Privacy Policy

Last Updated: August 5, 2026

This privacy policy governs your use of the software application ASTRA IoT Hub ("Application") for mobile devices. The Application is a smart data logging utility that fetches feeds from the cloud and monitors MQTT brokers to display real-time sensor charts and threshold alert notifications.

Short Version: Your data belongs to you. We do not collect, store, or share your credentials, keys, or logs on any external server. All configuration details remain strictly encrypted on your own device.

1. Information We Collect and Process

The Application is designed to communicate directly with your own configured servers (Cloud API and MQTT Broker). We do not run any central servers, and we have no access to the configurations or logs you enter into the Application.

User-Provided Information

When you set up the Application, you may input the following credentials:

ThingSpeak Credentials: Channel ID and API read keys to retrieve sensor charts.
MQTT Broker Credentials: Broker server URL, client identifier, topic, username, and password.

All user-provided credentials are saved strictly on your local device using Android Keystore-backed AES256 EncryptedSharedPreferences. This ensures that your passwords and API keys are safe from unauthorized access by other applications on the device.

2. Data Transmission and Security

The Application only transmits data directly from your mobile device to your specified endpoints:

HTTP/HTTPS requests are sent directly to the Cloud API endpoints.
MQTT socket connections are established directly to your configured MQTT broker using SSL/TLS encryption (e.g., via ssl:// endpoints) to protect your communication from interception.

No analytics trackers, advertising SDKs, or developer-owned logging APIs are bundled with this Application.

3. Permissions Used by the Application

The Application requests the following system permissions to function:

Internet Access (INTERNET & ACCESS_NETWORK_STATE): Required to fetch your sensor data and connect to the MQTT broker.
Post Notifications (POST_NOTIFICATIONS): Required to display warning banners when a sensor threshold is breached.
Wake Lock (WAKE_LOCK): Required by the Android system's WorkManager framework to process background scheduled checks (every 15 minutes) when the app is closed.

4. Data Retention and Deletion

You have full control over your data. You can delete all cached logs, configurations, and encrypted credentials instantly at any time by:

Clicking the "Reset" button within the Credentials Setup screen inside the Application.
Clearing the Application storage/cache under the Android System Settings page.
Uninstalling the Application.

5. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. We will notify you of any changes by posting the new Privacy Policy here and updating the "Last Updated" date above.

6. Contact Us

If you have any questions regarding privacy while using the Application, please contact the developer:

Email: astra.senses@gmail.com