PocketProbe Privacy Policy

Last updated: 31 October 2026

PocketProbe is a network toolkit for iPhone and Apple Watch, published by HozzyLabs. This policy explains, in plain terms, what PocketProbe does with your information. The short answer is: we collect none.

Summary

• PocketProbe does not collect your personal information. Its App Store privacy label is Data Not Collected.
• PocketProbe has no analytics and no accounts. It does no tracking and shows no ads.
• Your scan history, saved targets and settings stay on your device. The app works offline.
• PocketProbe contacts a third party only when you ask it to, as described below.

Information stored on your device

PocketProbe stores the following only on your device:

• Scan history, including the targets and results of the tools you ran.
• Saved targets, including hosts and, for Wake-on-LAN, MAC addresses you saved.
• Settings and onboarding progress.
• Threat-intel API keys you add, which are stored in the iOS Keychain. They are readable only while the device is unlocked, are never synced to iCloud Keychain, and are never written to History or logs.
• On Apple Watch, the saved host list sent from your iPhone and the optional network-change alert setting.

HozzyLabs does not receive this information. You can delete scan records by swiping them in History, delete saved targets by swiping them in Saved, and remove API keys with Remove key in Settings. Deleting the app removes its history and saved targets from the device, but iOS can keep Keychain items after an app is deleted, so remove any API keys before you delete the app.

When PocketProbe contacts a third party

PocketProbe has no server of its own and nothing runs in the background. It contacts a third party only when you choose to, and only with the input you provide:

• cloudflare-dns.com: Cloudflare DNS-over-HTTPS for DNS & WHOIS lookups, only while the Settings toggle is on (off by default). Sends each hostname you look up.
• WHOIS servers (TCP port 43): when you run a WHOIS lookup. Sends the domain you look up.
• api.ipify.org: only when you tap Look up public IP on iPhone, or Look up on Apple Watch. Sends an HTTPS request; the service sees your public IP address.
• speed.cloudflare.com or proof.ovh.net: Speed Test, only when you tap Start, after a notice naming the server and the most data it can use; it asks again on cellular. Sends timing requests, generated filler to upload and files to download, about 70 MB at most (50 MB on the download-only server); the server sees your public IP address and nothing you typed or stored.
• 1.1.1.1, 8.8.8.8 and 9.9.9.9 (Cloudflare, Google and Quad9, UDP port 53): DNS Resolvers, only when you tap Run or Check and have agreed to that run's disclosure; the System resolver is your device's own DNS. Sends each domain name you list or check, and your IP address.
• api.shodan.io: Threat intel, one tap, with your own Shodan key. Sends the IP address you typed.
• www.virustotal.com: Threat intel, one tap, with your own VirusTotal key. Sends the domain, IP address or file hash you typed (the file itself is never uploaded).
• haveibeenpwned.com: Threat intel, one tap, with your own Have I Been Pwned key. Sends the email address you typed.
• api.pwnedpasswords.com: Threat intel password check, one tap. Sends the first five hex characters of the password's SHA-1 hash; the password itself never leaves your device.

Lookups against Shodan, VirusTotal and Have I Been Pwned send only what you enter to that service, using your own API key for it, and happen only when you run them. The privacy policies of those services apply to the requests they receive; we do not see them.

Network tools

Some tools send traffic to hosts and networks you name, such as Ping, Port Scan, the NTP and mail server checks, SNMP and SSH. That traffic goes only to the host you entered. Scans of your local network run on your device and stay there; nothing a scan finds is sent to us. Use PocketProbe only on networks and hosts you own or have written permission to test. PocketProbe asks you to confirm this before every active scan.

Tracking and advertising

PocketProbe does not track you across apps or websites and does not show advertising. It does not use advertising identifiers.

Children

PocketProbe is not directed at children under 13, and it does not knowingly collect information from anyone.

Changes to this policy

If what PocketProbe collects or how it works ever changes, this page will be updated and the "Last updated" date above will change.

Contact

Questions about this policy or PocketProbe's privacy practices can be sent to: [email protected]