◎ MY GPS — PRIVACY POLICY

Last updated: 6 September 2026 · Applies to the My GPS iOS app and mygps.uk

Who we are

My GPS is operated by AYDA Digital (United Kingdom) — the data controller for the purposes of UK GDPR. Contact: privacy@mygps.uk.

What we collect, and why

• Account details — your email address and name, received from Google when you sign in. Used only to identify your account. Signing in is optional; without an account everything stays on your device.
• Location data you choose to save — recorded tracks, saved places, geofence areas, and (while you have one running) live-share positions. Stored so your data syncs between your devices and the web app. Your live position is processed only while you are recording, sharing, or have a geofence active.
• Photographs you attach — pictures you choose to add to a saved place or an “I’ve been here” visit. Each one is reduced to under 100 KB on your device before it is sent, and is stored so the same photo appears on your phone and in the web app. They are held outside the public web root and are only ever served back to you, signed in as yourself — there is no link that shows one to anyone else. We do not analyse them, and no location is read from the image itself: a photo is filed against the place or visit you attached it to. Photos are only sent while you are signed in; without an account they stay on your device.
• Telegram chat ID — only if you link Telegram alerts, so our bot can message you. We never see or store your phone number.
• A session cookie (MYGPS_SESS) — strictly necessary to keep you signed in. No analytics or advertising cookies.

What we never do

• No advertising, no analytics trackers, no sale or sharing of your data with anyone.
• No tracking across other apps or websites.
• No background collection beyond the features you have switched on.

Where your data lives

On our private server infrastructure (IONOS). Data is transmitted over HTTPS only. Third parties involved: Google (sign-in), Telegram (alert messages, if you link it), and Apple/Google Maps (only when you choose to open or share a maps link).

Who can see your location

Only you — plus anyone you deliberately share with. A live-share link shows the location it covers to anyone who holds the link (including people it is forwarded to) until it expires or you stop it. Nobody else, including us, looks at your location data except to operate the service or when the law requires it.

Your account is protected only by your Google sign-in and your device. If someone else can unlock your phone or sign in as you, they can see your tracks, places and shares — we cannot detect or prevent that. Keep your device locked, turn on two-factor authentication for Google, sign out of the web app on shared devices, and stop any share you no longer want. If you suspect unwanted access, stop all shares, sign out everywhere, change your Google password and (if you wish) delete your account — deletion is immediate.

Security and its limits

Data travels over HTTPS and is held on access-controlled servers. No online service is perfectly secure and, because My GPS is free, we cannot guarantee that your data will never be lost, corrupted or accessed without authority. Export a copy of anything you would not want to lose (Account → Export my data).

How long we keep it

Until you delete it. Tracks, places and photographs can be deleted individually in the app or on the web — deleting a place or a day of visits deletes its photographs with it; your whole account (and every byte of your data) can be deleted in the app under Account → Delete account, with immediate effect.

Your rights

Under UK GDPR you can access, correct, export, or erase your data. The app provides export (Account → Export my data) and erasure directly. For anything else, email us — we respond within one month. You may also complain to the ICO (ico.org.uk).

Children

My GPS is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially, we will note it here with a new date.