Indoor Atlas IndoorAtlas
Let's talk

Privacy Policy for IndoorAtlas Beacon Scan Stats App

Last modified: June 11th, 2025

 

General

This Privacy Policy explains how “IndoorAtlas Beacon Scan Stats” (the “App”), developed by IndoorAtlas, processes information when you use our mobile application. We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

 

1. Data Controller

The data controller responsible for the processing of your data through this App is:

IndoorAtlas Ltd.
Mannerheimintie 103 B
00280 Helsinki
FINLAND
www.indooratlas.com

(hereafter ”we” or “IndoorAtlas”)

 

2. What Data We Process and Why

IndoorAtlas Beacon Scan Stats is designed to be a local-first tool for data processing. While most core processing, analysis, and display of information occur solely on your mobile device, the App does, under specific circumstances, transmit certain data to IndoorAtlas’s servers, as detailed below.

2.1. Information Collected and Processed Locally (Non-Personal Data)

The App processes the following types of information locally on your device for the sole purpose of displaying beacon statistics to you:

  • Bluetooth Low Energy (BLE) Beacon Data: This includes technical information broadcast by BLE beacons detected by your device, such as:
    • MAC Address (of the beacon, not your device)
    • UUID, Major, Minor values
    • Received Signal Strength Indicator (RSSI)
    • Beacon advertising data
    • Calculated statistics (mean RSSI, standard deviation, max RSSI, etc.) This data is processed in real-time to generate the statistics you see in the App and is not stored persistently after the app session unless you explicitly choose to save or share it. The App identifies beacons, not individual users.

2.2. IndoorAtlas API Key Data Transmission (Personal Data)

  • When and What: After approximately 15 seconds of initial use, the App will prompt you to enter an IndoorAtlas API Key. If you choose to enter this key, the App will transmit this API key to IndoorAtlas’s servers.
  • Purpose: This API key is transmitted solely to verify your access to the IndoorAtlas platform. This integration helps ensure that users of our advanced beacon scanner can also seamlessly connect with and discover the full capabilities of the IndoorAtlas platform. The API key allows us to authenticate your access to our services.
  • No Other Data Transmitted: Aside from the API key (if provided), the App does not transmit any of your local beacon scan data or any other personal identifiers to IndoorAtlas’s servers automatically.

2.3. User-Initiated Data Sharing

  • The App provides a “share” functionality (e.g., via email attachment, cloud storage, messaging apps) which allows you, the user, to explicitly choose to share the currently displayed beacon statistics as a file.
  • When you click the “share” button, the App will prepare a file containing the beacon data and statistics that were visible on your screen at that moment. This file is then handed over to your device’s operating system to utilize standard sharing mechanisms (e.g., Android’s Intent system).
  • Important: We want to be clear that the App itself does NOT transmit this file directly to any recipient or server. It merely facilitates the creation of the file and its transfer to your device’s chosen sharing application. The transmission of the file (e.g., via email, messaging app) is then handled by the third-party application you select, and their respective privacy policies and terms of service will apply to that transmission.

2.4. Location Permission Requirement

  • Purpose: On Android 6.0 (Marshmallow) and newer, scanning for Bluetooth Low Energy (BLE) devices requires the user to grant location permissions. This is a technical requirement of the Android operating system to prevent potential misuse of Bluetooth scanning for location tracking without explicit user consent.
  • Our Use: The “IndoorAtlas Beacon Scan Stats” App requests location permission only to enable the BLE scanning functionality. The App does NOT collect, store, or transmit your device’s GPS location data, precise or approximate, off your device. Your device’s location is not accessed, recorded, or used by us for any purpose other than facilitating beacon scanning.

3. Legal Basis for Processing

  • For Local Beacon Data Processing:Your use of the App is based on your Consent by granting the necessary Bluetooth and Location permissions.
  • For IndoorAtlas API Key Transmission: The processing (transmission) of your IndoorAtlas API Key to our servers is based on your explicit consent. By entering the API key into the App and proceeding with the verification, you consent to its transmission for the stated purpose of checking your IndoorAtlas platform access. You are under no obligation to enter the API key to use the core beacon scanning and statistics functionality.
  • For User-Initiated File Sharing: The sharing of any beacon scan data file is performed solely by your explicit action and choice to use the “share” functionality. The App does not initiate any data transfer without your direct command.

4. Data Storage and Security

Most data processed by “IndoorAtlas Beacon Scan Stats” remains exclusively on your device for its operational purposes. We do not operate any backend servers that receive, store, or process your local beacon scan data from your use of this App. Consequently, there is no automatic transmission of your local data over the internet by the App.

The IndoorAtlas API Key, if provided by you, is transmitted securely over the internet to IndoorAtlas’s servers for verification. Your data’s security on your device is dependent on the security of your own mobile device. When you choose to share a file, the security of that transmission is governed by the third-party application you select for sharing.

5. Data Retention

As the App does not store any local beacon scan data persistently or transmit it off your device (unless you initiate sharing), this transient data is processed only for the duration of your active use of the App and discarded upon closing the App or ending a scanning session. Any files created for sharing are retained on your device only until you manually delete them or choose to transfer them.

Your IndoorAtlas API Key is transmitted to IndoorAtlas for immediate verification. Its retention by IndoorAtlas will be governed by our broader IndoorAtlas Privacy Policy.

6. Sharing Your Information

We do not automatically share any information collected or processed by “IndoorAtlas Beacon Scan Stats” with any external third parties. The App does not use any external analytics or advertising SDKs.

  • Internal Processing with IndoorAtlas: Your IndoorAtlas API Key is transmitted to IndoorAtlas’s servers when you enter it into the App for verification purposes. This is an internal processing activity to authenticate your access to our platform. Please refer to our main IndoorAtlas Privacy Policy for full details on how we handle user data across all our services: https://www.indooratlas.com/privacy-policy
  • Via User-Initiated Share: When you use the “share” feature, you are explicitly instructing your device to prepare and transmit a file containing the beacon statistics through a third-party application (e.g., your email client, a messaging app). The responsibility for the privacy and security of that shared file, including who receives it and how they handle it, rests with you, the user, and the privacy policies of the third-party application you choose for sharing.

7. Your Rights Under GDPR

Even though our App processes minimal personal data, you have certain rights under the GDPR concerning your personal data. Should you have any concerns or believe any personal data is being processed, you have the right to:

  • Right to Access: Request access to any personal data we might hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data.
  • Right to Restriction of Processing: Request that we limit the way we use your personal data.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to the processing of your personal data.
  • Right to Withdraw Consent: If processing is based on your consent (e.g., for API key transmission), you have the right to withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint: Lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

To exercise any of these rights, please contact us using the details provided in Section 10.

8. Children’s Privacy

“IndoorAtlas Beacon Scan Stats” is not intended for use by children under the age of 16. We do not knowingly collect any personal information from children under 16. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us so that we can take appropriate action.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes.

Contacting Us

Please contact us at or the mailing address below if you have any questions about our Privacy Policy or if you wish to exercise your rights.

IndoorAtlas Ltd.
Mannerheimintie 103 B
00280 Helsinki
FINLAND