ToolKitToolKit is a link scanner, QR toolkit, and device-utility app. Every check it runs happens on your device, and ToolKit has no server of its own. The app is free and shows ads from Google. This page explains both: what stays on your phone, and what the ads collect.
No ToolKit servers
Your scans are checked on your phone. We have no backend to send them to.
No accounts
Nothing to sign up for, nothing tied to your name or email.
Ads kept apart
Ads come from Google. They never receive the links you scan or your history.
1. What ToolKit does
ToolKit scans links for phishing and malware indicators, checks SSL/TLS certificates, strips tracking parameters, generates QR codes and passwords, tests your screen for dead pixels, and lists apps and devices on your local network. Every one of these runs as a self-contained calculation on your phone — link analysis is pattern-matching against the URL's own structure, not a lookup against any outside database.
2. Permissions, and exactly what each one is for
| Permission | What it's for | What it is never used for |
|---|---|---|
| CAMERA | Reading a QR code on-screen when you open the QR Scan tool. | Photos, video, or any capture outside that one screen. Nothing is recorded or stored. |
| ACCESS_NETWORK_STATE | Reading your phone's own subnet address so the Network Scan tool knows which local IP range to check — only when you tap "Scan Network." Google's ad SDK also uses it to check for a connection before loading an ad. | Tracking your location or Wi-Fi network history. It cannot reveal your GPS location. |
| INTERNET | Fetching the page you ask ToolKit to scan (to follow redirects and check its TLS certificate) — the same connection your browser would make. Opening a link you choose to open. Loading ads and the app's ad settings. | Sending your scanned links or your scan history anywhere. |
| AD_ID ACCESS_ADSERVICES_* |
Added by Google's ad SDK. Lets it read your device's advertising ID and use Android's Privacy Sandbox ad features to show and measure ads. | Anything outside advertising. You can reset or delete the advertising ID at any time (see section 6). |
ToolKit does not request access to your contacts, messages, call log, location, storage, microphone, or any other personal data on your device.
3. Data kept on your device
ToolKit doesn't collect any data on a server of its own, because it doesn't have one. The only data it keeps is a short local history of the links you've scanned (URL, verdict, and timestamp), stored in the app's private storage so the Home and History screens can show your recent activity. This history:
- Is never sent to us, and never passed to the ad SDK;
- Is excluded from Android's automatic cloud backup and device-to-device transfer;
- Is deleted permanently the moment you tap "Clear history" in the History screen, or when you uninstall the app.
4. Ads from Google
ToolKit is free because it shows ads: banners on its screens and short video ads between the steps of a link scan. These ads are served by Google, through Google AdMob and Google Ad Manager. To show ads, measure them and prevent ad fraud, Google's ad SDK may collect:
- Your device's advertising ID;
- Your IP address, which can indicate your approximate location (country or city);
- Basic device and app information, such as device model, Android version and app version;
- How you interact with ads, such as which ads were shown and tapped;
- Diagnostic data about ad loading and crashes inside the ad SDK.
ToolKit never gives the ad SDK the links you scan, your scan results, or your history. Google handles this data under its own privacy policy; see how Google uses information from apps that use its services.
If you're in the European Economic Area, the UK or Switzerland, ToolKit asks for your consent through Google's consent form before showing personalized ads. You can change that choice at any time in Settings → Ad privacy choices. Without consent, Google may still show non-personalized ads, which are based on context such as the app and your approximate location rather than your interests.
5. Remote settings
ToolKit downloads its ad settings (such as which ad units to use and how often video ads appear) from Google Firebase Remote Config, so they can be changed without an app update. To do this, Firebase uses a Firebase installation ID — a random identifier for this copy of the app, not linked to your name or account. It is used only to deliver those settings.
6. Your choices
- Advertising ID: on most Android phones, go to Settings → Google → Ads (or Settings → Privacy → Ads) to reset or delete your advertising ID. Once deleted, ads can no longer be personalized using it.
- Ad consent: where it applies, change it in ToolKit under Settings → Ad privacy choices.
- Scan history: tap "Clear history" in the History screen.
- Everything: uninstalling ToolKit removes all data it stored on your device.
7. Children's privacy
ToolKit is a general-audience utility and is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child's information has reached us, contact us and we'll help remove it.
8. Changes to this policy
If ToolKit's data practices change, this page will be updated and the "Effective" date at the top will change with it. Continued use of the app after an update means you accept the revised policy.
9. Contact
Questions about this policy or how ToolKit handles data can be sent to [email protected] or via our Contact page.