Legal

Privacy Policy for PathXplorer

Last updated: July 13, 2026

Introduction

PathXplorer ("we," "our," or "app") is built privacy-first: no account, no ads, no selling of data — ever. Your tracks, photos and statistics are recorded and stored on your device, and by default they stay there.

Some features do need to send data off your device to work — weather needs your coordinates, group tracking needs your position, an SOS alert needs to reach your contacts. This policy describes exactly what leaves your device, when, to whom, and how you control it.

The short version

Device Permissions

PathXplorer requests certain device permissions to provide its features. You control each of them and can revoke them at any time through your device settings; the app keeps working with reduced features if a permission is denied.

Data Stored on Your Device

PathXplorer stores the following locally on your device — and nowhere else:

You can delete all of this at any time by clearing the app's data in your device settings or by uninstalling the app.

Features That Send Data Off Your Device

Each feature below sends only the minimum data needed, only while you use it. All connections are encrypted in transit (HTTPS/TLS).

Maps — OpenStreetMap

Map tiles are downloaded from OpenStreetMap servers as you pan and zoom. Standard network requests occur, but no personally identifiable information is sent. You can cache maps for offline use. See the OpenStreetMap Foundation Privacy Policy.

Weather — WeatherAPI.com

When weather features are enabled, your current coordinates (latitude and longitude) are sent to WeatherAPI.com to retrieve local conditions — roughly every 15 minutes while the app is active. No identifiers or personal data accompany these requests, and the weather data received is stored only on your device. You can disable weather in the app settings. See WeatherAPI.com's Privacy Policy.

Addresses, Destination Search & Routing — Nominatim and OpenRouteService

When you use the Nearest Address tile, search for a destination, or plan a route, your coordinates (and the search text you type) are sent to the OpenStreetMap Nominatim geocoding service and/or OpenRouteService to resolve addresses and compute routes. These lookups happen only when you use those features, carry no identifiers, and their results are cached on your device so repeat lookups can be answered offline.

Live Group Tracking — our server

Group tracking is OFF by default. When you choose to join a group, the following is sent to our server over an encrypted connection: the group name, the nickname you picked, a random device identifier (generated by the app — not tied to your identity), and your live position while sharing is on. This is relayed to the other members of your group so you can see each other on the map.

Group positions are ephemeral. They exist on the server only while you are connected and are deleted when you disconnect or stop sharing. There is no history, no account, and nothing to delete afterwards — leaving the group is the deletion.

SOS Emergency Alerts — our server

The SOS feature sends an alert only when you deliberately trigger it (press-and-hold plus confirmation — it cannot fire by accident). You choose in advance exactly what an alert may include:

To deliver the alert, the selected content and the email addresses of your chosen emergency contacts (up to three, entered by you) are transmitted to our server, which sends the alert email and then does not use this data for any other purpose. Your contacts' addresses are stored on your device, not on our server. If Wi-Fi is blocked, the alert automatically retries over your cellular connection. Once delivered, the alert lives in your contacts' inboxes like any email you might send them.

Google Play services

Crash Reporting

PathXplorer uses Firebase Crashlytics (a Google service) so we can find and fix crashes. If the app crashes, a report is sent containing technical details (device model, Android version, app version, what the code was doing) and device identifiers used to group reports. These reports contain no tracks, no photos and no location history. Crash data is handled by Google under the Firebase privacy documentation and retained per its policy.

Separately, the app keeps a diagnostic log on your device. It is sent to us only if you explicitly choose to send it from the Settings menu — typically when we're helping you troubleshoot.

What We Never Do

Your Rights and Choices

Because we hold no account or database about you, there is nothing for you to request a copy of and no account to delete — you already have direct control over all of it.

Children's Privacy

PathXplorer requires no account and collects no profile information, and is suitable for users of all ages. Parents should be aware that the group tracking and SOS features, when deliberately used, share the device's location as described above.

Changes to This Policy

When the app gains features that change how data is handled, this policy will be updated and the "Last updated" date at the top revised. Significant changes will also be highlighted within the app.

Contact Information

If you have questions about this Privacy Policy, please contact:

This privacy policy reflects our commitment to transparency and to giving you control over your data while using PathXplorer.