Privacy Policy

for the Tracetrack Android applicationLast updated: October 29, 2025

At Tracetrack (“we”, “us”, or “our”), your privacy matters. This Privacy Policy explains what information our Android application (“App”) collects, how we use it, how it is shared, and the choices you have.

Contents

  1. Information We Collect & How We Use It
  2. How We Share Information
  3. Data Security
  4. Your Choices & Rights
  5. Children’s Privacy
  6. Changes to This Policy
  7. Contact Us

1) Information We Collect & How We Use It

Account & Profile

When you create or manage an account, you may provide personal information such as your name, email address, phone number, and a profile photo. We use this to create and maintain your account, display your profile, and send account-related communications.

Location (Foreground-Only, User-Initiated)

Tracetrack does not collect location in the background. We only access your precise location when you explicitly use features that require it (e.g., tapping Use my location in the Add Geofence flow). Coordinates are sent to our servers only if you submit the geofence. If you deny location permission, those features remain unavailable and the App will not access your location.

Photos & Files (User-Initiated)

  • Profile photo upload: If you choose to select a photo (or capture via camera), we access only that item to upload and set your profile image.
  • Report downloads: When you export or download reports (e.g., PDF/Excel), we write the file to your device’s storage so you can access it later.

We do not scan your entire media library and we do not access other files unrelated to the action you take.

Crash & Diagnostic Data

We use Firebase Crashlytics to receive crash reports and technical diagnostics (e.g., device/OS info, App version, timestamps). This helps us fix bugs and improve reliability. Crashlytics does not include your passwords or the content of your communications.

Push Notifications

With your consent (required on Android 13+), we use Firebase Cloud Messaging (FCM) to send notifications (e.g., important alerts). FCM uses a random device token to deliver messages; it isn’t your phone number or IMEI. You can disable notifications anytime.

Server Logs

When the App communicates with our backend, our servers log technical details such as IP address, request timestamps, and error traces. We use these logs for troubleshooting, security, and service reliability.

2) How We Share Information

We do not sell or rent your personal data. We share information only in these cases:

  • Service providers: We use trusted vendors strictly to provide the App (e.g., Google Firebase for Crashlytics/FCM; Google Maps via React Native Maps; optional geocoding and SMS delivery providers). They may process limited data on our behalf and under their own privacy terms.
  • Legal & safety: We may disclose information when required by law or to protect rights, safety, or the integrity of our services.
  • Business transfers: If we undergo a merger, acquisition, or asset sale, your information may be transferred subject to this Policy.
  • With your consent: We will ask before sharing your information in any way not covered above.

3) Data Security

We apply industry-standard safeguards to protect information in transit and at rest:

  • All App–server communications use HTTPS (TLS).
  • Servers and databases are protected by access controls and firewalling; sensitive data (e.g., passwords) are hashed or encrypted.
  • Only minimal data is stored on-device; most data is kept server-side.
  • We regularly update software and monitor for suspicious activity.

No method of transmission or storage is 100% secure. We continuously improve our controls to reduce risk.

4) Your Choices & Rights

  • Access & correction: You can view and update profile details in the App (where available) or by contacting us.
  • Permissions control: You can grant/deny permissions (Location, Camera/Photos, Notifications) and later change them in Android Settings. If denied, related features will be disabled.
  • Notifications: Turn notifications off in the App or in your device settings anytime.
  • Account & data deletion: You may request deletion of your account and associated personal data. We will complete deletion within a reasonable period, subject to legal or operational retention requirements (e.g., backups, fraud prevention).
  • Consent withdrawal: If we rely on consent for a process, you may withdraw it at any time.

5) Children’s Privacy

The App is not directed to children under 13 (or the age of digital consent in your region). We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us and we will remove it.

6) Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you (e.g., in-App notice) and update the “Last updated” date above. Please review this page periodically.

7) Contact Us

Questions or requests about this Policy or your data?

Email: app.tracetrack@gmail.com