashed (Argon2id) before storage — we never store or see your plaintext password.
- BLE scan results & GATT dataON-DEVICEDevice names, addresses, signal strength, advertising payloads, and characteristic values you read or write. Processed in memory and in files on your device only.
- Session logs & GATT snapshotsON-DEVICEKept on your device. Only leaves it if you explicitly export or share a file yourself, through your device's own share sheet — we never receive a copy.
- App preferencesON-DEVICETheme, saved codec definitions, and custom UUID labels, stored locally by Android.
- Analytics, ads, crash reportsNOT COLLECTEDBLE Workbench includes no analytics, advertising, or crash-reporting SDKs.
Everything under ON-DEVICE is processed entirely on your phone and never transmitted to us. The only category that reaches our servers is your account information, and only because signing in requires it.
Android permissions
- Nearby devices (
BLUETOOTH_SCAN,BLUETOOTH_CONNECT,BLUETOOTH_ADVERTISE) — to scan for, connect to, and, in Peripheral mode, advertise as a BLE device.BLUETOOTH_SCANis declared withneverForLocation: the app does not derive or store your physical location from it. - Legacy Bluetooth & location (
BLUETOOTH,BLUETOOTH_ADMIN,ACCESS_FINE_LOCATION) — required by Android itself to scan for BLE devices on Android 11 and earlier. We do not use this to determine, store, or transmit your location. - Foreground service (
FOREGROUND_SERVICE,FOREGROUND_SERVICE_CONNECTED_DEVICE) — keeps a firmware-update (DFU) transfer running while it’s in progress. - Internet — used only to reach our authentication server for account sign-up, log-in, and session verification. No other network traffic leaves the app.
Account & security
An account (email + password, and an optional display name) is required to use the app. Passwords are hashed with Argon2id before they ever touch storage — we cannot read or recover your password, only reset it. Signing in issues a session token (JWT) that the app stores securely on your device and uses to authenticate future requests.
We are actively hardening the transport between the app and our authentication server; if you have questions about the current state of that connection, contact us at the address below and we’ll answer directly rather than leave it vague here.
Data retention
Account data is retained for as long as your account exists, and deleted on request — see Data deletion.
BLE scan data, session logs, and preferenceslive only on your device. Clearing the app’s storage or uninstalling it removes them completely, because we never had a copy.
Your choices
- Every BLE reading, log, and codec definition stays under your control on-device — export or delete it whenever you like.
- You can request a copy or deletion of your account data at any time — see Data deletion.
- You can revoke Bluetooth permissions from Android Settings at any time; the app will ask again only when you use a feature that needs them.
Changes to this policy
If we change what the app collects or how it’s used, we’ll update this page and the “effective” date at the top. Material changes will also be noted in the app’s release notes.
Contact
Questions about this policy, or about your data: contact@rapidcircuitry.com