Privacy Policy

Last updated: draft, pending legal review

1. The short version

MyTrackers is self-hosted software running on hardware you own, in your own home. Your location data, device data, and account data are stored on that device, not on any server we operate. We ("we," "us," the manufacturer/seller of this product) do not have a central database of customer locations, and in normal operation we never see your data at all.

2. What data the software collects, and where it's stored

All of the following is stored exclusively in a local database on your own home device, under your own control:

• Location data: GPS coordinates, or an approximate cell-tower/WiFi-derived position when GPS is unavailable (e.g. indoors), reported periodically by your tracker device.
• Device data: a device identifier (derived from the tracker's hardware MAC address), battery level, and signal/connectivity diagnostics.
• Account data: your dashboard login credentials (password hashed, never stored in plain text), and session metadata (IP address, browser user-agent) for security purposes such as letting you review and revoke active sessions.
• Optional address lookups: if you enable OneMap (Singapore) reverse-geocoding, your device's coordinates are sent to OneMap's API to resolve a human-readable address. No other identifying information is sent.
• Optional cell/WiFi positioning: when GPS is unavailable, nearby cell tower and WiFi access point identifiers are sent to Google's Geolocation API to estimate a position. No other identifying information is sent.

None of this data is sent to us, sold, or shared with advertisers. We have no visibility into any individual customer's location history under normal operation.

3. Google user data (optional Google Drive backup)

The dashboard offers an optional feature to back up your tracker database to your own Google Drive, so you have a copy if your home device is ever lost or damaged. If you choose to enable this:

• We request the drive.file scope only — the narrowest scope Google offers. This means the app can only see and manage files it itself creates (your encrypted backup archive), and has no access to any other file in your Google Drive.
• The backup is your tracker database, encrypted before it ever leaves your home device.
• The OAuth refresh token used to perform backups is stored locally, on your own home device, in the same self-hosted database as everything else — it is never transmitted to or stored by us.
• Your Google user data is used solely to upload/list/restore your own backup file, and for no other purpose — not for advertising, not for analytics, not shared with any third party.
• You can revoke this access at any time, either from the dashboard's Backup panel (disconnect), or directly from your Google Account permissions page.

MyTrackers' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Third parties involved in normal operation

• Cloudflare operates the secure tunnel and DNS that let your dashboard be reachable from outside your home network without opening any ports on your router. Cloudflare can see encrypted connection metadata (as any network operator between you and your home device can) but not the contents of your data.
• OneMap and Google Geolocation API, described in Section 2, only if you've enabled those optional features, and only receive the minimum data (coordinates, or nearby cell/WiFi identifiers) needed to do their one job.

5. Data retention and deletion

Because everything lives on hardware you own, retention is entirely in your control. Location history can be cleared from the dashboard's settings, and deleting a device removes its data from the database. Uninstalling the software or resetting your home device removes everything permanently — we have no separate copy to delete on our end, because we never had one.

6. Children's privacy

This product is not directed at children. A parent or guardian may use it to track a device carried by their own minor child, as described in our Acceptable Use Policy — that use is between you and your family, not something we have visibility into.

7. Changes to this policy

If this policy changes, the updated version will be posted at this same address with a new "last updated" date.

8. Contact

Questions about this policy can be sent to support.mytrackers@gmail.com.