# IndoorAtlas Beacon Installation — Privacy Policy
**Last updated:** 16 September 2026
**Applies to:** IndoorAtlas Beacon Installation for Android (`com.indooratlas.iait`)
—
## What this app is
The IndoorAtlas Beacon Installation is a work tool for the technicians who
install Bluetooth beacons in a building. It is not a consumer app and has no use outside an installation
job. Signing in requires an account issued by IndoorAtlas; accounts cannot be
created in the app, and the customer whose site is being fitted cannot issue
one either.
## Who is responsible for the data
IndoorAtlas Oy (business ID 3377288-3), Mannerheimintie 103 B, 00280 Helsinki,
Finland. Contact: , or write to the address above.
**Two roles, because there are two kinds of data here.** The installation
records — the floor plan, the beacons and where they went, what they measured,
and the photographs of the work — describe the customer’s building and belong
to that customer. For those the customer is the controller and IndoorAtlas acts
as a processor on their behalf. For your account and the log of what you did
with it, IndoorAtlas is the controller.
## Why we may hold this
Most of what the app handles is not personal data at all: a beacon identifier,
a position on a floor plan, a signal reading. Those describe hardware and a
building, and this section is not about them.
What the app is for is fitting beacons: reading the label, listening to confirm
the unit transmits, recording where it actually went against the plan. Your
name is not the point of any of that. It enters because the work cannot be done
without signing in — the backend has to know a change came from someone
entitled to make it, and two installers must not claim the same position at the
same time.
What is then kept is your account and the record of what was done with it.
While the work is live it is needed: the app has to know who may make a change
and which positions are already taken. Afterwards it is kept because an
installation that turns out to be wrong is quicker to put right when it is
known which work produced it. In the regulation’s
terms that is a legitimate interest (GDPR Article 6(1)(f)), and it gives you
the right to object — see Your rights.
Consent is deliberately not the basis. Consent has to be freely given, and a
tool you are required to use at work is not something you can refuse.
## What the app collects
**Your account, and what you do with it.** Signing in sends your username or
email address and your password to IndoorAtlas over an encrypted connection.
The password is not kept on the phone; the session is, until you sign out.
Every action you take on a beacon is recorded on the server together with your
account and the time. This is the audit trail of installation work: it is how a
mis-sited beacon is traced back to the day it was fitted.
**Installation records.** Beacon identifiers, the planned position of each
beacon on the floor plan, the position where it was actually fitted if that
differs, the signal strength measured when it was verified, and any note you
type. These describe hardware and a building.
**Photographs.** An installer can photograph a position after fitting the
beacon. Photos are optional and most positions have none. A photo is held with
the installation record for that position, together with the time it was taken
and the account that took it. The app does not attach a location to a photo.
The app asks installers to photograph the beacon and its mounting rather than
the room. A photograph taken in a public building can still catch people in the
background; those images are not used to identify anyone, are not analysed, and
are visible only to the people who can already see the installation records for
that site.
**The camera, for reading a label.** The code printed on a beacon’s label is
read with the camera. That picture is not saved and is not sent anywhere.
**Bluetooth.** The app listens for Bluetooth advertisements to confirm that the
beacon you just fitted is transmitting. It keeps no record of any other
Bluetooth device it hears.
## About the location permission
Android will not return Bluetooth advertisements that could identify a place
unless the app holds the location permission — and a beacon advertisement is
exactly that. An app can declare that it never derives location from Bluetooth,
and Android then filters those advertisements out of the results. That is the
honest description of what this app does, and it would also make every beacon
invisible to it.
So the app asks for location permission and uses it for nothing else. It does
not read the phone’s position, and does not store or send any location of you
or your phone. The coordinates it does handle are the positions of beacons on a
floor plan, which you set by tapping the map.
## What it does not do
No advertising, and nothing that tracks your behaviour. Nothing is sold or
shared with a data broker. No profile is built about you.
## Who else sees it
**The backend.** Installation records and the work log are stored on
IndoorAtlas’s servers in the EU. They are not transferred outside the EU.
**The map tile provider.** The background map comes from OpenFreeMap
(tiles.openfreemap.org), which receives requests for the tiles covering the
venue and your device’s IP address, in the same way any map in any app works.
It receives nothing else — not your account, not the beacon data, not the work
log.
**Google.** The app is distributed through Google Play, which tells Google that
your account installed it. The barcode scanner also reports to Google how much
it is used and how well it performs; the picture and the code in it are not
sent. Google documents no way to switch that off.
## How long it is kept
The session on the phone lasts until you sign out or uninstall.
Installation records and the work log are kept for as long as the customer
relationship they belong to lasts. Whoever did the fitting, somebody holds a
contract with IndoorAtlas for indoor positioning at that site, and the
installation records are not a by-product of that service — they are part of
what it is. They are dealt with under that agreement when it ends.
## Your rights
If you are in the EU or the EEA you can ask to see the personal data held about
you, to have it corrected, to have it erased or its processing restricted in
some circumstances, to receive it in a portable form, and to object to
processing carried out on the basis of legitimate interests, which is the basis
for all of it. You can complain to your national data protection authority; in
Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Which of those IndoorAtlas can answer depends on the data. For your account and
the work log, write to us. For the installation records the controller is the
customer whose site was fitted; ask them, and IndoorAtlas will help them answer.
A request to erase is weighed against what the work log is for. Removing an
account from it takes the record of who did the work with it, and the
installation the record describes may still be in use. Requests are answered
one at a time; write to the address below and you will get a reasoned answer.
There is no automated decision-making and no profiling. You cannot use the app
without an account, and the account cannot exist without the data described
above.
## Children
The app is a work tool for professional installers and is not directed at
children.
## Changes
If this policy changes, the date at the top changes with it, and the version in
Google Play’s listing is updated.