KiroNET Privacy Policy

Last updated: October 2, 2026

KiroNET: Home Network Analyzer is a macOS utility developed by Kirodev. It discovers and identifies devices on a local network selected by the user. KiroNET does not require an account and contains no advertising, analytics, or tracking SDKs.

Data processed on this Mac

Core scanning and identification happen on the Mac. Depending on the available network signals, KiroNET may process:

• local IP and MAC addresses, hostnames, service names, open ports, response times, device vendors, models, types, and identity sources;
• device-reported serial numbers, Bonjour TXT records, HTTP titles and server banners, and this Mac’s Wi-Fi signal when available;
• the selected subnet and network interface;
• user-created favorites, aliases, and notes;
• app preferences and transient scan alerts.

The current scan is held in memory. Scan history is stored in the app's sandbox with SwiftData and is limited to the 100 newest snapshots. Preferences, favorites, aliases, and notes are stored in the app's local preferences. Kirodev does not operate a server that receives this data.

Copy actions place the selected IP, MAC, summary, or JSON on the macOS pasteboard only after the user chooses that action.

Optional RouterOS connection

RouterOS identification is disabled until the user explicitly saves a configuration. The endpoint, username, and password are stored in the non-synchronizing Data Protection Keychain. Requests use HTTPS to a private IPv4 router address on the local network. KiroNET does not send RouterOS credentials or DHCP lease results to Kirodev.

Disconnect removes the saved RouterOS configuration and stops future RouterOS requests.

Optional Fingerbank cloud identification

Fingerbank is disabled unless the user supplies and saves their own Fingerbank API key in Settings → Advanced. When enabled, KiroNET may send the following available device attributes to the Fingerbank Cloud API for identification:

• MAC address, including a locally administered address when present;
• hostname;
• up to five normalized mDNS service type names.

KiroNET does not include the scanned device's private IP address in this request. As with any internet connection, Fingerbank receives the public source IP needed to serve the HTTPS request. The API key is sent to Fingerbank for authentication and is stored locally in the non-synchronizing Data Protection Keychain.

Fingerbank responses are cached in local preferences under a hashed query key. A response may be reused for seven days. At the start and end of the Fingerbank identification stage, expired or malformed entries are removed and the cache is limited to the 4,096 newest valid records. Clearing the API key disables future requests but does not immediately erase existing cached responses.

Fingerbank is an independent third party. Its handling and retention of submitted device data are governed by the Fingerbank Privacy Agreement and its terms. Fingerbank states that submitted device data may be retained to improve its identification engine. Do not enable Fingerbank for a network unless you are authorized to send these device attributes.

Retention and user controls

• The oldest scan history is automatically removed when the 100-snapshot limit is exceeded.
• Forget Device removes that device's favorite, alias, and note. It does not rewrite older scan-history snapshots.
• Clear in the Fingerbank settings removes the saved API key and stops new cloud identification requests.
• Disconnect in the RouterOS settings removes the saved local-router configuration.
• Removing the app's sandbox data removes locally stored KiroNET history and preferences. Contact support before doing this if the data is needed.

Security

KiroNET runs in the macOS App Sandbox. Fingerbank and RouterOS credentials use the Data Protection Keychain and are not configured to synchronize through iCloud Keychain. Fingerbank uses HTTPS, and RouterOS accepts only HTTPS with a certificate trusted by macOS; KiroNET does not bypass TLS trust failures.

No network discovery result should be treated as proof of identity or as a vulnerability assessment. Local devices and network services can publish incorrect or spoofed information.

Changes and contact

This policy will be updated when KiroNET's data flows change. Privacy questions or deletion assistance: me@kirodev.eu.