Privacy Policy

Last updated: April 24, 2026

Orangescada ("we", "our", or "the app") is an industrial monitoring application that connects to SCADA servers configured by users.

This Privacy Policy explains what data is processed, how it is used, and how users can request deletion of locally stored data.

1. Data We Process

Server address: URL/IP and connection settings for your SCADA server.
Login credentials: username and password used to authenticate against your SCADA server.

Session/auth tokens received from your SCADA server after successful login.
Camera access data used only to scan QR codes when you choose to use the scan feature.
Crash diagnostics and technical app events (for example, crash logs, basic app activity events, and device/app identifiers) processed via Firebase services.

We do not sell user data and do not use advertising SDKs.

We use data only to:

We do not sell user data.
Data entered in the app may be transmitted directly from your device to the SCADA server configured by you as part of core app functionality. Depending on that server configuration, this connection may use HTTPS/TLS or plain HTTP.
We use Google Firebase as a service provider for:
- Firebase Crashlytics (crash reporting and diagnostics),
- Firebase Analytics (aggregated usage analytics).
We do not operate or control user SCADA servers unless explicitly stated by your organization.

The app requests the Android CAMERA permission only for QR code scanning initiated by the user.

You can revoke camera access at any time in Android system settings.

Data is stored locally on your Android device (for example, secure app storage / Android Keystore-backed mechanisms where applicable).

Server settings and credentials are kept until you remove them, log out, clear app data, or uninstall the app.
Session tokens are kept only as long as needed for active/remembered sessions and are replaced or removed on logout/session reset.
Crash/analytics data processed by Firebase is retained according to Google Firebase retention settings and Google policies.

You can delete local data by:

For data processed by Firebase, deletion/retention behavior depends on Firebase services and Google policies.

We use reasonable technical measures to protect data on device and in transit, including:

protected local storage mechanisms for sensitive data where applicable;
TLS/HTTPS is supported for network communication when configured by the target server;
encrypted transport is used by Firebase services;
when connecting to self-hosted SCADA servers configured to use HTTP instead of HTTPS, data transmitted between the app and that server may not be encrypted in transit.

The app uses:

The app does not include third-party advertising SDKs.

The app is not intended for children under 13, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date.

For privacy questions or requests, contact: