Scope and contact
The data controller is Jack Davies trading as WillowWorks, a sole trader. NodeSwitch is a product developed and operated under WillowWorks, not a separate registered company.
This policy describes the NodeSwitch 0.9 Android release preparation and the NodeSwitch website. NodeSwitch manages firmware packages and backups for explicitly supported external radios. Installation and restoration remain disabled in the current release build.
For support and privacy enquiries: support@nodeswitch.app. See the support page for contact details and guidance.
The Android app does not require an account and includes no advertising, analytics or automatic diagnostic-upload service.
Data on your phone
NodeSwitch processes USB device details, positively identified firmware versions, hardware evidence, operation history, firmware cache and settings. Radio backups may contain private messages, configuration, channels, keys, identifiers and other flash contents. Do not treat a diagnostic report or flash image as safe to publish.
Backups and RNode signing-key material are encrypted in app-private storage. Android Keystore protects device-bound keys. Journals and labels remain private local app data.
The app is configured to exclude its data from automatic Android cloud backup and device transfer. These services cannot safely migrate its non-exportable Keystore keys or unresolved operation state. This setting does not remove your local files, and it is not a substitute for an independently verified portable export.
Network and sharing
Requested firmware downloads connect to approved upstream hosts, including GitHub release and asset hosts and exact pinned project-site downloads. Opening source or licence links also connects to the relevant external service. Those services receive ordinary connection and request information, such as your IP address and requested resource, under their own policies. The firmware downloader sends a NodeSwitch user-agent header.
NodeSwitch does not send radio backup payloads or signing keys to WillowWorks or firmware hosts. This does not mean that upstream services receive no connection information.
Import and export use Android’s file picker. You choose the destination or provider; a cloud storage provider may synchronise exported files under its own settings and policy. Use password-protected portable NSBK backups and encrypted NSRK recovery bundles. A device-key-only backup export is not portable across reinstall or phone replacement.
If you choose to send a diagnostic report to support, inspect it first and redact identifiers, settings and secrets. Sharing is voluntary; no report is uploaded automatically.
Retention, deletion and recovery
Local data stays until you delete it in NodeSwitch, clear app data or uninstall. Exported copies remain with the chosen provider until you delete them there. Clearing data, uninstalling or losing the phone may permanently destroy access to device-bound backups and signing keys. WillowWorks cannot recover your export passwords.
Before changing phones or migrating from a debug build to a differently signed Play build, create and independently verify password-portable backups and owner-key recovery bundles. Keep the original installation until recovery is proved. Do not discard an unresolved radio-operation journal.
A same-ID, compatible-certificate app update normally retains app data. Changing signing identity is not an in-place upgrade promise.
Permissions
NodeSwitch declares Internet access and optional USB-host capability. Android asks for USB access and document-provider grants as needed. The 0.9 preparation build does not request broad storage, location, Bluetooth, microphone or contacts access.
The packaged build also declares an AndroidX signature-protected internal receiver permission. This is an internal app security permission, not a request to access additional personal data.
This website
The website source contains no accounts, forms, advertising, analytics scripts, browser storage or tracking code. Fonts and artwork are served with the site; no third-party embeds are used.
This website uses Cloudflare Pages for hosting and delivery. Cloudflare processes connection and request information, including IP addresses, to deliver and protect hosted websites. Its handling of visitor information is described in Cloudflare’s privacy policy. Website hosting is separate from the Android app’s local radio storage.
Cloudflare may make traffic statistics and security-event information available to WillowWorks. We use that information only to operate and protect the site, not to build advertising profiles. Cloudflare also processes network data for its own service and security purposes. Retention depends on the type of data and the service involved; its terms use the duration of the service and whether processing remains necessary as criteria for customer data. This is separate from the support-email retention period below.
Support messages
If you contact support@nodeswitch.app, WillowWorks receives your email address, message and any attachments you choose to include. Messages are handled through WillowWorks’ existing Google Workspace (Gmail) account. Within WillowWorks, only Jack Davies has access.
Messages are used to respond to customer support requests, technical issues and privacy enquiries. They are not used for mailing lists, newsletters or marketing. You choose whether to contact us and what to include; without enough information, we may not be able to resolve your enquiry. Do not send private radio backups, signing keys, channel secrets or passwords.
Support emails are normally deleted 12 months after the last correspondence, unless they are still needed for an ongoing issue or a legal obligation. You can request earlier deletion where applicable. Provider backup and deletion processes may mean deletion from all provider systems is not immediate.
Google processes messages to provide its email service; your own email provider also handles messages you send. Google’s Cloud Data Processing Addendum explains its processing of customer data. Its Cloud Privacy Notice separately explains service data. Google and Cloudflare operate internationally; this notice does not promise UK-only storage.
These providers may process personal information outside the UK, including in the United States. Their published transfer terms describe reliance on the UK Extension to the EU–US Data Privacy Framework for eligible US transfers and contractual safeguards for other restricted transfers. See Google’s transfer information and Cloudflare’s Data Processing Addendum, which includes the UK Addendum to the standard contractual clauses. You can contact support@nodeswitch.app for details of the safeguards relevant to your information.
Why we use personal information
WillowWorks relies on legitimate interests to respond to customer support enquiries, resolve technical issues, maintain website security and prevent abuse, where those interests are not overridden by your rights. Processing must be necessary and proportionate for those purposes, subject to an appropriate legitimate interests assessment.
WillowWorks relies on legal obligation where processing is necessary to handle applicable data-protection requests or meet statutory obligations.
Your data-protection rights
Depending on the circumstances and the lawful basis, UK data protection law gives you rights to request access to your personal information, correction, deletion, restriction of processing and data portability. You may also object to processing based on legitimate interests. These rights are not absolute.
To make a request, contact support@nodeswitch.app. WillowWorks may need enough information to verify your identity and locate the relevant correspondence. WillowWorks cannot remotely retrieve app data that remains only on your phone.
You can raise a concern with WillowWorks and have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
Policy changes
We update this policy when app features, hosting or data-handling practices change. The current version is available at nodeswitch.app/privacy.