AlarmFreeGPS Privacy Policy

Version 1.1 · effective from 16 November 2026

This is an English translation for convenience. If it differs from the Ukrainian version, the Ukrainian version prevails.

This Policy explains what data the AlarmFreeGPS app and its server (together — the "Service") collect, why, how long it is kept and what rights you have. The controller of personal data is the individual entrepreneur (FOP) Lazieikin Yevhen Heorhiiovych, individual tax number (RNOKPP) 3305500859, address: 19/4 vul. Veresneva, Hostomel, 08289, Kyivska obl., Ukraine (hereinafter — "we"). Questions about data: alarmfreegps.app@gmail.com.

We process data in accordance with the Law of Ukraine "On Personal Data Protection" and, for users from the European Union, also in accordance with the EU General Data Protection Regulation (GDPR).

1. In short

• We collect only what is needed to determine location, run your account, count trips and provide paid access.
• We do not store photos from the camera during your trips. The camera image is processed on your phone; only a numerical description of the frame is sent to the server.
• We do not receive your payment card details: payment is processed by Google Play, LiqPay or the App Store. We store only information about the purchase itself.
• Trip data is deleted after 30 days. Your account is deleted immediately when you ask for this in the app; purchase records are kept, unlinked from the account, for as long as the law requires.
• We do not sell data, do not show ads and do not track you in other apps.

2. What data we process

2.1. Account

• email address;
• password — only as an irreversible "hash" (we do not know the password itself);
• profile identifier (for example, U-2481-0376), date of registration and of last sign-in;
• which versions of the Terms of Use and of this Policy you accepted, and when.

2.2. Phone

• phone model, app version, which recognition model runs on it (on the GPU or the CPU), and the result of its self-test;
• a random identifier of the app installation;
• a hash of the Android system identifier (ANDROID_ID). The identifier itself does not leave the phone; the hash is needed only so that trial trips cannot be renewed by reinstalling the app.

2.3. Trips

• start and end time, distance travelled (in total and within the service area), number of frames, type of access (trial trip, single trip, subscription, etc.) and whether the trip was counted;
• during a trip, roughly once per second, the phone sends: a numerical description of the camera frame (computed on the phone; the photo cannot be restored from it), the phone's orientation from the motion sensors, the heading from the phone's compass, the GPS location if the phone has one, and the approximate location from the Wi-Fi or mobile network provided by Android;
• route points (from where and to where) and the location determined by the Service;
• technical data on how the app works: battery level, the phone's thermal state, frame processing time.

2.4. Photos

The app does not send photos from the camera to the server, only a numerical description of the frame (point 2.3). Camera photos are sent only by internal test accounts that we use ourselves to check how the Service works; this does not apply to user accounts.

2.5. Abuse protection

The IP address and email address are used to limit the number of sign-in attempts, codes and registrations. We store them only as irreversible keys (without the address itself) for no longer than 2 days.

2.6. Purchases

We do not receive or store your card number, expiry date or security code, or details of your Google or Apple account: payment is processed entirely by Google Play, LiqPay or the App Store. For each purchase we store:

• through whom it was paid (Google Play, LiqPay, App Store) and what was bought (plan, number of single trips);
• the purchase identifier by which we verify it with the store or LiqPay (Google Play purchase token, Apple transaction number or our LiqPay order number), and also its irreversible hash;
• the order or payment number assigned by Google, Apple or LiqPay;
• the purchase status (awaiting payment, paid, cancelled, refunded, etc.), the time of purchase, the end of the paid period, whether automatic renewal is on, the amount and currency, and whether it is a test purchase;
• the history of purchase status changes (when and from where we learned of a change: from the app, the store, LiqPay or during the daily check);
• the number of unused single trips on the account.

So that a purchase can be linked to your account specifically, the app passes a buyer identifier to the store — a random-looking code computed from the internal account number. It cannot be used to find out your email, name or profile identifier.

LiqPay payment notifications may also contain other information (for example, masked card digits, the bank, the payer's name). Of this, we use only what is listed above.

3. Why and on what basis

4. How long we keep data

• account and phone data — until you delete the account;
• trips and trip logs — 30 days, then deleted automatically;
• codes from emails — valid for 15 minutes, deleted after one day;
• unfinished registration (email not confirmed) — 7 days;
• number of trial trips used — with no time limit, but only as a number linked to an irreversible key of the phone;
• purchase records and their change history — while the account exists, and after it is deleted — unlinked from the account for 3 years (1095 days), as required by accounting and tax legislation, then deleted;
• number of unused single trips — while the account exists;
• database backups are refreshed and gradually remove old data.

5. Who receives the data

• the hosting provider whose servers the Service runs on;
• the email delivery provider — only your address and the text of the email with a code or notice;
• Google (Google Play) — if you buy through Google Play: the buyer identifier (point 2.6) and, to verify the purchase, its token. Google processes the payment, your Google account and payment data under its own privacy policy;
• LiqPay (JSC CB "PrivatBank") — if you pay through LiqPay: order number, plan, amount and currency. LiqPay processes the payment data you enter on the LiqPay page under its own rules;
• Apple (App Store) — once the iPhone app is available: the buyer identifier and the transaction number to verify the purchase. Apple processes the payment under its own privacy policy;
• map services that the app contacts directly: OpenFreeMap and OpenStreetMap (map tiles) and Nominatim (address search). They receive the phone's IP address, the map area being shown and the search text — in accordance with their own privacy rules;
• state authorities — only in the cases and in the manner provided by law (in particular, tax authorities).

There are no other recipients. Country where our servers are located: Ukraine.

Google and Apple process purchase data, among other places, outside Ukraine (in the USA, EU countries and elsewhere). LiqPay processes data in Ukraine. The data we pass to the stores is limited to what is listed above; it is passed in order to perform the contract with you (payment and purchase verification).

6. How we protect data

The connection to the server is encrypted. Passwords are stored only as a hash, and email codes and session keys only as hashes. Session data on the phone is encrypted with a key kept in Android's secure storage. Access keys for Google Play, LiqPay and the App Store are stored separately from the code and the database. A purchase counts only after it has been verified on the store's server or by a signed LiqPay notification. Only authorised persons have access to the database.

7. Your rights

You have the right to:

• know what data about you is processed and receive a copy of it;
• correct inaccurate data;
• delete your account — in the app (Profile (Профіль) → "Delete account" («Видалити акаунт»)), immediately and without our involvement: your email, password, phones, sessions and accepted documents are deleted; what remains is only an anonymised record without the email, and also purchase records, unlinked from the account, that we are required to keep (section 4);
• withdraw consent (camera and location permissions can be turned off in Android settings; the Service does not work without them);
• object to processing based on legitimate interest;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (for users from the EU — also with the data protection authority of their country).

Purchase records that we are required by law to keep are not deleted at your request before the end of their retention period. For data processed by Google, LiqPay or Apple (including payment data), contact them directly.

To exercise your rights, write to alarmfreegps.app@gmail.com from the address specified in your account. We reply within 30 days.

8. Phone permissions

• Camera — to determine location from what the camera sees. The image is processed on the phone.
• Location (precise) — to use GPS when it works, and the approximate location from the network.
• Motion sensors — to understand the car's turns and movement between frames.

9. Children

The Service is intended for adult drivers. We do not knowingly collect children's data.

10. Changes to the Policy

We may update this Policy. A new version has a new number; the app will show it and ask for your consent.

11. Contacts

FOP Lazieikin Yevhen Heorhiiovych, 19/4 vul. Veresneva, Hostomel, 08289, Kyivska obl., Ukraine, alarmfreegps.app@gmail.com.