Privacy Policy
Last updated: 27 June 2026
This Privacy Policy explains how ITPM Group ("we", "us", "our") handles information when you use the Field Maps with Area Measure mobile application ("the App") and the website gpsandareameasure.com ("the Site").
Short version
- You can use the App and measure without an account, fully offline — that data stays on your device.
- Your location is used on your device to trace boundaries and calculate measurements. It is not sent to us unless you choose to save a measurement to a cloud workspace.
- If you sign in and use Workspaces, your measurements, photos, and notes are stored on our cloud backend so they sync across your devices and your team.
- If you create a public share link, that measurement becomes viewable by anyone who has the link until you delete it.
- Purchases are processed by Apple; we use RevenueCat to manage subscriptions and never see your payment details.
- We use Google Firebase (Analytics, Crashlytics & Cloud Messaging) for anonymous usage/crash data and push notifications, and Google Analytics on the website (only after you accept cookies).
- If you allow notifications, we can send you push messages (e.g. about workspace activity); you can turn this off anytime in iOS Settings.
- We do not sell or rent your data, and we do not track you across other apps or websites.
1. Information we collect
1.1 Data stored locally on your device
Until you sign in or share, the App stores your measurements (points, geometry, area, perimeter, distance), saved items, notes, photos you attach, and app settings locally on your device. This data does not leave your device, and we cannot access it.
1.2 Location data
With your permission, the App uses your device location (Core Location) only while you are using the App ("when in use") — for example to center the map on you or to trace a boundary as you walk, drive, or fly it. Location is processed on your device to perform the measurement. Coordinates only reach our servers if you save the measurement to a cloud-synced Workspace or publish a public share link (see below).
1.3 Account information (optional)
Signing in is optional. If you create an account — via Sign in with Apple or email — our authentication provider (Supabase) stores an account identifier and your email address to sign you in and link your Workspaces. If you use Sign in with Apple's "Hide My Email", we only ever receive Apple's private relay address.
1.4 Workspace content (cloud sync)
When you are signed in and use Workspaces, the measurements you save there — including geometry, coordinates, area/perimeter, names, notes, attached photos and videos, and your workspace membership and role — are stored on our cloud backend so they can sync to your devices and to members you invite. Other members of a workspace you join can see the content shared in that workspace.
1.5 Photos, videos, camera and microphone
If you attach site media, the App uses your camera (with your permission) to take a photo or record a video; recording a video also uses your microphone for its audio. Captured media stays on your device unless it is part of a cloud-synced Workspace, in which case it is uploaded to our backend so the workspace can sync it. We do not otherwise access the microphone.
1.6 Push notifications
If you allow notifications, the App uses Apple Push Notification service and Firebase Cloud Messaging to send you messages such as workspace activity. To do this, your device is issued a push token, which we use only to deliver notifications to you. You can turn notifications off at any time in iOS Settings → Notifications.
1.7 Map search
When you search for an address or place in the App, your search text and approximate region are sent to Apple's MapKit to return results. Map tiles and search are provided by Apple under their terms.
1.8 Public share links
If you choose to create a public share link for a measurement, a snapshot of that measurement (its geometry, area/perimeter, and any notes or photos you include) is stored and made accessible to anyone who has the link, without sign-in, until you delete the share. Only share measurements you are comfortable making public.
1.9 Purchases and subscriptions
In-app purchases and subscriptions are processed by Apple. We use RevenueCat to validate receipts and manage your subscription entitlement. RevenueCat receives an anonymous app-user identifier and purchase/receipt information. We never receive your name, payment method, or Apple ID.
1.10 Analytics and crash data (Firebase)
The App uses Google Firebase Analytics and Crashlytics:
- Collected: anonymous event logs (e.g. "measurement saved", "paywall viewed"), device model, OS version, language, approximate country derived from IP, and crash stack traces.
- Not collected: your name, email, precise location, contacts, photos, or messages.
- Purpose: to understand how the App is used in aggregate, detect crashes, and fix bugs.
You can limit this via iOS Settings → Privacy & Security → Analytics & Improvements.
1.11 Website (waitlist & analytics)
If you join the Android waitlist on the Site, we store the email address you submit solely to notify you when the Android version is available. The Site also uses Google Analytics — see Website analytics & cookies below.
2. Information we do not collect
We do not collect or have access to: your payment details, your contacts, calendar, or messages, your microphone (except while you are recording a video, see 1.5), information about other apps on your device, advertising identifiers, or your location beyond what is needed for a measurement you actively make. We do not use your data for advertising or cross-app tracking.
3. How we use information
To provide and operate the App and Site, perform measurements, sync and share your Workspaces, manage subscriptions, send notifications you have enabled, respond to support requests, understand aggregate usage, fix bugs, and keep the service secure.
4. Data sharing and processors
We do not sell or rent your data. We share data only with service providers ("processors") who handle it on our behalf for the purposes above:
- Apple — in-app purchase and subscription processing, Sign in with Apple, MapKit place search and map tiles, and Apple Push Notification service for delivering notifications.
- RevenueCat, Inc. — subscription receipt validation and entitlement management.
- Supabase, Inc. — authentication, database, and storage for accounts, Workspaces, and public shares (hosted on cloud infrastructure).
- Google LLC (Firebase) — app analytics, crash reporting, and Cloud Messaging for push notifications.
- Google LLC (Google Analytics) — website analytics, only after you accept cookies.
5. Data retention
- On-device data remains until you delete it or remove the App.
- Account & Workspace data is kept until you delete it or delete your account.
- Public shares remain until you delete them.
- Firebase analytics is retained up to ~14 months; crash data ~90 days.
- Waitlist email is kept until the Android launch or until you ask us to remove it.
6. Your rights (GDPR / UK GDPR / CCPA)
Depending on where you live, you may have the right to access, correct, delete, port, or object to the processing of your personal data. You can:
- Delete on-device data by removing items or the App; delete cloud data by deleting the relevant Workspace, share, or your account in-app, or by emailing us.
- Export your measurements yourself at any time as CSV or KML.
- Object to analytics via iOS Settings (App) or by declining cookies (Site), and turn off push notifications in iOS Settings.
- Complain to your local data-protection supervisory authority.
To exercise any right, email info@itpmgroup.com. We respond to legitimate requests within 30 days.
7. Children's privacy
The App is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
8. Security
On-device data is protected by the iOS sandbox. Data transmitted to our processors is encrypted in transit (HTTPS), and cloud data is protected by access controls (row-level security). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. International transfers
Our processors may store and process data in countries outside your own, including the United States. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
10. Website analytics & cookies
On the Site we use Google Analytics to understand, in aggregate, how visitors find and use the site. Analytics cookies are only set after you accept them in the cookie banner — if you decline, no analytics cookies are stored. IP addresses are anonymized. This applies to the website only.
11. Changes to this policy
We may update this policy over time. When we do, we will update the "Last updated" date above; material changes may also be noted in the App's release notes.
12. Contact
For privacy questions or data requests, contact:
ITPM Group
📧 info@itpmgroup.com
🌐 itpmgroup.com