Privacy Policy — TrackMaker Mobile App

1. Who we are

The TrackMaker app is developed and maintained by Geo Studio Technology Ltd. ("TrackMaker", "we"), registered in Brazil, at Rua Corcovado, 432 — Jardim América, Belo Horizonte/MG, 30421-389. Author and technical lead: Odilon Ferreira Junior.

Data Protection Officer (DPO — Brazilian LGPD Art. 41 / EU GDPR Art. 37): author (at) gpstm.com.

2. Principles

• We do not sell your data. Under no circumstances do we sell or share your location data with advertisers, data brokers, or third parties for marketing purposes.
• Your location data stays on your device. Tracks, waypoints and routes are stored locally and are only transmitted to our servers or to your computer when you explicitly request it.
• No tracking, no ads, no third-party analytics. The app does not contain advertising SDKs, cookies, or analytics tools.

3. Data the app collects

3.1 Location data (GPS)

While you use the app, we collect from your device's GPS sensor:

• Latitude, longitude and altitude
• Horizontal and vertical accuracy
• Speed and bearing
• Timestamp of each point
• Number of satellites in use

This data is recorded in the app's local, private storage on your device and forms your tracks, waypoints and routes. No data is sent to our servers automatically.

3.2 Auxiliary sensor data

When available and enabled by you (off by default), the app may use the following device sensors:

• Barometer — to refine the recorded altitude
• Accelerometer — to detect motion and orientation

These readings are processed locally and may be stored alongside your track points. They only leave your device if you export or synchronize those tracks.

3.3 Audio notes (optional)

You can record audio notes attached to waypoints. The microphone is used only while you are recording a note, at your request. Recordings are stored locally, in the app's private storage, and are not sent to our servers.

3.4 TrackMaker account and license (optional)

The app does not require registration or sign-in for basic use (map viewing). If you choose to activate a license — by signing in with email and password or by QR-code pairing — the app sends to our servers, over an encrypted connection:

• Your TrackMaker account email address;
• A non-reversible device identifier (a cryptographic hash), used to bind the license to this device;
• The device model and the app version.

In response, we deliver and store on the device a signed license file. This data is used exclusively to validate your license — never for marketing. Signing out removes the credentials and the license from the device.

3.5 Data we do NOT collect

The app does not collect:

• Contacts, calendar, SMS, call logs, photos, or browsing history
• Advertising ID (AAID), IMEI, or MAC address
• Biometric data
• Any camera data (the app holds no camera permission; photos attached to waypoints are taken by the system camera app, under its control)

4. Background collection

So that you can record a route with the screen off or while the app is in the background, TrackMaker uses an Android foreground location service. While this service is active:

• A persistent notification is shown in the status bar indicating that GPS is in use;
• Collection only begins after you manually start recording a track and continues until you stop it;
• You can stop recording at any time by tapping the "Stop" button in the app or on the notification.

The background location permission is used exclusively for this purpose. No collection happens without your prior action.

5. Internet access and our servers

The app communicates over the internet only with our own servers, operated by Geo Studio Technology Ltd., for: base-map catalog and downloads, license validation, and data synchronization with GPS TrackMaker for Windows. We do not use analytics providers, crash-reporting providers, or advertising networks. All requests are encrypted (HTTPS/TLS).

5.1 Data the app sends to our servers

• Map requests: the identifier of the map you chose to download and the app's standard identification (name and version). These requests are kept in server logs for a limited period, together with the associated IP address, solely for security and operational diagnostics.
• License validation (if you sign in): the data described in section 3.4.
• Desktop sync (only when you request it): the tracks, waypoints and routes you select are uploaded, encrypted in transit, to our cloud storage and are retained temporarily — within your account's storage quota — until they are downloaded by your copy of GPS TrackMaker for Windows or deleted by you. Alternatively, you can transfer your data over your local network or by file, without our servers.

5.2 What our servers do NOT do

• We do not build usage profiles from your tracks;
• We do not sell, rent, or share transmitted data with third parties;
• We do not correlate IP logs with personal identities;
• We do not use tracking cookies;
• We do not serve advertising.

6. Base maps

The vector maps shown in the app are pre-generated from OpenStreetMap data and distributed as map files downloaded from our servers only when you request them. These files contain no personal information and do not track your position.

Map data © OpenStreetMap contributors, available under the Open Database License (ODbL).

7. Android permissions

The app requests only the permissions strictly necessary for it to work:

• Location (including background) — obtain your GPS position to record tracks, mark waypoints and display your position on the map; background collection happens only during a recording you started (see §4);
• Notifications — display the persistent notification of the recording service;
• Microphone — record audio notes attached to waypoints, only while you are recording a note;
• Internet — download maps, validate your license and synchronize your data when you request it.

All sensitive permissions are requested in context, when you first use the corresponding feature, and can be revoked in Android settings.

8. Data retention

• On the device: tracks, waypoints, routes, audio notes and the license file remain on the device until you delete them. Uninstalling the app permanently deletes all local data.
• Server logs (§5.1): retained for a limited period and then automatically discarded.
• Cloud sync data (§5.1): retained temporarily, within your account's quota, until delivered to your computer or deleted by you.
• Account/license data: kept for as long as your TrackMaker account exists; you may request deletion via the DPO email.

9. Your rights

As a rule, the app does not automatically transmit your personal data to our servers: tracks and waypoints remain on the device, and map-download request logs have limited retention (see §5.1). Regardless, applicable laws grant you the following rights:

9.1 LGPD (Brazilian Law No. 13.709/2018)

• Confirmation that processing exists;
• Access to the data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of data;
• Portability;
• Deletion of data processed with consent;
• Information about data sharing;
• Withdrawal of consent.

9.2 GDPR (EU Regulation 2016/679 — users in the European Union)

• Right of access, rectification, and erasure (Art. 15–17);
• Restriction of, and objection to, processing (Art. 18, 21);
• Data portability (Art. 20);
• Right to lodge a complaint with a supervisory authority.

9.3 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, the right to delete personal information, and the right not to be discriminated against for exercising these rights. We do not sell personal information.

To exercise any of these rights, email author (at) gpstm.com.

10. Children

The app is not directed to children under 13 and does not knowingly collect personal data from this age group. If you believe a child has provided us with personal data, please contact us so we can act.

11. Security

Collected data is stored in the app's private storage area on the device, inaccessible to other apps. All communications with our servers use encryption (HTTPS/TLS). We recommend that transfers to the desktop be performed on a trusted Wi-Fi network.

12. Changes to this policy

We may update this policy to reflect new features or legal requirements. The effective date at the top of the document is always updated. Significant changes will be announced within the app.

13. Contact

Geo Studio Technology Ltd.
Rua Corcovado, 432 — Jardim América
Belo Horizonte — MG — 30421-389 — Brazil
Phone: +55 31 3373-9001
Email: author (at) gpstm.com