Privacy policy
The Biscuit Shop ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, what information our software accesses on your device, and how that information is used.
This policy covers both:
- Our website and store at biscuitshop.us, and
- Our Android mobile application, Biscuit Manger, distributed through Google Play.
1. Information We Collect Through Our Website and Store
We collect only the minimum information necessary to operate our business and fulfill your orders:
- Email address: collected when you create an account or place an order.
- Device serial numbers: recorded for the devices we sell, for warranty and support purposes.
- Order information: your name and shipping address, collected solely to fulfill your order.
Payment information is processed securely by our third-party payment processor and is not stored on our servers.
2. Data Accessed by the Biscuit Manger Mobile Application
This section describes all personal and sensitive user data that the Biscuit Manger app accesses, collects, uses, and shares.
2.1 Location data
What we access. The app accesses your device's precise location (ACCESS_FINE_LOCATION), approximate location (ACCESS_COARSE_LOCATION), and location in the background (ACCESS_BACKGROUND_LOCATION).
Why we access it. The app's core function is wireless network survey and mapping ("wardriving"). Location coordinates are recorded alongside observed wireless network data so that the resulting survey log is geographically meaningful. Without location access, the app cannot perform its core function.
Background access. Location is accessed in the background — including while the app is minimized or the device screen is off — only while a survey session that you have explicitly started is running. Survey sessions never start automatically. The app does not access location before you start a session, after you stop a session, or at any other time.
Your control. Android requires you to grant foreground location permission before the app can request background location permission, and background access requires your separate, affirmative approval. You may deny or revoke location permission at any time in Android Settings; the app will stop accessing location immediately.
How the data is handled. All location data is processed and stored locally on your device, inside the app's own storage or a file location you choose. Location data is never transmitted to The Biscuit Shop. We do not receive it, host it, log it, or have any technical means of accessing it. We do not transmit it to any third party, analytics provider, advertising network, or SDK.
Retention and deletion. Because location data never leaves your device, retention is entirely under your control. Session logs remain on your device until you delete them. You can delete individual session logs from within the app, delete exported files using your device's file manager, or clear all app data by uninstalling the app or using Android Settings → Apps → Biscuit Manger → Storage → Clear data.
Sharing. We do not sell, share, or transfer your location data, because we never receive it. If you choose to export a survey log and upload it to a third-party service (for example a public wireless network mapping database), that transfer is initiated by you, governed by that service's privacy policy, and outside our control and responsibility.
2.2 Other data accessed by the app
- Nearby wireless network information (ACCESS_WIFI_STATE, and where applicable Bluetooth scanning permissions): observed network identifiers and signal characteristics are recorded into your local survey log. This data is stored on your device only and is never transmitted to us.
- Device storage: used to write and read your survey logs on your device.
The app contains no advertising SDKs, no analytics SDKs, and no crash-reporting services that transmit personal data. The app does not require an account, and does not collect your name, email address, phone number, contacts, photos, or device identifiers.
3. Third-Party API Integrations
Our devices and app support optional integrations with third-party services through their APIs. When you choose to enable such a feature and enter your credentials or data, that information is transmitted directly from your device to the respective third-party provider. We do not intercept, collect, or log any data you submit through these integrations. All such communication happens from your device. Data you send to a third-party service is governed by that service's own privacy policy.
4. How We Use the Information We Collect
We use the information described in Section 1 to:
- Process and fulfill your orders
- Provide warranty support and device verification
- Communicate with you about order status and customer service inquiries
- Improve our website and customer experience
We do not use location data for any purpose, because we do not receive it.
5. Disclosure of Your Information
We do not sell, trade, or otherwise transfer your personal information to outside parties. This does not include trusted service providers who assist us in operating our website, fulfilling orders, or servicing you, and who are contractually required to keep that information confidential. We may also disclose information where required by law.
6. Data Security
We use industry-standard safeguards to protect the information we hold, including encrypted transmission of data to and from our website and encrypted handling of payment information by our payment processor. Data held locally on your device by the app is protected by Android's application sandbox and by the security controls of your own device.
7. Data Retention and Deletion
- Store data: Order and account records are retained only as long as necessary to fulfill orders, provide warranty support, and meet legal, tax, and accounting obligations. You may request deletion of your account and associated personal data by emailing admin@biscuitshop.us. We will respond within 30 days.
- App data: All app data, including location and survey logs, is stored on your device and is deleted when you delete it in-app, clear app storage, or uninstall the app.
8. No Logs Policy
We do not keep logs of your activity on our website or of your use of our products and app.
9. Children's Privacy
Our products, website, and app are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
10. Shipping Privacy
All shipments are sent in plain packaging to ensure your privacy and discretion. No branding or product details are displayed on the packaging.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Material changes affecting the app will also be communicated in-app where required.
12. Contact Us
Questions about this Privacy Policy or requests regarding your data:
The Biscuit Shop
Email: admin@biscuitshop.us