Privacy Policy

Last updated: 2 November 2026

CloakwireX is built to protect your privacy, so it collects as little as possible: we have no account system, no ads, and no servers of our own. Everything the app does runs on your device. The app sends nothing to us, except an access code if you type one in.

What we collect

The app sends nothing to us on its own. CloakwireX has no backend. We do not collect, store, sell, or share personal information. There is no sign‑up and no user identifier.

The one thing you can choose to send us is an alert card. After an alert, the app can make a small image that says what kind of thing happened and what the app did about it. It is built from the alert's type only: it never contains your name, number or location, a Wi‑Fi name, a router or device address, a tracker ID, a caller, an app name, or an exact time. You see the card before anything is sent, and nothing leaves your phone unless you tap Share this (your own share sheet) or Send to CloakwireX, which opens your Mail app addressed to [email protected]. Cards sent to us are read by a person, used to improve the app and, occasionally, shown publicly as examples. We don't reply, and we don't link a card to you beyond the e‑mail address your Mail app sends it from. E‑mail us from that address if you want one deleted.

Buying on this website. You can buy CloakwireX here instead of inside the app. Stripe handles the payment; we never see your card. We receive the e‑mail address you give Stripe and keep it with your order so we can send your access code and handle a refund. When you type the code into the app, the app sends only that code to cloakwirex.com to check it. It sends no name, device identifier or location. To guard against guessing, the site counts wrong codes per network address for one day, under a scrambled form of the address that is deleted after that day.

This website is the one exception, and it is small: cloakwirex.com uses Cloudflare's cookie‑free page‑view count (Cloudflare Web Analytics) and loads its typefaces from Google Fonts. Each of them sees the ordinary details of a page request — your IP address, browser and the page you opened — under its own privacy policy. Neither follows you across sites, and neither has anything to do with the app.

What stays on your device

Scan results, sealed reports (the History and Reports screens), your network baselines, your trusted contact if you add one, and any Sensor pairing are stored only on your iPhone (and in your own iCloud backup if you enable it). You can delete any of it in the app at any time. Uninstalling the app removes it.

The purchase

Protect me, the lockdown, the tracker check and the scam screen are free. The deeper tools unlock with a one‑time $9.99 purchase after a 3‑day free trial — no subscription. Inside the app, Apple handles the purchase; we never see your card, your name or your Apple Account. On this website, Stripe handles it and you get an access code by e‑mail.

Permissions, and why

Local Network — to scan the Wi‑Fi you're on for devices, services and open ports. Used only while you run a scan.
Bluetooth — to listen for nearby Bluetooth advertisements and detect trackers. The app only listens; it never connects to a device unless you tap “Identify.”
Location (Precise) — iOS only reveals the name of the Wi‑Fi network you're joined to when an app has location access. CloakwireX uses this solely to display your current Wi‑Fi name/BSSID. It does not record, store, or transmit your location.
Camera — only to scan the pairing QR code the CloakwireX Sensor shows on your computer. No images are stored or sent.
Notifications — to alert you when a threat is detected while the app is open (a tracker following you, a hostile network, screen sharing). iOS pauses the app soon after you switch away, so there is no background watching.
Network Extension (the lockdown) — “Lock everything down” uses an on‑device packet tunnel to block traffic. It connects to no server and routes nothing anywhere; it simply drops packets. No traffic is inspected, logged, or forwarded. A safety timer lifts it about 30 minutes after you leave the app. On a company phone, IT can switch on an optional mode that connects to the company's own VPN gateway instead — never ours, and never without that setup.
Call state — the app notices whether a phone call is in progress, so it can warn you if your screen is shared during one (the shape of a fake‑support scam). It never sees phone numbers, contacts or audio, and records nothing about your calls.
Trusted contact (optional) — a name and a phone number or email you choose, so the app can offer a heads‑up message for them when you allow something risky. You send it yourself from your own Messages or Mail app; it is stored only on your phone and never sent to us.

Third‑party services CloakwireX contacts

To enrich network findings, the app makes direct requests from your device to these services. We do not proxy or receive any of it:

These requests contain IP addresses being analyzed and standard request metadata. Their handling is governed by each provider's own privacy policy.

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Children

CloakwireX is not directed at children and collects no personal information from anyone.

Changes

If this policy changes, we'll update the date above and post the revision here.

Who "we" means

CloakwireX is operated by X Technologies LLC, a Florida limited liability company based in Sarasota, Florida. Where this policy says "we", that is the company. Questions about your data, including deleting it, go to [email protected].