App: Tracker (package com.erasoft.cartracker) Developer: Era Soft Labs Contact: era.soft.app@gmail.com Last updated: July 2026
Publish this as your privacy policy page (the URL referenced from the app and the Google Play listing).
Tracker is built on one idea: your data is yours.
Era Soft Labs runs no servers that receive or store your personal data. There is no Era Soft Labs backend, no analytics server, no hidden copy. We never see, sell, rent, or trade your data.
Your location lives only where you put it: on your device, in your own Google Drive, and — when you choose to share — on the devices you paired with. It travels between your paired devices through Google Firebase Cloud Messaging (Google's delivery service), not through any Era Soft Labs server.
Your data exists only in places under your control:
Your device — the local databases and location history.
Your own Google Drive — inside a folder called "Tracker" (databases, history and monthly backups). Era Soft Labs has zero access to it.
The devices you paired with — when you share your location, it is delivered to those devices via Google Firebase Cloud Messaging.
There is no fourth location. No Era Soft Labs cloud.
Because Tracker's purpose is to locate and share device/vehicle location, it processes:
Precise location (GPS) and approximate location (network/cell) of the device, while sharing is active.
Nearby Wi-Fi access points and mobile cell-tower data, used only to estimate location when GPS is unavailable.
Vehicle/device telemetry: speed, battery level, movement/orientation (rotation sensor), engine on/off (power connected/disconnected).
Your Google account email, used only to authenticate you and access your own Google Drive.
Messaging/device identifiers (a Firebase messaging token and a pseudonymous device ID), used to route location between your paired devices.
We do not collect your contacts, photos or videos, browsing history, or health data.
You pair two devices by scanning a QR code. Both devices must scan and accept — there is no hidden or remote way to start tracking anyone.
A device shares its location only with the devices you paired with. Every location request is validated against the paired device before any location is sent.
While a device is collecting or sharing its location, it shows a persistent notification that clearly identifies the app and its state.
Location is shared on request (when a paired device asks) and, if you turn on Car mode, continuously while your vehicle is running.
The app gives you full control at any time from Settings:
Pause sharing temporarily (1h / 8h / 24h).
Stop sharing my location permanently (read-only mode) — the device only receives updates.
Revoke any paired device's access.
Export my data — save a ZIP copy of your data to your device's Downloads folder.
Delete account and data — permanently deletes the entire "Tracker" folder from your Google Drive and all local data, then signs you out.
Sign out — deletes all local data on the device.
Google Drive data stays in your Drive until you delete it; you can also open Google Drive and delete the "Tracker" folder yourself.
We never sell or share your personal data for advertising or any commercial purpose. Ever.
No ads. No third-party tracking or analytics SDKs. No crash-reporting SDKs.
We do not build user profiles or track your behavior.
You sign in with your own Google account via Google Sign-In.
The app requests only the minimum Drive permission (drive.file) — it can only access the files it created (your "Tracker" folder), nothing else in your Drive.
Data flows directly between your device, your Drive, and your paired devices — never through an Era Soft Labs server.
You can revoke Drive access anytime from Settings → Delete account and data / Sign out, or from Google Account → Security → Third-party access.
Google's own Privacy Policy governs how Google processes data within Google Drive and Firebase Cloud Messaging.
Your app-lock PIN is never stored in plain text — only a salted PBKDF2 hash is saved locally. We cannot recover your PIN.
Biometric unlock uses Android system APIs only; no biometric data is accessible to the app.
Your data in Google Drive is encrypted both in transit and at rest. The app encrypts its database files with AES-GCM before they are uploaded, so the files stored in your Drive are already encrypted; and all communication with Google (Drive, Firebase) travels over HTTPS/TLS with standard OAuth 2.0.
We process location and related data on the basis of your consent, given through the in-app prominent disclosure and the system permission prompts. You may withdraw consent at any time — pause or stop sharing, turn off Car mode, revoke paired devices, or sign out — as easily as you gave it. Withdrawal does not affect processing already carried out.
Depending on where you live (e.g., EEA, UK, California and other US states), you may have the right to access, correct, delete, port (export), restrict, or object to the processing of your personal data, and to withdraw consent. Because your data lives in your own Google Drive and on devices you control, you can exercise most rights directly in the app (Export, Delete account and data, Revoke, Stop sharing). For any request, contact era.soft.app@gmail.com.
Precise geolocation is treated as sensitive personal information. We use it only to provide the features you request, and we do not sell or share it for cross-context behavioral advertising.
We do not offer a "Do Not Sell/Share" mechanism because we never sell or share your data for advertising.
Residents of Virginia, Colorado, Connecticut and similar states: precise geolocation is sensitive data processed only with your opt-in consent (the location permission and in-app disclosure). You may access, delete, correct, or export your data as described above.
Location history is retained in your Google Drive until you delete it (in the app or from your Drive). Local data remains on the device until you delete it or sign out. When you use Delete account and data, associated data (local + the "Tracker" folder in your Drive) is removed.
In the app: Settings → Delete account and data (deletes your Drive "Tracker" folder + all local data + signs you out), or Sign out (local data only).
Web deletion URL — not applicable: Era Soft Labs does not store any of your data on its servers, so there is no developer-held copy to delete through a web request. All your data lives on your device and in your own Google Drive, entirely under your control — you can delete it at any time with Delete account and data in the app, or by removing the "Tracker" folder from your Google Drive. For any question, contact era.soft.app@gmail.com.
An optional "Enable logs" setting saves a local text file with app activity for troubleshooting. These logs never include sensitive data such as your location, account, keys or tokens, and are off by default.
Tracker is a general-audience utility and is not directed to children. We do not knowingly collect personal data from children under the age required by your local law (e.g., 13 in the US, 16 in parts of the EEA).
We may update this policy as the app evolves. The "Last updated" date above reflects the most recent revision.
Era Soft Labs — era.soft.app@gmail.com