Effective date: 6 October 2026
This privacy policy explains how the Xecure Engineer mobile app for Android and iOS ("the app") handles information. The app is distributed on Google Play and the Apple App Store.
The app is developed and published by Matti Jones, trading as ZerOne Solutions, Sydney, Australia ("ZerOne Solutions", "we", "us"). Xecure is our product brand. ZerOne Solutions is responsible for (the "controller" of) the personal information described in this policy.
Privacy contact: matti.jones.au@gmail.com
Xecure Engineer is a professional tool for registered security installers and systems integrators who manage Xecure access-control panels. It is intended for users aged 16 and over. To use the app you need an account on the Xecure Tunnel Server. The Xecure Tunnel Server is owned and operated by ZerOne Solutions. Accounts are created by ZerOne Solutions or by an authorised panel administrator. You cannot create an account in the app.
After you sign in, the app downloads information about the panels your account can access from our server. It shows this information to you and keeps a local cache of it on your device. This includes: - panel names and descriptions, hardware model, serial numbers, MAC addresses, and firmware/software versions; - network settings (IP addresses, masks, gateways, DNS/NTP servers), port mappings and tunnel status; - operational status (online/offline, temperatures, voltages, power and trouble states) and related timestamps.
This is mainly information about equipment. A panel name or description may still identify a customer site.
When you act on a panel, the request is sent to our server and processed there. Examples are re-enrolling or removing a panel, claiming a panel, and requesting a remote connection or port status.
If your account has administrator rights, you can view and edit user accounts held on our server. These records include usernames, first and last names, email addresses, phone numbers, account types and active status. You can also set a new password for a user. This information is fetched from and saved to our server. It is not kept in the app's local cache.
The app asks for camera permission only so you can scan QR codes. QR scanning uses the ZXing.Net.MAUI library, which decodes the image on your device. Camera frames are not saved, and they are not sent to us or to anyone else. The app uses only the text decoded from the QR code, for the feature you are using. Photos and videos are not collected. You can refuse or withdraw camera permission at any time in your device settings. You can still use the rest of the app, but you won't be able to scan QR codes.
The app stores your preferences in the app's private storage, such as your panel/server address and display settings.
The app does not collect your contacts, photos or videos, audio or microphone input, precise or approximate location, SMS, call logs, calendar, files, browsing history, installed apps or advertising ID. The app does not store SSH or panel passwords.
We use the information only to provide and secure the app's features: - signing you in, keeping you signed in, and confirming that you are a registered installer or integrator; - displaying, monitoring and managing your panels, tunnels, ports and versions; - carrying out the panel actions you request; - administering user accounts (administrators only); - maintaining account security and records, including the last sign-in time.
We do not use your information for advertising, profiling or marketing.
| Destination | What is sent | Why |
|---|---|---|
| Xecure Tunnel Server (owned and operated by ZerOne Solutions) | OAuth sign-in and token requests; API requests for panel data; panel actions; user-management changes (administrators) | To provide the app's features |
Xecure version service (versions.xecure.online, operated by us) |
A standard web request with no account or panel data | Getting the latest published version numbers |
All of these services are ours. Panel and user-management data passes through, and is stored on, our Tunnel Server.
We do not sell, rent, trade or share your information with third parties. The app contains no third-party SDKs that receive your data. It is built with Microsoft .NET MAUI, our own XecureEngineer.Core library, SQLite for on-device storage, and ZXing.Net.MAUI for on-device QR decoding. None of these send your data to their makers. We may disclose information if Australian law requires it.
session.json) in the app's private data directory. The operating system's app sandbox stops other apps from reading this file. The file itself is not separately encrypted with the Android Keystore or iOS Keychain. To protect it, use a device screen lock and keep your device's operating system up to date.settings.json holds only preferences, such as the panel/server address.No method of storage or transmission is completely secure, but we keep the information we handle to what the app needs.
The app is intended for users aged 16 and over who work in the security industry. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). You can ask for access to or correction of your personal information, or make a complaint, by emailing matti.jones.au@gmail.com. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If you are outside Australia, you may have similar rights under your local law, and you can contact us in the same way.
We may update this policy when the app changes. We will post the updated version at this address and change the effective date above. If a change significantly affects how your information is handled, we will also tell you in the app or in the store release notes.
Matti Jones, trading as ZerOne Solutions (Xecure) Sydney, Australia Email: matti.jones.au@gmail.com