NETTOT Collect Privacy Policy

NETTOT Collect is made by Nettot Pty Ltd (ACN 683 367 839, ABN 28 683 367 839), 13 Woodroffe Street, Minto NSW 2566, Australia (“Nettot”, “we”, “us”). We are the controller of the personal data described here.

For anything about your data, email privacy@nettot.com.

Our representative in the European Union (GDPR Article 27): MD AKTERUZZAMAN, Södra skolgatan 31, LGH 1502, 214 22 Malmö, Skåne, Sweden — privacy@nettot.com. You can contact the representative, as well as us, about anything in this policy.

NETTOT Collect measures the quality of mobile and Wi-Fi networks — speed, latency, signal and coverage — where you are. You can run tests yourself, let the app measure in the background if you switch that on, and take paid testing jobs that network operators and other customers order from us. You earn points for jobs and can exchange them for money or vouchers.

Account and profile — your name, email address, password (stored only as a one-way hash), phone number (verified by SMS), date of birth, street address and the region it lies in, a profile photo if you add one, and your language, time zone and display preferences.

Measurements — when a test runs, and while background measurement is on:

Jobs and points — the jobs you take, where and when you tested for them, and your points balance and history.

Payouts — when you withdraw points: the payout method you choose and its destination (for example a PayPal address or mobile-money number), the amount and its status. Before your first withdrawal, Nettot staff verify your identity: we check the name, date of birth and address on your account, may ask you to show an identity document, and record the result of the check. We do not use an outside verification company.

Technical — a hashed form of your IP address and your sign-in history, to protect accounts from abuse.

We do not collect your contacts, messages, call or SMS content, photos other than a profile photo you choose, or your advertising ID. The app shows no ads.

In Australia we handle personal information under the Privacy Act 1988 and the Australian Privacy Principles.

• Customers who order a paid jobreceive that job’s results: the measurements, where and when each test was taken, and your display name as the person who ran it. They do not see your email, phone number, address or payouts.
• Coverage maps and network statistics are built from measurements without your identity.
• Authorities, when the law requires it.

Service providers who process data for us under contract:

We do not sell your personal data.

Nettot is an Australian company. Our servers are in the EU (France and Sweden), and our team in Australia accesses them to run the service. Some providers (Cloudflare, Twilio, payout providers) may process data in other countries, including the United States. A measurement server in Australia is used when it is the nearest one to you. For people in the EU/EEA, transfers outside it rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

De-identified means we remove everything that links a measurement to you or to your home: your account and tester identifiers, the installation and device identifiers, Wi-Fi network names and access-point identifiers, local and router IP addresses and network route hops, and altitude; and we round its location to about 100 metres. What is left — signal, speed, latency, operator, cell, technology, time and approximate place — describes the network, not you, and we keep it to build network-quality statistics and coverage maps.

In the app: Account › Delete account. On the web, without the app: studio.nettot.com/delete-account. Or email us from the address on your account.

When you delete your account we delete your name, email, phone number, address, date of birth, profile photo, sign-in and sessions, and the raw measurement logs your phone uploaded, including their GPS positions. We keep your test results as anonymous network data with nothing linking them to you, and records of withdrawals already paid, without your payout details, for accounting. Points you have not withdrawn are forfeited. You cannot delete your account while a withdrawal is being paid out or a job is in progress.

You can ask to access, correct or delete your data, to receive it in a portable format, and to restrict or object to how we use it, and you can withdraw consent at any time (switch off background measurement in the app). Contact us at the address in section 1.

You may also complain to a privacy regulator: in Australia the Office of the Australian Information Commissioner (OAIC, oaic.gov.au); in the EU/EEA the data-protection authority where you live (in Sweden, Integritetsskyddsmyndigheten, IMY).

NETTOT Collect is not directed at children under 13, and we do not knowingly collect data from them; we recommend it for ages 13 and over. If you are below the age of digital consent where you live (13 to 16 in the EU, depending on the country), you need a parent’s or guardian’s permission to use the app and to switch on background measurement. Withdrawals require identity verification, and payout providers may require you to be an adult.

Data travels encrypted (HTTPS). Passwords are stored only as hashes, sign-in can be protected with two-step verification, and access to personal data inside Nettot is limited by role. Measurement results are signed so they cannot be altered in transit.

We will update this page when what we collect or how we use it changes, and tell you in the app before a significant change takes effect.