This addendum extends the master Privacy Policy. Where this addendum differs from the master policy, the master policy governs unless an OSPREY-specific provision is more protective of your data.
1. Scope
OSPREY is a network diagnostics toolkit for iOS. It includes ping, traceroute, DNS, LAN scanner, port scanner, subnet calculator, SSL inspector, speed test, iPerf3, and an AI assistant. This addendum covers data processing specific to those tools.
2. iOS permissions
- Local Network — required by iOS for LAN scanning and any tool that resolves devices on your local network. Without this permission, LAN-scoped features are disabled.
- Network access — required for all internet-bound diagnostics (ping, traceroute, speed test).
- Notifications (optional) — used only if you schedule a diagnostic to complete in the background.
3. Diagnostic data handling
All network diagnostic outputs — ping RTTs, traceroute hops, DNS resolutions, port probe results, TLS certificate chains, and iPerf3 throughput figures — are computed and stored locally on your device. No diagnostic payload is transmitted to servers we control.
Historical results shown in the "History" tab are persisted in an on-device database and can be exported or deleted at any time from Settings.
4. IP geolocation
For traceroute visualisation, OSPREY queries ip-api.com with the public IP addresses of each hop (these IPs belong to intermediate routers, not to you). Only public routing IPs are transmitted. You can disable geolocation enrichment in Settings.
5. AI assistant (OSPREY)
The OSPREY AI assistant is disabled until you explicitly enable it. Once enabled, only the specific log, error text, or output fragment you select and submit is sent to Anthropic's Claude API. OSPREY never transmits your full history, your device identifiers, your location, or any other data to the AI without an explicit action on your part.
6. Scanning ethics and legal use
OSPREY's port scanner and LAN scanner are intended for use only on networks you own, administer, or have explicit permission to probe. Unauthorised scanning of third-party networks may be unlawful in your jurisdiction (for example, under the UK Computer Misuse Act 1990). You are solely responsible for ensuring you have permission to scan any target.