Privacy Policy

01Who we are and what this covers

Sotreus is a product of NetSepio LLC (“NetSepio”, “we”, “us”). This policy covers the Sotreus Android app, the Sotreus Edge device and its firmware, the sotreus.com website, the early-access list, and support conversations (together, the “Services”).

Sotreus is in development and early access. This policy describes how the app and Sotreus Edge are designed to handle information. If that design changes, we will update this page before the change takes effect.

02Information that stays on your device

Sotreus is local-first. The app keeps the following in a local database on your phone. It is not uploaded to NetSepio, and there is no mandatory cloud:

• Radio observations: nearby Bluetooth LE advertisements and visible Wi-Fi access points, with signal strength, timestamps and the fingerprints Sotreus derives from them.
• Encounter memory: whether something is familiar, new, persistent or re-encountered, plus attention scores and the evidence behind them.
• Places, sessions and journeys, including your phone’s location when you allow location access, so observations can be anchored to where they happened.
• Tags, labels and signatures you create, such as marking a device as yours or expected.
• Sky context you keep: aircraft, drone Remote ID broadcasts and satellite passes placed on your timeline.
• Settings, such as retention rules and sky-query precision.

You set retention: keep everything, keep a number of days, keep tagged items only, or delete a place or session outright. Optional encryption at rest protects the local database. Uninstalling the app removes its local data, subject to how Android handles app storage and any backups you have enabled.

03Information about other people’s devices

The radios Sotreus observes usually belong to other people and organisations. Sotreus only records what those devices publicly broadcast, such as advertised identifiers, device-family signatures and signal strength. It does not connect to them, decrypt their traffic or send anything to them.

These observations stay on your device or your Sotreus Edge. NetSepio does not receive them. Signal strength indicates rough proximity, never direction, and Sotreus does not try to identify the people behind a device. You are responsible for using what you observe lawfully and respectfully, as described in our Terms.

04Sotreus Edge

In Edge Mode, Sotreus Edge scans, timestamps and stores observations on its own flash storage in an append-only log with bounded retention, optionally anchored by its own GNSS location. It syncs that log to your app over Bluetooth. Edge observations are not sent to NetSepio, and Edge does not transmit over LoRa in this mode.

In Mesh Mode, the app switches Edge to Meshtastic so it can join your LoRa mesh, and environmental observation is paused. Messages and node information you send over the mesh are handled by Meshtastic and are visible to other nodes in your mesh according to how you configure it. They are not routed through NetSepio.

05Optional sky context

Local sensing works fully offline. Aircraft and orbital feeds are modules you switch on. Every context result shows where it came from and how old it is.

• Aircraft (NETWORK): when this module is on, the app asks an external aircraft-data provider over the internet for traffic near you. Exact area sends an area around your position, Coarse area sends a deliberately broad area, and Off sends nothing. The provider receives that area and, like any internet service, your device’s IP address, and handles them under its own privacy policy. The source is shown with every result.
• Satellite passes (PREDICTED): computed on your device from public orbital elements. The app downloads orbital-element data, but that download does not include your location.
• Drone Remote ID (SENSED): received directly over radio by your phone or Sotreus Edge. No network request is involved.

06Exports and sharing

Nothing leaves your device unless you export or share it. Exports default to coarse coordinates, time buckets and hashed identifiers, and you can review an export before you send it. Once you share an export, the recipient controls their copy.

07The sotreus.com website

sotreus.com is a static website. It uses no analytics, no cookies, no tracking pixels and no third-party scripts, and its fonts are served from sotreus.com itself.

The site is hosted on GitHub Pages. Like any web host, GitHub processes technical information such as your IP address and browser details to deliver pages and protect its service, under the GitHub Privacy Statement. NetSepio does not use that information to identify or profile visitors.

08The early-access list

If you join early access, we collect the email address you enter. The form is handled by an email-list provider acting on our behalf.

We use your address to tell you when early access opens for the Android app and the first Sotreus Edge field units. The promise on the form applies: one email when access opens, no tracking pixels, and you can unsubscribe at any time. We don’t share the list with anyone for their own marketing.

09Support

If you contact us at [email protected], we receive your email address and whatever you include. Your observations stay on your device unless you choose to send them, so please share only what is needed to resolve your question.

10What we do not collect

• An account, name or password: none is needed to use Sotreus.
• Your radio observations, fingerprints, tags or attention history.
• Your places, journeys or location history.
• Observations synced from Sotreus Edge.
• Website analytics, cookies or advertising identifiers.

11How we use information

We use the limited information we do receive to:

• send the early-access email and respond to unsubscribe requests;
• answer support requests;
• operate and secure the website and the Services;
• comply with legal obligations and enforce our Terms.

12How we share information

We do not sell personal information. We share it only:

• with service providers that help us run the Services, such as website hosting, the early-access list and email, and only for that purpose;
• with third parties you choose to use, such as the aircraft-data provider when you switch that module on;
• when required by law, or to protect the rights, safety or security of users, the public or NetSepio;
• with a successor if NetSepio is involved in a merger, acquisition or sale of assets, under this policy’s protections.

13Legal bases for processing

Where laws such as the GDPR apply, we rely on:

• Consent: for the early-access list and for optional context modules you switch on. You can withdraw consent at any time.
• Legitimate interests: to secure the website and answer support requests.
• Legal obligation: where the law requires us to keep or disclose information.

14Data retention

• On-device data is kept according to the retention rules you set, until you delete it or uninstall the app. Sotreus Edge keeps a bounded log that older records roll out of.
• Early-access emails are kept until you unsubscribe, ask us to delete them, or we close the early-access list.
• Support emails are kept as long as needed to resolve your request and meet legal obligations.

15Security

Sotreus keeps your data local by design, offers optional encryption at rest, and syncs Edge to the app over a secured Bluetooth connection. No device, radio link or app is perfectly secure, so keep your phone’s lock screen, operating system and the Sotreus app up to date. Report suspected vulnerabilities to [email protected].

16Your choices and rights

Because most Sotreus data lives only on your device, you control it directly: change retention, delete a place or session, turn context modules off, or uninstall the app.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of personal data we hold, such as your early-access email, and to receive a copy of it. California residents have rights under the CCPA/CPRA; people in the EEA, UK and similar regions have GDPR-style rights, including withdrawing consent and lodging a complaint with a supervisory authority.

To make a request, email [email protected]. We may need to verify your request before acting on it.

17International transfers

NetSepio and our service providers may process the limited information we receive in the United States and other countries, whose data-protection laws may differ from yours. Where required, we use appropriate safeguards for these transfers.

18Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

19Third-party services

The Services can connect to or link to third parties, including aircraft-data providers, sources of public orbital elements, Meshtastic, Google Play and Android, GitHub (website hosting) and X. Their own privacy policies govern how they handle information.

20Changes to this policy

We may update this policy as Sotreus develops. We will change the “Last updated” date above, and for material changes we will take reasonable steps to tell you, such as a notice in the app or on this page.

21Contact

Questions and privacy requests: [email protected].

Postal contact, if required: NetSepio LLC, Georgia, Tbilisi, Krtsanisi District, Nino and Ilia Nakashidzeebi Str., N1, (formerly Avlev), Bl. N3, Apt. N3.