ApexGPS Privacy Policy

Last updated: 2026-06-05

ApexGPS is a free Android hiking app. This policy explains what data the app reads, where it stays, and who it’s shared with.

Summary

Your location data and everything you create (tracks, waypoints, saved map regions, settings) stays on your device. Nothing is uploaded to ApexGPS servers — we don’t operate any.

What data the app reads

Device location (precise GPS) — optional. Read while you use live GPS features: the position marker, “follow me” mode, and trip recording. While you are recording a trip, location keeps being read with the screen off via a foreground service that shows a persistent notification, so the track continues while the phone is in your pocket. The app works without location for browsing maps and viewing imported tracks.

GPX files you import — read from the file you select or share in.

Where the data goes

Nowhere external by default. All tracks, waypoints, saved maps and settings live in the app’s local storage. You can export them as a GPX or ZIP file and share with anyone you choose; we never see it.

On-device storage details. Tracks and waypoints are stored in a local SQLite database on your device. That database is not encrypted — on a rooted device or if your phone is attached to a debug-enabled computer, the contents are readable. Your Thunderforest API key, if you set one, is stored in an Android Keystore-backed encrypted preferences file (AES-256-GCM). Backup ZIPs you create carry a plaintext copy of the API key so the backup is portable to a new device; keep those ZIPs private.

Map tile requests — when you view a map, tiles are fetched over HTTPS from one of these public providers:

Those providers see a standard HTTP request — IP address, User-Agent — as they would for any map on any app. Nothing ApexGPS-specific is sent. Refer to each provider’s own privacy policy for their handling.

Weather and elevation (Open-Meteo) — when you open the weather panel or fetch elevation data, the app sends the relevant coordinates over HTTPS to Open-Meteo (api.open-meteo.com) to retrieve the forecast or ground elevation for that point. The coordinates are used only to service that request; per Open-Meteo’s own terms, no personal data is stored. See open-meteo.com’s privacy terms for their handling.

Third-party SDKs

Data retention and deletion

Everything is stored locally. To remove it:

Children’s privacy

ApexGPS is not directed at children under 13 and does not knowingly collect any data from them.

Contact

Issues or questions: sandwalker.one@proton.me

Changes to this policy

If the policy changes, the “Last updated” date above will change. Material changes will be announced in the app release notes.