Privacy Policy — EasyTM App

1. Who we are

The EasyTM app is developed and maintained by Geo Studio Tecnologia Ltda. ("EasyTM", "TrackMaker", "we"), registered in Brazil, headquartered at Rua Corcovado, 432 — Jardim América, Belo Horizonte/MG, ZIP 30421-389. Author and technical lead: Odilon Ferreira Junior.

Data Protection Officer (DPO — LGPD Art. 41): author (at) gpstm.com.

EasyTM is a vehicle tracking service: it displays, on your device, the position and telemetry of the vehicles/trackers linked to your account, and lets you send commands to that equipment. To do so, the app communicates with our servers (or with the server of the provider you configure).

2. Principles

• We do not sell your data. We do not sell or share your data with advertisers, data brokers or third parties for marketing purposes.
• No ads. The app contains no advertising networks and the advertising identifier (AAID) is disabled.
• We collect only what is necessary to authenticate you, display your vehicles, deliver notifications and keep the app stable.

3. Data the app collects

Summary of the data collected and the purpose of each:

3.1 Account and authentication

Using EasyTM requires a login. To authenticate you and load your vehicles, the app sends your access credentials (username/e-mail and password) to our servers over an encrypted connection. These credentials are used solely to authenticate you and maintain your session.

3.2 Registration data

On the personal-data screen you can view and edit your account information, such as name, e-mail, phone and address (and, where applicable, a tax ID). This data is sent to our server only when you save it, and is used to manage your account and service agreement.

3.3 Device identifiers (for push notifications)

To send notifications about your vehicles' events (for example, speeding, ignition cut, geofence), the app registers on our servers a device identifier, together with the notification token and basic device information (manufacturer, model and OS version). This data links notifications to your device and is removed from the server when you log out.

3.4 Location

• Your device location (GPS): with your permission, the app accesses the device's position to show your location on the map relative to the vehicles and for navigation features. This position is used on the device itself and is not stored on our servers.
• Approximate location (analytics): Google Firebase services (see §5) may infer an approximate location (city/region level) from the IP address, for statistical purposes.

The positions of the tracked vehicles are not obtained from your phone: they are generated by the tracking devices installed in the vehicles and received from the server. This data belongs to your account and is shown only to you.

3.5 Usage, diagnostics and crashes

The app uses Google Firebase for:

• Analytics — usage statistics and in-app interactions, to understand which features are most used and improve them;
• Crashlytics — crash logs, so we can fix errors;
• Performance Monitoring — performance diagnostics data.

This data is used exclusively to analyze and improve the app.

3.6 Vehicle data and telemetry

As an essential part of the service, the app displays data from the vehicles/trackers in your account: position, speed, ignition, sensor and relay states, trip history (tracks), events and alerts. This data is processed and stored on our servers to provide the contracted tracking service.

3.7 Data we do NOT collect

• We do not read your SMS messages, contacts, calendar, calls, photos or browsing history. (Sending commands to a tracker via SMS, when available, opens the system's own messaging app, under your control.)
• We do not use the advertising identifier (AAID), IMEI or MAC address.
• We do not collect biometric data.
• We do not collect camera data (the app has no camera permission).
• We do not collect credit-card data: plan payments, where they exist, are processed by the app stores (Google Play / App Store) or a payment processor, not by the app.

4. How we use the data

• App functionality: authenticate you, load and display your vehicles, send commands to trackers and deliver push notifications.
• Analytics: understand app usage and improve it.
• Diagnostics: monitor stability and fix crashes.

5. Third-party services we use

We use services that act as data processors on our behalf:

• Google Firebase (Cloud Messaging, Analytics, Crashlytics, Performance Monitoring) — push notifications, usage analytics and diagnostics. See the Firebase privacy policy.
• Google Maps — map display and navigation. See the Google privacy policy.

These providers process data according to our instructions and their own policies. We do not share your data with third parties for their own use or for advertising.

6. Permissions

• Location — show your position on the map relative to the vehicles and support navigation;
• Notifications — receive alerts about your vehicles' events;
• Internet and network state — communicate with our servers.

Sensitive permissions are requested in context and can be revoked in the system settings. Revoking the location permission only disables showing your position — vehicle tracking keeps working, since it does not depend on your phone.

7. Security

All communications between the app and our servers use encryption (HTTPS/TLS). We apply appropriate technical and organizational measures to protect the data we process.

8. Data retention

• Account and registration data: kept while your account exists.
• Device/push identifier: removed from the server when you log out.
• Vehicle and trip data: retained according to the contracted tracking service.
• Analytics and diagnostics data (Firebase): retained according to Google Firebase policies.
• Local data on the device: removed when you uninstall the app.

9. Your rights and data deletion

Applicable law grants you the following rights:

9.1 LGPD (Law No. 13.709/2018 — Brazil)

• Confirmation of processing and access to the data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of data;
• Portability and information about data sharing;
• Withdrawal of consent.

9.2 GDPR (EU Regulation 2016/679 — users in the European Union)

• Access, rectification and erasure (Art. 15–17);
• Restriction of and objection to processing (Art. 18, 21);
• Data portability (Art. 20);
• Complaint to a data protection authority.

9.3 Account and data deletion

You may request the deletion of your account and associated data, or of specific data without deleting the account, through our contact page (trackmaker.com/contato/) or by e-mail at author (at) gpstm.com. We will handle the request within the timeframes set by applicable law.

10. Children

The app is intended for fleet and vehicle management by their owners or operators and is not directed to children. We do not knowingly collect personal data from children under 13.

11. Changes to this policy

We may update this policy to reflect new features or legal requirements. The effective date at the top of the document is always updated. Significant changes may be announced within the app.

12. Contact

Geo Studio Tecnologia Ltda.
Rua Corcovado, 432 — Jardim América
Belo Horizonte — MG — 30421-389 — Brazil
Phone: +55 31 3373-9001
E-mail: author (at) gpstm.com