Next WiFi Privacy Policy

Effective date: October 29, 2026 | By My Side Labs | App: Next WiFi (com.bymysidelabs.nextwifi)

At a glance

• There is no sign-up. We do not ask for your name, phone number, or email address.
• The VPN runs only on your phone. We do not receive your internet traffic, the sites you visit, Wi-Fi names, or the list of apps you select.
• Your selected apps and protection settings are stored only on your phone and are not backed up.
• Ads (Google AdMob) and usage statistics (Firebase Analytics) are processed by Google. We do not use a crash reporting tool (Crashlytics).
• If you turn on at least one notification type, a random install ID and a notification token are registered with our notification server (Cloudflare); if you turn them all off, they are deleted immediately.
• If you email us the install ID shown under “Settings” > “Support info”, we delete your server data within 7 days.
• Contact: mark@bymysidelabs.com

1. Information processed only on your phone

Next WiFi uses Android’s VPN feature (VpnService) to keep only the apps you select on the Wi-Fi network that was active when protection started. This VPN runs only on your phone and does not pass through any remote VPN server of ours.

• Installed apps: read only on your phone to show them on the screen where you choose apps to protect.
• Wi-Fi and network state: whether you are connected, signal strength, link speed, and the Wi-Fi route when protection started
• Your selected apps, protection status, and recent connection status shown on screen during protection (up to 15 minutes)
• App settings, notification choices and consent times, and the install ID

We do not collect, store, or sell your traffic content (packets), visited sites and addresses, DNS requests, Wi-Fi names (SSID) or addresses (BSSID), or your selected-app list. Information on your phone is excluded from Android backups and is removed when you clear the app’s data or uninstall the app.

2. Information sent to our notification server

We use our notification server (nextwifi-push.bymysidelabs.com) for the inbox and notices. The information below is registered only if you turn on “Updates and news” or “Offers and ads”.

• Install ID: a random number created by the app on your phone. It is not linked to your name or any account.
• Notification token (Firebase Cloud Messaging registration token)
• Notification choices (“Updates and news”, “Offers and ads”, “Also at night”) and when you changed them
• Phone language and app version
• Connection IP address: used only to count requests and block excessive ones.

If you turn both off, the registration on the server and the notification token on your phone are deleted immediately. When you open the inbox or the app, it sends the app language and install ID to fetch notices and update messages regardless of consent, and we do not store these requests.

3. Retention on the notification server

• Registration data (install ID, notification token, notification choices and consent times, language, version): immediately when you turn all notifications off, otherwise 180 days after the last update. If Google reports that a token can no longer be used, it is deleted at the next daily cleanup.
• Notice content (notices to everyone and notices sent to a specific install ID): 180 days after posting
• Notice send log: the notice number, send time, and number of devices are kept so that the same number is never reused. For notices sent to a specific install ID, that install ID is erased from the log automatically after 180 days.
• Request count records (counts per IP address and per install ID): up to 2 days

4. Notifications

• Protection notifications (“Wi-Fi Lock”, “Wi-Fi Lock events”, “Wi-Fi connection alerts”, “Wi-Fi Lock status”): show that protection is on and tell you when Wi-Fi drops or comes back. They are created on your phone without the server.
• “Updates and news”: new features and important news
• “Offers and ads”: off by default. Sent only to devices with a recorded consent time.
• “Also at night”: promotional notifications between 9 PM and 8 AM Korea time are sent only to devices that have also agreed to this option.

You can change your notification choices under “Settings” > “Notifications”. You can also turn off individual notification channels such as “Next WiFi updates” and “Next WiFi offers” in Android settings, and the core features keep working even if you decline notifications.

Devices that allowed notifications in version 0.1.11 or earlier are subscribed to language-based notification topics (FCM topics), and we send only service notices through these topics. Updating to version 0.1.12 or later removes this subscription once.

5. Third-party services and international transfers

Next WiFi entrusts the processing of information to the companies below. They may process information on servers outside Korea (mainly in the United States). Information is encrypted and sent over the internet while you use the app.

• Google LLC (United States), Google AdMob and User Messaging Platform: showing and measuring ads, preventing fraud, and managing ad consent. Processes device identifiers such as the advertising ID, IP address (to estimate approximate location), app and ad interactions, and diagnostic information. Retention follows Google’s policies.
• Google LLC (United States), Firebase Analytics: checking that protection starts and stops reliably. Processes the app instance ID, approximate device and app information, screen activity, and predefined events. Advertising ID collection and ad personalization are turned off, and we do not send Wi-Fi names or addresses, app names or package names, IP or DNS addresses, traffic content, typed text, or notification tokens. Retention is up to 14 months.
• Google LLC (United States), Firebase Cloud Messaging: delivering push notifications. Processes the notification token, phone language, and notification content for as long as needed for delivery.
• Google LLC (United States), Google Play: the review prompt. Google Play shows it directly, and Next WiFi does not receive whether you wrote a review or what it says.
• Cloudflare, Inc. (United States), Cloudflare Workers and D1: running our notification server. Processes the information in section 2, with the database located in the Asia-Pacific region. Retention is as in section 3. This policy web page is also served by Cloudflare, which counts visits without cookies (Cloudflare Web Analytics).

We do not use a crash reporting tool (Firebase Crashlytics). Each company’s policy: Google Privacy Policy, Cloudflare Privacy Policy.

We do not sell personal information or build our own cross-app advertising profiles. If you do not want your information transferred abroad, you can stop using and uninstall the app.

6. Permissions

• VPN: routes only the apps you select through the protection path on your phone.
• Network and Wi-Fi state: checks connection, signal, link speed, and the starting Wi-Fi route.
• Notifications: shows protection status and asks what to do when Wi-Fi drops.
• Foreground service and staying active (WAKE_LOCK): keeps a protection session you started running and visible, and asks Android for Wi-Fi performance support when needed.
• Internet: ads, usage statistics, and the notification server

7. How to turn things off and delete data

• Notifications: “Settings” > “Notifications”, or Android notification settings
• Ad consent: in regions where consent is required, “Settings” > “Ad privacy choices”. You can reset or delete your advertising ID in Android settings.
• Information on your phone: clear the app’s data or uninstall the app
• Server data: deleted immediately when you turn all notifications off. To request deletion separately, tap “Copy” next to “Install ID” under “Settings” > “Support info”, then email it to mark@bymysidelabs.com with the subject “Next WiFi data deletion request”. We delete the data within 7 days of confirming and reply to you.

Please do not send sensitive information such as Wi-Fi passwords. If you uninstall the app, the server data is deleted automatically 180 days after its last update even without a request.

8. Your rights

You can ask to access, correct, delete, or stop the processing of the information we hold about you. If you email us with your install ID, we reply within 10 days of confirming the request. Information processed by Google can be managed in your Google Account and Android settings.

9. Security measures

Communication with the server is encrypted (HTTPS). Server administration functions can be used only with a separate administrator key. The VPN turns on only when you start it yourself and applies only to the apps you select.

10. Children

Next WiFi is not directed at children under 14, and we do not knowingly collect personal information from children.

11. Changes to this policy

If features or third-party services change, we update this policy and post it on this page with its effective date.

12. Contact

• Privacy contact: By My Side Labs
• Email: mark@bymysidelabs.com

Change history

• October 29, 2026: removed the description of Crashlytics, which is not used, and added the night-time notification rule, server requests made before consent, the review prompt, how the app list is handled, how to delete data, and international transfers.
• October 27, 2026: added the notification server introduced in version 0.1.12.