Privacy policy
This policy covers the radcontrol Jibaya mobile app for Android and iOS. Last updated 5 August 2026.
The short version
Jibaya is a tool an internet provider gives to its own collection staff. It talks to one server — the address the collector types on the sign-in screen, which belongs to that provider. There are no analytics, no advertising, no tracking libraries, and no third-party services of any kind in the app. radcontrol.org neither operates that server nor receives any data from the app.
Who is responsible for your data
The internet provider running the radcontrol installation is the data controller. They decide what subscriber records exist, who may see them, and how long they are kept. radcontrol.org publishes the software; on a normal installation it holds no copy of a provider's data and cannot access it.
If you are a subscriber and want to know what an ISP holds about you, or want it corrected or erased, contact that ISP. We cannot answer for them.
What the app stores on the phone
- Sign-in token — held in the device keychain (iOS) or keystore (Android), the storage the operating system provides for secrets. Signing out deletes it.
- Server address and language — ordinary app preferences, so a collector does not retype them daily.
- A cache of the current round — the subscribers assigned to that collector, what they owe, and receipts issued. This mirrors what the ISP's server already holds; it exists so the app still works where the signal does not.
- Paired printer — the identifier of the Bluetooth receipt printer chosen in Settings.
Uninstalling the app removes all of it. The app excludes itself from cloud backup and from device-to-device transfer, so a restored or replaced phone does not arrive holding a previous collector's round.
What the app sends, and where
Only to the server address entered at sign-in, and only over HTTPS — both platforms refuse plain HTTP in this app. Requests carry the sign-in token and the actions the collector takes: payments recorded, subscriptions renewed, cash handed to the dealer. No data is sent anywhere else, and the app contacts no other host.
Permissions, and why
- Bluetooth — to print receipts on a 58 mm thermal printer, and
nothing else. On Android the scan is declared
neverForLocation. - Location — not used. The app never requests or reads a position. Android 11 and earlier required a location permission before any Bluetooth scan was allowed at all; the app therefore declares one capped at that API level, and it is never requested on a current device.
- Internet — to reach the ISP's server.
There is no camera, microphone, contacts, photo or advertising-identifier access.
Children
Jibaya is a staff tool issued by an employer. It is not directed at children and is not useful without an account created by an ISP.
Changes
Material changes will be published on this page with a new date above. The app is versioned and offline-capable, so an older build may remain in use for a while; the description above holds for every 1.x release.
Contact
Questions about the software itself: info@radcontrol.org. Questions about a specific subscriber record: your internet provider, who holds it.