GPS Stats

Privacy Policy — GPS Stats

Last updated: 1 June 2026

This Privacy Policy explains how GPS Stats handles your data. The data controller is Joanna Bednarczyk, independent developer, Switzerland, operating under the trade name “Studio Volt”. Contact: contact@studiovolt.dev.

1. Your Data Stays on Your Device

GPS Stats stores all tracking data (GPS coordinates, speed, altitude, session history, personal records) locally on your device in an on-device database. This data never leaves your device unless you explicitly choose to share it using the Share feature.

There are no user accounts, no logins, and no cloud storage. We do not operate any servers that receive your data.

2. What the App Uses from Your Device

During tracking sessions, the app reads data from your device's built-in sensors:

• GPS (location, speed, heading)
• Barometer (atmospheric pressure, if available)
• Accelerometer and gyroscope (G-force, if available)

This data is used only to display your metrics and is stored only on your device.

Legal basis (GDPR Art. 6(1)(b)): performance of the app you have requested. Purpose limitation (Art. 5(1)(b)): sensor data is processed solely to display real-time metrics and record sessions you have chosen to record. Data minimisation (Art. 5(1)(c)): we read only the sensor channels necessary for the metrics shown on the active screen.

3. Crash Reports (Sentry)

To improve the app and fix bugs, we use Sentry for anonymous crash reporting. When the app crashes, the following technical data is sent:

• Device model and OS version
• App version
• Error details (stack trace)

Crash reports do NOT include your GPS data, speed, location, personal records, display name, IP address, or any other personal information. Our Sentry configuration explicitly disables collection of any personally identifiable information.

We collect crash data solely to make the app better. We do not sell this data.

Sub-processor: Sentry is operated by Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, acting as a data processor under a Data Processing Addendum (DPA). Crash report data may be processed on servers located in the United States.

International transfer mechanism: Functional Software, Inc. is an active participant in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework. You can verify Sentry's certification on the U.S. Department of Commerce DPF list at dataprivacyframework.gov. Where the DPF does not apply, transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission. For details, see Sentry's Privacy Policy.

4. Map Tiles (Mapbox)

To display maps for visualising your routes, GPS Stats uses Mapbox. When you view the map screen, your device requests map tiles from Mapbox. Each request transmits:

• Your IP address (used by Mapbox to deliver tiles)
• Device model, OS version, App version

Mapbox SDK telemetry is disabled in the app, so no anonymous usage analytics are collected by Mapbox beyond what is needed to serve tiles. No GPS coordinates, routes, personal records, or session data are sent to Mapbox.

Sub-processor: Mapbox is operated by Mapbox, Inc., USA, acting as a data processor under a Data Processing Agreement (DPA).

International transfer mechanism: Mapbox, Inc. is an active participant in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (certification ID 5640; current cycle through 13 November 2026). You can verify Mapbox's certification at dataprivacyframework.gov/participant/5640. Where the DPF does not apply, transfers are protected by Standard Contractual Clauses (SCCs).

Mapbox affiliate sub-processors. Mapbox engages a network of corporate affiliates for engineering, support, and operations. As disclosed on Mapbox's public sub-processor list, these affiliates include entities in the USA, UK, Poland, Japan, Germany, Finland, Canada, and Belarus (MapData OOO). Mapbox's affiliate operations sit within Mapbox's group-wide DPA and the Data Privacy Framework / SCCs referenced above. Studio Volt does not directly contract with any Mapbox affiliate and does not transfer GPS, route, or personal data to any Mapbox entity beyond the IP and device metadata required to serve map tiles.

For Mapbox's full data-handling, see the Mapbox Privacy Policy and the Mapbox DPF Notice of Certification.

5. Data Retention (GDPR Art. 5(1)(e))

We apply storage-limitation by category:

• Local data (GPS tracks, sessions, records, settings): Stored on your device under your control. You can delete any single session or all data at any time inside the app (Settings → Delete all data). Uninstalling the app removes all locally stored data. We have no access to this data, so we cannot delete it for you and we never retain copies.
• Crash reports (Sentry): Retained for up to 30 days (Sentry Developer plan retention), then automatically deleted by Sentry. We do not extend retention beyond 30 days.
• Map tile request logs (Mapbox): Retained by Mapbox under the Mapbox Privacy Policy. We do not store or have access to these logs.
• No other personal data is retained. GPS Stats does not maintain user profiles, account records, or backend logs.

6. Sharing

When you use the "Share" feature, you create an image (share card) that you can share via your phone's standard sharing options. This is entirely your choice and under your control.

7. Your Rights

Under Swiss data protection law (revFADP/nFADP), EU GDPR (Art. 15–22), UK GDPR, and other applicable laws you have the right to:

• Access: view all your data in the app (History and Records tabs)
• Erasure: delete any session or all data at any time inside the app; uninstalling the app removes all locally stored data
• Rectification: edit session names, categories, and personal records inside the app
• Object / restrict processing: disable crash reporting by contacting us; we will provide instructions to disable Sentry on your device
• Crash-report deletion: request deletion of crash report data by emailing us. We will process your request within 30 days (Sentry's automatic deletion cycle).
• Portability: export individual sessions via the Share / Export function in the app

If you reside in the EU/EEA, nothing in this policy or our Terms of Service affects your rights under mandatory consumer protection laws of your country of residence.

8. App Store Privacy

In accordance with Apple's App Store privacy requirements:

• Precise Location: Used for app functionality only — not linked to your identity, not used to track you across apps or websites
• Diagnostics (Sentry crash data, performance breadcrumbs, anonymous install ID): Used for app functionality only — not linked to your identity
• No other data types are collected

These declarations match the App Privacy section published on the GPS Stats App Store page.

9. Children

GPS Stats does not knowingly collect data from children under 16 (per EU GDPR Art. 8, with Poland implementing the higher age of 16). If you are a parent and believe your child is using the app and you would like data removed, contact us using the details below.

10. Changes

We may update this policy. The "Last updated" date will reflect any changes.

11. Contact

Email: contact@studiovolt.dev
Privacy contact: privacy@studiovolt.dev
Website: studiovolt.dev
Postal: Joanna Bednarczyk, Switzerland (full address provided on request to the privacy contact above)

If you believe your rights have been violated you may also lodge a complaint with:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
• EU/EEA: your local Data Protection Authority — edpb.europa.eu
• UK: Information Commissioner's Office (ICO) — ico.org.uk