Privacy Policy

1. Introduction

Welcome to Path Tracker ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

Please read this Privacy Policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of the App.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address and full name (optional). This information is stored securely in Supabase.
• Profile Data: Any additional profile information you choose to add to your account.
• Password: Your password is stored as a secure hash — we never see or store plaintext passwords.

2.2 Location Data

• GPS Coordinates: When you start a trip, we collect precise GPS coordinates (latitude, longitude, and timestamp) to trace your route.
• Background Location: With your explicit permission, the app continues to collect location data when running in the background or when the screen is off, using a foreground service (Android) or background location entitlement (iOS).
• Location is only collected during active trips. When no trip is running, no location data is collected or recorded.

2.3 Trip Data

• Trip start/end timestamps, route polyline, total distance traveled, duration, and average speed.
• This data is stored locally on your device using Hive (a local database) and optionally synced to Supabase if you have cloud sync enabled.

2.4 Technical Data

• Device type and operating system version (used for crash reporting and compatibility).
• App version information.
• We do NOT collect advertising IDs, IMEI, or any persistent device identifiers.

3. How We Use Your Information

We use the information we collect in the following ways:

• To provide and operate the App: Processing your location data is essential to the core functionality of recording your trip routes.
• Account Management: To authenticate you and maintain your account.
• Cloud Sync: To securely back up your trip data to Supabase and enable access across multiple devices.
• App Improvement: To understand how users interact with the app and improve features.
• Security: To prevent fraud, abuse, and unauthorized access.
• Legal Compliance: To comply with applicable laws and regulations.

We do NOT: Sell your data to third parties, use your data for advertising targeting, share your location data with advertisers, or build profiles for commercial purposes.

4. Data Storage & Security

4.1 Local Storage

All trip and location data is primarily stored locally on your device using Hive, an encrypted local database. You maintain full control over this data.

4.2 Cloud Storage (Supabase)

If you use the cloud sync feature, your trip data is transmitted over HTTPS and stored securely in Supabase's PostgreSQL infrastructure. Supabase implements industry-standard security measures including:

• Encryption at rest (AES-256)
• Encryption in transit (TLS 1.3)
• Row-Level Security (RLS) — your data is only accessible by your authenticated account
• SOC 2 Type II compliant infrastructure

4.3 Password Security

Passwords are hashed using bcrypt via Supabase Auth. We have no ability to retrieve your plaintext password.

4.4 Data Retention

We retain your data as long as your account is active. You may delete your account and all associated data at any time from the Settings screen. Account deletion requests are processed within 24 hours.

5. Location Permission Details

Path Tracker uses the following location permissions:

• Location When In Use (iOS) / Coarse & Fine Location (Android): Required to show your position on the map and start a trip.
• Location Always (iOS & Android): Optional. Allows the app to continue recording your route if you minimize the app or lock your screen during a trip. You will be explicitly asked for this permission. You can deny it; the app will still work but may lose tracking when minimized.
• Notifications (Android 13+): Required to display the foreground service notification that keeps tracking active in the background. This is a system requirement for background location access on modern Android.

You can revoke any location permission at any time through your device Settings. Revoking location permissions will prevent the app from recording new trips but will not affect previously saved data.

6. Third-Party Services

Path Tracker integrates with the following third-party services:

• Google Maps Platform: Used to render maps and display routes. Subject to Google's Privacy Policy at policies.google.com/privacy. Google Maps may collect anonymized usage data per their standard policies.
• Supabase: Used for authentication and cloud data sync. Subject to Supabase's Privacy Policy at supabase.com/privacy.

We only share the minimum data necessary for these services to function.

7. Children's Privacy

Path Tracker is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at the address below and we will take steps to delete such information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request that we correct inaccurate data.
• Right to Deletion: Request deletion of your account and all associated data (available directly in the app via Settings → Danger Zone → Delete Account).
• Right to Portability: Request your trip data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent for location access at any time via device Settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will notify you through the App or via email. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: