Privacy Policy — SP GPS Tracker
SP GPS Tracker is a client for a tracking server you run. Your vehicle data lives on that server. The developer operates no server, receives nothing, and has no access to your account.
Applies to the iOS and Android app SP GPS Tracker. Last updated 4 September 2026.
The most important thing to understand
This app does not provide a tracking service. It signs in to a Traccar server that you or your organisation operates, and displays what that server already holds. Where your positions, trips and alerts are stored, how long they are kept, and who can see them are decided by whoever runs that server — not by this app and not by its developer.
If you are using someone else's server, ask them for their privacy terms. If you run your own, the data never leaves your control.
Data we collect
None. There is no developer-operated server, no analytics, no crash reporting, and no third-party SDK that could receive anything. We have no technical means to learn who uses this app or where any vehicle is.
What the app stores on your device
- The address of your server, and the email address you signed in with.
- An access token issued by your server. Your password is sent to your server once, at sign-in, and is never written to the phone. The token can be revoked on your server at any time without changing your password.
- A session cookie from your server, kept only because live updates require it.
- Your preferences: map style, units, appearance, alert settings.
- The most recent vehicle snapshot, so the map can draw immediately at launch, and the last known battery reading per vehicle.
- Any photograph you choose for a vehicle. These stay on the phone and are never uploaded — not even to your own server.
- Downloaded map tiles, cached to save data. Clearable in Settings.
Signing out deletes the token, the cookie and the cached snapshot. Deleting the app deletes everything above.
Where the app connects — the complete list
- Your Traccar server. Everything about your vehicles: positions, trips, zones, alerts, and account changes you make in the app.
- Map tile servers (OpenStreetMap, or Google's public tile endpoint, depending on the basemap you pick). These receive the map area you are looking at, as any map does. They do not receive your account, your identity, or which vehicle you are watching.
- nominatim.openstreetmap.org, OpenStreetMap's public reverse geocoder, used to turn a position into a street name — and only when your own server has no geocoder enabled. It receives a coordinate and nothing else: no account, no vehicle, no identifier. You can switch this off in Settings, after which the app sends coordinates nowhere except your own server.
There is nothing else. No analytics, advertising, or tracking endpoints exist in the app.
Your phone's own location
The app can draw your position on the map beside your vehicle, so you can walk back to it. This is entirely optional:
- Permission is requested only when you tap the locate button on the map — never at launch.
- Only while using the app. There is no background location capability at all, and the app is not able to follow you when it is closed.
- Your location is never transmitted. It is drawn on the screen and discarded. There is no code path in the app from your phone's position to the network — not to your server, and not to us.
Notifications
Alerts are local notifications, raised on the phone from data the app has already read from your server. There is no push service, and the app is not registered with Apple's or Google's push infrastructure. They are off by default, and permission is requested only when you turn them on.
Permissions
What we do not do
No analytics. No crash reporting. No advertising or ad identifiers. No tracking across apps or websites. No selling or sharing of data — we hold none to sell.
Children
The app is not directed at children and collects nothing from anyone.
Changes
Any change to this policy will be published on this page with a new date.