Privacy Policy

Last updated: August 3, 2026

Batoucada (“we”, “us”, or “our”) built Ondara, an Android remote control for Sony network audio devices — wireless speakers and soundbars — on your own local network. This page explains what the app does and does not do with your information.

Information we collect

None. Ondara does not collect, store, transmit or share any personal data. It has no analytics, no crash reporting, no advertising SDK, no cookies and no user accounts. We have no servers and receive nothing from your device.

Network communication

Ondara communicates only with the Sony audio devices on the local network your phone is attached to, over the HTTP interface those devices expose themselves. It contacts no server on the internet, and there is no server of ours for it to contact. Three Android permissions are declared for this, all of them at the normal protection level, so none of them prompts you:

• INTERNET — Android requires this permission to open any network socket, including one that never leaves your home network. It is used only to reach your speaker at its address on your own network.
• ACCESS_NETWORK_STATE — to read which network the phone is currently on and what its address range is, so discovery searches your actual local network instead of a guessed one.
• CHANGE_WIFI_MULTICAST_STATE, declared with maxSdkVersion="33" — to hold a Wi-Fi multicast lock while listening for the devices that announce themselves, which older Android versions require before they will deliver those announcements. It is not requested at all on Android 14 or later, where the platform manages the lock itself.

Ondara also declares that it needs Wi-Fi hardware (android.hardware.wifi), because every function of the app needs a local network.

Discovery scans your local network, and here is exactly what that means. Ondara first listens for devices that announce their own presence. It then opens a short-timeout connection to each address on your phone’s own subnet, on a small set of candidate ports, and asks anything that answers whether it is a Sony audio device. Addresses that do not answer are discarded as the scan proceeds. The scan is bounded, can be cancelled at any time, and looks at nothing beyond your own local network. Its results stay in memory while the app is in use and are never recorded or transmitted — the only thing kept is the list of devices described below.

No location permission

Ondara declares no location permission of any kind — not ACCESS_FINE_LOCATION, not ACCESS_COARSE_LOCATION. It does not need one: it looks for network addresses on the network you are already connected to, not for Wi-Fi access points around you, and it is Wi-Fi access point scanning that Android gates behind location. Ondara never reads, derives, stores or transmits your location.

No authentication on the devices

Worth saying plainly, because it is easy to assume otherwise: these Sony devices require no password, token or pairing, and their local interface is plain HTTP with no encryption available on any port we have observed. Anything on the same network can already change their volume or switch them off. That is a property of the hardware and there is no Sony setting that restricts it — Ondara has not secured anything that was not already open, and does not claim to. No personal data is transmitted either way; what travels between the phone and the speaker is a control command, such as a power state or a volume number, and only to an address on your own network.

Data stored on your device

Ondara keeps one small database on the phone: the list of devices you have found, so the app opens straight onto them instead of searching again. Each entry holds the device’s local IP address and port (for example 192.168.1.42:54480), the name the device reports on your own network, and whether it turned out to report a battery level. Every one of those values is something your own network told the phone. It never leaves your device, and it is deleted with the app or by clearing its data from Android settings. There is nothing else stored, so there is nothing else to export or delete.

Third-party services

Ondara integrates no third-party service or SDK that collects user data. The libraries it uses — AndroidX and Jetpack Compose, Hilt, Room, kotlinx.serialization and, for live updates from the device, OkHttp — all run locally and none of them phones home. OkHttp is used only to open a ws:// connection to an address on your own network.

Children’s privacy

Ondara is a remote control for a piece of home audio hardware and is not directed at children. We do not knowingly collect information from anyone, of any age — because we collect nothing at all.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact us

If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact us at contact@batoucada.fr.