Privacy Policy

The short version

The rest of this page explains each of those points in detail. If anything here is unclear, write to hello@zooz.studio.

Who we are

Netly: Internet Speed Test (“Netly”, “the app”) is developed and operated by VOZ Studio, Ha Noi, Viet Nam (“we”, “us”). For the purposes of the EU/UK GDPR, we are the data controller for the limited processing described in this policy. Contact for privacy matters: hello@zooz.studio.

This policy applies to the Netly mobile apps for iOS and Android and to this website. It does not apply to third-party websites you may open from the app (for example, your phone’s Settings app or the app stores). This website sets no cookies and runs no analytics; our web host records standard access logs (IP address, page requested, browser type) for up to 30 days for security.

What we collect — the complete list

We designed Netly so that almost everything happens on your device. Here is every category of data the app touches, where it lives, and whether it ever leaves your phone.

We do not collect: name, email, phone number, contacts, photos, precise location or location history, advertising identifiers (IDFA/GAID), usage analytics, browsing history, or any content of your internet traffic.

Data that stays on your device

Every test you run is written to a database inside the app’s private storage. It is protected by your phone’s built-in storage encryption and app sandboxing; on a device that is not rooted or jailbroken, other apps cannot read it. This includes:

• the numbers you see on the results screen and in History;
• the plain-language verdicts (for example “4K streams fine, video calls too”), which are calculated on the device from those numbers;
• Wi-Fi names, BSSIDs, public and local IP addresses shown in test details;
• labels and notes you type.

Because none of this is uploaded, we cannot see it, restore it, or transfer it to a new phone for you. If your device is backed up to iCloud or Google One, your history is included in that backup under the terms of Apple’s or Google’s privacy policies, not ours.

Permissions and why we ask

Netly requires iOS 17 or later and Android 13 or later. It asks for the following permissions, always at the moment they are needed:

Netly never requests “Always” location, background location, camera, microphone, contacts, photos or the advertising identifier.

Test servers and network logs

A speed test measures how fast data moves between your phone and a server. To do that, the app downloads and uploads a stream of random sample bytes from a measurement server near you (typically 10–15 MB per test), and the video test streams a short sample clip (about 15 MB) from a content delivery network.

During those transfers the server necessarily sees your public IP address, the time of the test and the number of bytes transferred. This is the same information any website you visit receives. We keep these connection logs for 30 days to detect abuse (for example, a single address starting thousands of tests) and to diagnose outages, after which they are deleted automatically. The logs are not linked to your test results, which never leave your device, and are not used to profile you. Our hosting and CDN providers may keep their own access logs for a similar period under their contracts with us.

The app chooses the nearest server automatically; the server name and its latency are shown on the testing screen so you always know where your data went.

Notifications

Test reminders (iOS)

If you turn on Test reminders in Settings, the app registers a push token with Apple Push Notification service (APNs) and sends that token, your app language, your time zone and your notification-sound preference to our notification server. We use them only to send a short reminder to run a test — at most twice a week, never between 10 PM and 8 AM your local time. If you do not open three reminders in a row, we stop sending them. Turning the switch off deletes your token from our server within 24 hours; if you uninstall the app instead, the token is deleted as soon as Apple reports it invalid and in any case within 30 days.

Offline alerts (Android)

Offline alerts are generated entirely on your phone by the operating system’s connectivity monitor. Nothing is sent to us.

Usage analytics

Netly does not send usage analytics. The app contains no analytics SDK, generates no advertising or install identifier, and does not report which screens you open or which buttons you tap. The only data that reaches a server is described in the two sections above: the connection log a test unavoidably creates, and the push token you create by turning on Test reminders.

Netly does use one Google service, Firebase Remote Config, but it is not analytics: it only downloads settings — the current list of measurement servers and the video-sample address — so we can change them without releasing a new app version. It records no events, no screens, no buttons and no user properties. What Google receives is described in the next section.

Sharing and selling

We do not sell personal data and we do not share it for cross-context behavioral advertising. Netly contains no advertising network SDK. We share data only with service providers who process it on our behalf under contract, and only the minimum needed:

• Measurement-server and video CDN hosting providers — receive your IP address and transferred bytes during a test and keep their own access logs under their contracts with us.
• Apple Push Notification service (Apple Inc., USA) — delivers Test reminders on iOS if you enable them.
• Firebase Remote Config (Google LLC, USA) — serves the app its configuration. When the app fetches it, Google receives a Firebase installation identifier and your IP address. This identifier is tied to the app installation, not to you; it is reset if you reinstall the app or clear its data, and we never join it with your test results, which stay on your phone. See Firebase privacy documentation.

We may also disclose data if required by law or to protect the safety of our users, and in the event of a merger or acquisition, in which case this policy will continue to apply to the data already collected.

Retention and deletion

Uninstalling the app removes all on-device data immediately. It does not remove data from a cloud backup you made earlier.

Security

All connections between the app and our servers use TLS 1.2 or later. On-device data is stored in the app’s private sandbox and protected by your device’s built-in storage encryption (active from the moment your phone boots and is first unlocked); on a device that is not rooted or jailbroken, other apps cannot read it. Our servers hold no test results, so there is no central database of your measurements to breach. Access to the notification system and server logs is limited to staff who need it and protected by multi-factor authentication.

Children

Netly is a general-audience utility rated 4+ / Everyone. It is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal data from them. Because the app has no account and no personal fields, there is nothing for a child to submit. If you believe a child has provided us personal data by email, contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing, and to withdraw consent. Because the app stores your data on your own device, you can exercise most of these rights directly in the app — the tables above tell you how. For anything held on our servers (connection logs, push tokens, analytics events), email hello@zooz.studio. We answer within one month in the EU/UK, within 45 days for California requests, and within 72 hours for access and deletion requests from users in Viet Nam, as Decree 13/2023 requires. We never charge a fee for a reasonable request.

We make no decisions about you by automated means that have legal or similarly significant effects. If you use an authorized agent to make a request, we may ask for proof of authorization. Not providing data has no consequence other than the feature not working — for example, no Wi-Fi name in History without the Location permission, no reminders without the switch.

You also have the right to lodge a complaint with your data protection authority. In the EU, that is the authority of the country where you live; in the UK, the ICO; in Vietnam, the Ministry of Public Security’s Department of Cybersecurity and High-Tech Crime Prevention.

Regional notices

European Economic Area and United Kingdom

Legal bases: running a test you start (performance of a contract, Art. 6(1)(b)); abuse prevention and crash fixing (legitimate interests, Art. 6(1)(f)); Test reminders (consent, Art. 6(1)(a), withdrawable at any time in Settings). We are based in Viet Nam, and our hosting and notification providers may process data in the United States and other countries outside the EEA/UK. Where we transfer personal data to those providers we rely on the EU Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, with supplementary measures such as TLS and log minimization. You can request a copy by email.

California and other US states

We do not sell or share personal information as defined by the CCPA/CPRA. We do not collect sensitive personal information: the Location permission is used only to read the Wi-Fi name and no geolocation is collected. You may exercise your rights to know, delete and correct by emailing us; we respond within 45 days and will not discriminate against you for making a request.

Vietnam

We process personal data in accordance with the Law on Personal Data Protection and Decree 13/2023/ND-CP. We do not process sensitive personal data: although the app asks for the Location permission, it never reads or stores your geographic position — the permission is used only so the operating system reveals the Wi-Fi name. Your consent to the processing described in this policy is given when you tap Continue at the end of onboarding after reading the summary shown there, and to Test reminders when you turn on the in-app switch; you can withdraw at any time. Where connection logs or push tokens are processed on servers outside Viet Nam, we have completed the cross-border transfer impact assessment required by Decree 13/2023.

Other regions (India DPDP, Brazil LGPD, Japan APPI, Korea PIPA, Indonesia PDP)

We apply the same minimal-collection approach everywhere. Where local law requires a specific legal basis or notice, the sections above apply, and you may contact us for a jurisdiction-specific request.

How this maps to App Store and Google Play labels

Changes to this policy

When we change this policy we will update the date at the top and, for material changes, tell you in the app or on this page at least 14 days before the change takes effect. Earlier versions are available on request.

Contact