Who we are
Fitstrail is operated by Appgea and Furkan Kaynar. Contact devappgea@gmail.com for privacy questions and requests. This page describes Fitstrail 3.0.0 and later. Store rollout is gradual; this page does not confirm that your installed app has updated. Earlier versions may continue the earlier advertising, Analytics and diagnostic collection described below until you install the current version. Updating does not erase information already received by providers.
Health and local progress
With your permission, Fitstrail reads your step count from Apple HealthKit or Google Health Connect. Motion sensors help count steps. Step length, optional weight, steps and walking progress support roads, journeys, visas, the passport, calorie estimates and history. Health permissions can be revoked in your device settings.
Health records and your entered weight are stored locally. Health values never leave the device through analytics, crash reporting or purchases. Steps, weight, walking distance, activity days, streak values and route progress cannot appear in an event name, an event parameter or a crash report. The app enforces this in code: only a fixed list of non-health labels may be sent, numeric values are discarded, and numbers are removed from diagnostic messages before they are recorded.
Maps and network features
Road positions are calculated from walking progress. Fitstrail does not ask for your location. Map tiles come from OpenStreetMap's tile servers. Postcard pictures load from an image server. Route content and configuration also require network requests. These services receive connection information such as IP addresses and the requested resources. Social apps receive information when you share to them.
Purchases
Journeys are sold as visas, one-time in-app purchases. Apple's App Store or Google Play takes the payment. We never see your card or payment details. RevenueCat, our purchase provider, receives the purchase record: the product, price and currency, store country, store transaction details, a random customer identifier created by the app, app and device information such as app version and operating system, and connection information such as the IP address. We use it to open the journey you bought, to finish a purchase that was interrupted, and to see sales and refund totals. No name, email address or health value is sent to RevenueCat. A visa is kept on this device with your roads and passport.
Analytics and diagnostics
Usage analytics and crash reports are optional. You > Data & Privacy holds two switches, Usage analytics and Crash reports, and each can be changed at any time.
Fitstrail does not use your location to set them. It reads your phone's region setting and time zone. Phones set to the EEA, the United Kingdom or Switzerland start with both switches off, and so do most phones on European time. When the app cannot tell, they start off. Elsewhere they start on and you can turn them off. Nothing is collected while a switch is off. Collection is disabled at every app start until your stored choice is loaded, so a launch before the choice is known sends nothing.
With Usage analytics on, Firebase Analytics receives which screens and features you use, plus the device and app information the SDK collects, such as app version, device model, operating system version, country and a Firebase installation identifier. Only a fixed list of non-health labels may accompany an event, for example a route identifier or a language code. No health value and no custom user property is sent. Turning the switch off stops collection and resets the analytics data held on the device.
With Crash reports on, Firebase Crashlytics receives crash and error diagnostics: stack traces, device and operating system information, app version and a Crashlytics installation identifier. Numbers are stripped from diagnostic messages and error descriptions before they are recorded, so no health value can travel with a report. Turning the switch off stops collection and deletes reports that have been captured but not yet sent.
Firebase Remote Config provides configuration and may process installation and connection information.
No ads and no tracking
Fitstrail 3.0.0 has no ads. It does not ask for tracking permission and does not collect advertising identifiers. Analytics data is not used for ad personalization. Versions before 3.0.0 showed ads from Google AdMob, with Google's User Messaging Platform for consent. Those versions may still process IP addresses, approximate location, device and advertising identifiers, ad interactions and privacy selections until you update.
Sharing and retention
When you choose to share a postcard, a stamp or a progress image, the destination app or recipient receives its visible content. Check that content before sharing. Local app data remains until removed or the app's storage is cleared. Device backups and exported copies can remain separately. Revoking Health permissions does not remove existing records from Apple Health, Health Connect or Fitstrail's local storage. Purchase records held by Apple, Google and RevenueCat follow their retention policies.
Earlier collection and your requests
Earlier versions enabled Analytics and crash reporting by default. Some events contained step totals, exact weight and other activity metrics. Those payloads were stopped in version 2.2.2 and cannot return: the optional switches described above use new storage keys, so a choice saved by one of those earlier versions is never reused. Stopping the payloads does not erase data already received by providers. Contact devappgea@gmail.com to request access, correction or deletion of earlier data. We will review what can be located and any retention requirements. Provider-held data follows the provider's retention policies.
Providers
Google Firebase, Google Play, and Google AdMob in versions before 3.0.0: https://policies.google.com/privacy Firebase privacy information: https://firebase.google.com/support/privacy RevenueCat: https://www.revenuecat.com/privacy Apple: https://www.apple.com/legal/privacy/ OpenStreetMap: https://osmfoundation.org/wiki/Privacy_Policy Social sharing destinations apply their own privacy policies. Providers may process data outside your country.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion or portability, object to or restrict processing, withdraw consent and complain to your privacy authority. Contact devappgea@gmail.com. Withdrawing consent does not itself erase earlier data. We do not sell your personal information for money.
Children, security and updates
Fitstrail is not directed at children under 13, or under 16 in the EEA and UK. Contact us if you believe a child provided personal information. We use reasonable safeguards but cannot guarantee absolute security. We will publish privacy changes here. Using the app does not replace consent where consent is required.