Privacy Policy

Last updated: July 18, 2026

REITrack ("the App") is a private GPS tracking application for Android, published by Rootcastle Engineering & Innovation. This privacy policy explains what data the App collects, how it is used, and your rights regarding that data.

Data Collection​

Location Data​

The App collects the following location-related data when tracking is active:

• GPS coordinates (latitude, longitude)
• Altitude
• Speed
• Bearing (direction)
• Accuracy
• Timestamp

Device Data​

The App also collects:

• Battery level (0-100%)
• Battery status (charging, unplugged, full)

Geofence Data​

If you create pause zones (geofences), the App stores zone names, coordinates, radii and per-zone settings (enabled state, tracking pause, WiFi pause, motionless pause, motionless timeout, heartbeat enabled, heartbeat interval and entry/exit notifications) in the local database.

Condition Monitoring​

When tracking profiles are enabled, the App monitors charging state, car mode (Android Auto) and GPS speed derived from location updates to automatically switch tracking configurations. These condition states are transient and are not stored in the database. The name of the currently active pause zone is persisted across service restarts to maintain continuity but is cleared when the zone is exited.

Sensor Data​

When motionless pause is enabled for a geofence zone or a stationary tracking profile is active, the App reads the device's accelerometer (in low-power batched mode) and significant motion sensor to detect motion. Raw sensor values are processed in real time on-device and are never stored or transmitted.

Network State​

When WiFi pause is enabled for a geofence zone, the App monitors whether the device is connected to an unmetered network (WiFi or Ethernet). Only the connection type is checked - no network names, SSIDs or IP addresses are collected or stored.

All data is stored locally on your device. Nothing is transmitted unless you create a REITrack Cloud account and switch on Cloud sync. The App does not collect personal identifiers, advertising IDs, device identifiers (IMEI, serial number), usage analytics, telemetry, or crash reports.

Data Storage​

Collected data is stored in a local SQLite database on your device. The data is not accessible to other apps. The App checks available device storage before downloading offline map packs.

If you configure auto-export, the App will write export files (CSV, GeoJSON, GPX, or KML) to a directory you select on your device. No data leaves your device as part of this process.

If you enable persistent file logging in Logging -> File, the App writes diagnostic log entries (which may include location coordinates and other sensitive information) to a private file in app storage. The file is removed when the App is uninstalled. Logs are never sent automatically; sharing them requires explicit user action via the "Export log file..." flow.

Importing Data​

You can import location history from external files (GeoJSON, Google Timeline, GPX, KML, CSV) into the local database. The file is read from a location you select via the Android document picker; nothing leaves your device during import. If you opt in to "Import + Queue for Sync", imported rows are enqueued for upload to REITrack Cloud like any other location data — only when Cloud sync is on.

Encrypted Backups​

You can create a password-encrypted backup containing your location history, geofences and settings. The password is never stored; if you lose it, the backup cannot be recovered, and a weak password weakens the protection.

Backups are written to a destination you choose via the Android file picker. If you pick a cloud-synced folder, the encrypted file leaves your device through that provider.

Restoring a backup overwrites the current database.

The App supports configuration via reitrack://setup deep links. These links carry tracking behaviour, geofences and tracking profiles only — never a destination for your data and never credentials, so a link cannot redirect your location history or hand over a secret. You must explicitly confirm before any configuration is applied.

You can also generate a setup link to share your own configuration (Settings -> Share Setup). Credentials and sync destinations are never included.

Data Transmission​

No location data is transmitted by default. It leaves the device only if you create a REITrack Cloud account and switch on Cloud sync.

• Data is sent over HTTPS to REITrack Cloud (Google Firestore). There is no setting that points the App at any other destination
• Each account can read and write only its own data, enforced by server-side security rules
• No analytics, tracking pixels, or advertising networks are used
• No data is shared with advertisers or analytics providers

Data Sharing​

REITrack does not sell or share your data. If you enable Cloud sync, your location data is stored in REITrack Cloud, which runs on Google Firebase — see below.

Third-Party Services​

Google Play​

The GMS variant of the App is distributed via Google Play, which may collect data according to Google's Privacy Policy. This is outside the App's control. The noGms variant has no Google dependency.

Map Tiles​

Map tiles are fetched while a map is on screen or when you download an offline pack, which means the tile provider receives your device's IP address and the map area you are viewing. Which provider depends on the build:

• gms builds use Mapbox, which also serves search, directions and map matching when you use those features
• noGms builds use OpenFreeMap, which requires no API token, so this variant contacts neither Google nor Mapbox

Downloaded tiles are cached in the App's local database for offline use.

REITrack Cloud (Google Firebase)​

If you create an account and enable Cloud sync, your email address, password hash and synced location points are handled by Google Firebase (Authentication and Firestore) under Google's Privacy Policy. Security rules restrict every read and write to your own account. Deleting your account removes this data. If you never enable Cloud sync, the App does not contact these services.

No Analytics​

The App contains no analytics tools, advertising frameworks or crash-reporting SDKs.

Data Retention​

Location data remains on your device until you delete it. You can:

• Export data in CSV, GeoJSON, GPX, or KML format
• Delete sent history
• Delete data older than a specified number of days
• Clear all data from the database

Your Rights​

Since all data is stored locally on your device, you have full control:

• Access: View all data in the app's Data Management screen
• Export: Export your data at any time in multiple formats
• Delete: Delete any or all data at any time
• Portability: Export your data freely, including as a full encrypted backup for device-to-device transfer
• Import: Bring location history from other apps or backups via file import (GeoJSON, Google Timeline, GPX, KML, CSV)

Permissions​

Children's Privacy​

The App is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy​

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

Contact​

For questions about this privacy policy, open an issue on GitHub.