Privacy Policy
Summary
- No account. Your trips, settings and history are stored only on your device; we run no servers that receive your data.
- Location is used only while the app is open and only if you allow it, to show your position and track your trip. It is never stored or sent to us and the app has no background location.
- To plan routes and show weather, the app sends the addresses you type and route coordinates (and, with permission, your location) to the third-party services in section 3.
- The app uses Google Analytics for Firebase (usage statistics) and shows ads through Google AdMob, which may use the advertising ID.
- We do not sell your data. The app is not directed to children under 13 (or under 16 where local law sets a higher age).
This Privacy Policy explains how TripCast ("the app", "we"), developed by GM DevHub, handles information when you use the app on Android or iOS. It is written to be consistent with the Google Play Data Safety form, the Apple App Privacy details, the EU/UK GDPR and Türkiye's Law No. 6698 (KVKK).
1. Who we are (data controller)
GM DevHub is the developer of the app and the data controller for the data described here. Email: info@gmdevhub.com.tr · Web: gmdevhub.com.tr.
2. Information the app processes
2.1. Location data (optional, only while the app is in use)
Location disclosure. If you grant location permission (precise or approximate), TripCast uses your device's location to:
- fill the departure field via "Use my current location",
- display your position on the map,
- power live trip tracking: progress along the route, arrival detection at waypoints, off-route detection and automatic recalculation, estimated arrival times based on your actual driving speed, and weather updates for upcoming points on your route.
Location is accessed only while the app is open and in use, with the system permission you grant. The app does not collect, store or transmit your location history to us. The Android build does not request background location permission; on iOS only "While Using the App" access is used. While you use these features, coordinates are sent to the routing and weather providers in section 3 so that they can return a route or forecast. If you deny the permission, you can still plan trips by typing addresses. You can withdraw the permission at any time in your device settings.
2.2. Trip details you enter
Origin and destination addresses, intermediate stops, departure date/time and transport mode are sent to the geocoding and routing providers below to calculate your route. These requests are transient: the providers return a route and the result stays on your device.
2.3. Data stored on your device
The following is stored locally and is never sent to us:
- Trip history (local SQLite database): origin, destination, transport mode, departure/arrival times, distance, duration and the weather recorded at the time.
- Settings: language, light/dark theme, temperature unit, notification preferences, quiet hours, deviation tolerance, refresh and break-reminder intervals.
- Caches: geocoding results, weather data (kept for up to 2 hours), the last planned route and API usage counters.
You can delete individual history entries or the whole history inside the app. Uninstalling the app removes all locally stored data.
2.4. Sharing and navigation (only when you tap)
If you tap "share location" or "share ETA", the app builds a message (including a Google Maps link with your current coordinates, for the location share) and opens the system share sheet; you choose the recipient. "Open in Google Maps" opens Google Maps with your origin and destination. Nothing is shared unless you start it.
2.5. Usage statistics (Google Analytics for Firebase)
The app includes the Firebase Analytics SDK, enabled by default, to understand how the app is used and to improve it. It collects, pseudonymously:
- a randomly generated app-instance ID (reset when you reinstall the app);
- events such as first open, app open, session start and engagement time;
- device and app information: model, operating system and version, language, app version, install and update events;
- approximate location (country/city) derived from your IP address. Google Analytics does not log or store IP addresses. The app does not send your GPS location to Analytics;
- where available and permitted by your device settings, the Advertising ID.
Google acts as our processor (Google Ireland Limited for the EEA, UK and Switzerland; Google LLC elsewhere). Event-level data is kept for at most 14 months. Details: firebase.google.com/support/privacy. How to opt out: there is no in-app switch; email us, or limit/delete your advertising ID in your device settings, or uninstall the app, which stops all collection.
2.6. Advertising data (Google AdMob)
TripCast shows banner and native ads provided by Google AdMob. AdMob may collect and process:
- device identifiers and the advertising ID (GAID on Android),
- IP address and coarse location derived from it,
- device and app information,
- ad interactions and impressions.
This data is collected by Google under its own privacy policy to serve and measure ads, prevent fraud and, where allowed, personalize ads. On Android the app declares the advertising-ID permission; you can reset or delete the advertising ID or turn off personalization in Settings > Google > Ads. iOS: TripCast does not request App Tracking Transparency permission and does not access the IDFA, and does not track you across other companies' apps or websites as defined by Apple.
2.7. Notifications and voice alerts
Weather alerts, arrival, off-route and break-reminder notifications are generated locally on your device. The app does not use push notifications. Voice alerts are spoken by your device's text-to-speech engine; no audio is recorded or transmitted.
3. Third-party services
To provide its features, the app contacts the following services over HTTPS. Each request necessarily includes your IP address:
| Service | Purpose | Data sent | Policy |
|---|---|---|---|
| OpenStreetMap - Nominatim (nominatim.openstreetmap.org) | Address autocomplete, geocoding, reverse geocoding | Address text you type, coordinates to look up | osmfoundation.org/wiki/Privacy_Policy |
| OSRM (router.project-osrm.org) | Route and travel-time calculation | Origin/destination/waypoint coordinates, transport mode | project-osrm.org |
| OpenStreetMap tile servers (tile.openstreetmap.org) | Map display | Requested map tile coordinates | osmfoundation.org/wiki/Privacy_Policy |
| RainViewer (api.rainviewer.com, tilecache.rainviewer.com) | Precipitation radar overlay | Requested radar tile coordinates | rainviewer.com/privacy-policy |
| OpenWeatherMap (api.openweathermap.org) | Weather and forecasts for destination and route points | Coordinates and estimated arrival times | openweather.co.uk/privacy-policy |
| Google Maps Platform (Geocoding & Directions APIs) | Optional routing provider (when enabled) | Addresses you type, coordinates | policies.google.com/privacy |
| Google AdMob | Banner and native ads | See section 2.6 | policies.google.com/privacy |
| Google Analytics for Firebase | Usage statistics | See section 2.5 | firebase.google.com/support/privacy |
| Google Fonts | Inter typeface, downloaded on first use | Standard font request | policies.google.com/privacy |
4. What we do not do
- No user accounts or registration.
- No crash-reporting service.
- No developer servers: we never receive or store your trips, addresses or location ourselves.
- No sale or sharing of your data for marketing purposes.
- No background location access.
- No tracking across other companies' apps or websites.
5. Why we process data and legal bases
| Purpose | Legal basis (GDPR / KVKK) |
|---|---|
| Route planning, weather, map display, trip tracking | Performance of the service you request (GDPR Art. 6(1)(b); KVKK Art. 5/2-c); location: your consent through the device permission (GDPR Art. 6(1)(a); KVKK Art. 5/1) |
| Local notifications | Consent through the device notification permission |
| Usage statistics (Firebase Analytics) | Legitimate interests in improving the app (GDPR Art. 6(1)(f); KVKK Art. 5/2-f); you may object |
| Advertising | Legitimate interests in funding the free app; you can limit personalization in device settings |
6. Permissions used
- Location (while in use; precise or approximate): current location, map position, live trip tracking.
- Notifications: local weather and trip alerts (Android 13+ asks for permission; iOS asks on first use).
- Internet: required to load routes, weather, maps and ads.
7. Sharing, sale and international transfers
We do not sell your personal data. California residents: under the CCPA/CPRA we do not "sell" personal information; AdMob may use advertising identifiers to serve ads, which some laws treat as "sharing" for advertising. You can opt out by limiting ads personalization in device settings or by emailing us. We do not use sensitive personal information (including precise location) to infer characteristics about you; precise location is not sent to us. The third-party providers above may process data on servers outside your country (for example in the USA or EU) under their own safeguards, such as Standard Contractual Clauses, in line with KVKK Art. 9. All connections use encrypted HTTPS.
8. Data retention
- Trip history and settings: kept on your device until you delete them in the app or uninstall.
- Caches: expire automatically (weather data after 2 hours) and are overwritten.
- Analytics event data: at most 14 months at Google.
- Other third parties: retention is governed by each provider's own policy (see links above).
9. Your rights and deletion
We hold no account or server-side profile about you, so there is no account to delete: delete your history or uninstall the app to remove local data. Under GDPR (where it applies to you), KVKK Art. 11 and similar laws you may ask whether data about you is processed, request access, correction, deletion or restriction, object to processing based on legitimate interests, and withdraw consent. To have analytics data linked to your device removed, email info@gmdevhub.com.tr; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr) or the authority in your EU/UK country of residence. For data held by Google or the other providers, use their own tools.
10. Children's privacy
TripCast is not directed at children under 13 (or under 16 where your country sets a higher digital consent age) and does not knowingly collect personal data from them.
11. Security
All connections use HTTPS. Trip data stays in the app's local storage on your device. No method of transmission or storage is 100% secure.
12. Changes to this policy
We may update this policy when the app's features change. The "Last updated" date at the top (5 November 2026) reflects the current version. Continued use of the app after an update means you accept the revised policy.
13. Contact
GM DevHub
Email: info@gmdevhub.com.tr
Web: gmdevhub.com.tr