Privacy Policy — ViTiK Pro

Last updated: September 23, 2026

ViTiK Pro ("the App") is a professional management tool for PPPoE subscribers on MikroTik routers. This policy respects your privacy and clearly explains what data the App handles.

1. Nature of the App

ViTiK Pro is a B2B administrative application aimed at internet service providers and network administrators. The App connects to your own self-hosted server and does not send any business data to our servers or any third party.

2. Data Collected by the App

a) Account Data

• Username and password (stored locally on your device only).
• Session token for authenticating API requests.
• With "Switch account": the session tokens of the accounts you signed in to on this phone, kept on the phone only and never sent anywhere. You can remove any account from the list at any time.

b) Router and Subscriber Data

• Router IP address and its API credentials.
• Subscriber usernames and phone numbers (entered by the network administrator).
• Debt and payment records.
• Subscriber locations on the map (a point and an optional landmark), set by the network operator for their own subscribers.

This data is stored on the ViTiK server operated by the App's developer and is used only to run the App for the account holder. Each account sees only its own data.

e) Your Phone's Location

• The App asks for location permission only while in use (it never reads your location in the background), to pin a subscriber at their home and to show the route and distance from you to a subscriber.
• To calculate a route, your current position and the subscriber's position are sent to our server, which requests the route from the open OSRM routing service. Your position is not stored in your account; the route result is cached for at most 30 minutes to speed up repeated requests, then deleted.
• Map tiles are loaded from OpenStreetMap and satellite imagery from Esri, which receive the tile requests for the area shown, like any map website.

c) Notification Data (Firebase Cloud Messaging)

• FCM device token — used to send subscription-expiry and device-offline notifications. Contains no personal data.

d) Technical Data

• Network connectivity state (to detect online/offline).
• App preferences (dark mode, language) — local only.

3. Android Permissions Used

• INTERNET — to communicate with your API server.
• ACCESS_NETWORK_STATE — to detect connectivity.
• POST_NOTIFICATIONS — to display system notifications.
• RECEIVE_BOOT_COMPLETED — to restore scheduled notifications after reboot.
• SCHEDULE_EXACT_ALARM — to fire notifications at a specific time.
• CAMERA — to photograph a payment proof when requesting activation (choosing an existing photo uses the system photo picker, with no permission).
• VIBRATE — for notification vibration.
• ACCESS_FINE_LOCATION + ACCESS_COARSE_LOCATION — while in use only, to pin a subscriber and show the route to them.
• CALL_PHONE — for the "Call now" button on a subscriber, only when tapped; if refused, the number opens in the dialer instead.

4. Data Sharing

We do not sell your data or share it for advertising. Data is used only to run the App. The parties that receive limited data are: Google Firebase (the notification token), the OSRM routing service (a route's start and end points, with no name or number), and the map providers OpenStreetMap and Esri (map tile requests).

5. Data Storage

• Data on your device: stored in local SharedPreferences.
• Data on the server: stored on the ViTiK server and kept separate per account. You can delete your account and all of its data inside the App (Profile → Delete account).
• When the App is uninstalled: all local data is automatically erased.

6. Security

• Communication with the server should be over HTTPS (recommended).
• MikroTik passwords are never sent to Google or any third party.
• All sensitive data is protected by token-based authentication.

7. Ads and Tracking

ViTiK Pro contains no ads and uses no analytics/tracking SDK (no Google Analytics, no Firebase Analytics, no Facebook SDK, etc.).

8. Children

The App is intended for adults working in network management. We do not knowingly collect any data from individuals under 18.

9. Your Rights

• Right to access your data (it lives on your own server).
• Right to delete (uninstall the App + clear your server records).
• Right to non-sharing (enabled by default — we share nothing).

10. Changes to This Policy

We may update this policy from time to time. Updates will be published at the same URL and the date at the top of the page will be revised accordingly.

11. Contact