Deutsch

Privacy Policy – Tropek

Last updated: 2 October 2026

This privacy policy applies to the Android app Tropek (package app.tropek). Tropek is an offline-first tracking and tour app: there is no server, no user account and no sign-in. All recorded data generally stays locally on your device. Data is only transmitted to third parties in the cases expressly listed below (weather and air quality retrieval, map services, update notice).

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Tobias Erdmann
c/o Adressgeber #2078
An der Alten Ziegelei 38
48157 Münster, Germany
Email: contact@tropek.app

2. Principle: local processing

Tropek stores all recordings exclusively in the app's internal storage on your device (local database and local file storage). No data is sent to a provider's server, because no such server exists. There is no advertising, no analytics or tracking SDK, and no sharing for advertising purposes.

3. What data is processed (locally)

During a recording, the app captures and stores locally on the device:

Location and sensor capture only runs while you have deliberately started a recording. It ends when you stop the recording. No background location permission is requested; the tracking runs as a visible foreground service with a persistent notification that can be stopped at any time.

4. Permissions and their purpose

PermissionPurpose
Precise/approximate locationGPS recording of the tour
Foreground service locationRecording continues while the app is in the background (with a visible notification)
Physical activityStep counting for more accurate activity detection
NotificationsDisplaying the recording notification
Internet / network stateLoading map tiles, retrieving weather and air quality data, map background for shared tour images
VibrationShort confirmation vibration when saving

Tropek deliberately requests no background location permission, no full camera access and no full media/gallery access. Photos are captured via the system camera or the system photo picker. The optional copy of your photos to the gallery uses Android's system interfaces and goes to the album or folder you choose – without a storage permission.

5. Data transmission to third parties

Data only leaves your device in the following cases, and only when an internet connection exists. The app does not transmit any user identifier, account or tracking ID. For technical reasons, every service contacted receives your IP address.

a) Weather and air quality data – Open-Meteo

b) Map tiles – Mapbox and OpenStreetMap

When the map is displayed, map tiles are loaded unless they are already cached locally. The requested tile coordinates (from which the approximate map area can be derived) and your IP address are transmitted.

c) Map background in shared tour images – Mapbox

Only if you choose “Map of the route” as the background while designing a tour image (off by default), the app loads a single map image via the Mapbox Static Images API. It transmits the center and zoom level of the map area – i.e. the approximate location of your tour –, map style, image size and your IP address. Recipient and transfer outside the EU are as described under b).

d) Update notice – Google Play

To let you know about a new version, the app asks the Play Store app installed on your device whether an update is available when you open it. The Play Store handles this request; Google's privacy policy applies to it. The app does not pass on any tour or location data in the process. If no Play Store is present, no request takes place.

Legal basis

The legal basis for the transfers under a) to d) is Art. 6(1)(f) GDPR. The legitimate interest lies in providing the features you use: map display, weather for the tour, shared tour image and update notice.

6. Device backup

The app permits Android's automatic system backup. If you have enabled a cloud backup in your Android settings, the operating system may back up app data to your own account with the backup provider (e.g. Google). This process is outside the app's control and is subject to the privacy terms of the respective backup provider.

7. Retention period

All recordings stay local until you delete them. You can:

8. Export, import and sharing

You can export and import tours as a file (.tropek.zip or GPX). You can also share tours, marked points and snapshots as text, photos or a designed image, and in an emergency send your current position as a message. These actions are controlled by you: the app only hands the content to the storage location or app you choose yourself. From that point on, their privacy terms apply. Shared texts can contain a Google Maps link with the coordinates; it is only opened when someone taps it.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. As all data is held exclusively locally on your device, you exercise these rights directly yourself:

In addition, you have the right to lodge a complaint with a data protection supervisory authority.

10. Children

The app is not specifically directed at children and does not knowingly collect data from children.

11. Changes to this privacy policy

This policy may be adapted if the app's features or data flows change. The respective current version is available with the app or at the published location; the date above indicates its status.

12. Contact

For privacy questions: contact@tropek.app