GPX Navigator works without an account and without its own server. Your routes and your location stay on your device. To keep the app free, we occasionally show an ad via Google AdMob; below is exactly what that means — and what doesn't happen.
GPX Navigator is published by GPX Navigator, reachable via gpxnavigator.com (referred to below as "we" or "us"). For the data processed in and around the app, we are the data controller within the meaning of the General Data Protection Regulation (GDPR).
We have no backend that stores user data. The only third party that receives data in the app is Google — for the map display and, in the free version, for ads. That's described in sections 4 through 7.
| Data | Purpose | Where |
|---|---|---|
| GPX files and waypoints | Showing routes and navigating | Device only |
| Progress per route | Resuming an interrupted ride | Device only |
| Location (GPS) | Distance and heading to the next point | Memory only |
| Settings and language choice | Units, language, mode of travel, map display | Device only |
| Advertising ID and device data | Showing ads and preventing fraudulent clicks | Google AdMob |
| Your consent choice | Remembering what you chose about ads | Device only |
| Ad-free purchase | Turning off ads and restoring them on your devices | Apple or Google |
| Crash report (optional) | Fixing bugs | Via Apple or Google |
We don't collect your name, email address, phone number, contacts, or ride history ourselves. There's no registration and no cloud sync.
The app only asks for location access the moment you start a route — not on first launch. The default choice is While using the app. Your location is used solely to calculate the distance and heading to the next waypoint, and to show your position on the map.
Location data is never written to a file, never logged, and never transmitted. As soon as you end navigation, it disappears from memory.
Your location is not passed to the ad module. AdMob receives no GPS position, no waypoints, and no routes from us.
The free version of the app occasionally shows an interstitial ad: a full-screen ad at a natural resting point, for example after you finish a route or between two screens. Never during navigation, never over the map, and never on CarPlay or Android Auto. These ads are served by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
To be able to show an ad, AdMob processes data it receives directly from your device. That includes:
Google processes this data as an independent data controller under its own terms. We only receive aggregated revenue figures from Google — no data about individual users. See Google's privacy policy and the overview of how AdMob uses data.
If you're in the European Economic Area, the United Kingdom, or Switzerland, the app shows a consent screen the first time it launches, before a single ad is requested. That screen comes from Google's User Messaging Platform and follows the IAB Transparency & Consent Framework, as required by the GDPR and the ePrivacy Directive (the "cookie law").
On iOS, the system additionally asks, via App Tracking Transparency, whether the app may use your device identifier. If you decline that, personalised advertising is excluded regardless of what you choose in the app's own screen.
Your consent is stored locally on your device and passed to Google as a signal with every ad request. We don't keep a copy of it ourselves.
For a one-time payment of €2.99, you turn off ads for life. After that, the ad module is never initialised again: no request is ever sent to AdMob and no advertising identifier is requested.
Payment runs entirely through the App Store or Google Play. We never see your payment details: Apple or Google, respectively, processes the transaction and only tells us that the purchase is valid. To restore it on another device, use Restore Purchases via your Apple or Google account — no account with us is needed for that.
There's no subscription and no automatic renewal. The terms and right of withdrawal of the store where you bought it apply.
To show the map, the app uses the platform's own mapping service: Apple Maps (MapKit) on iOS and the Google Maps SDK on Android. These services load map tiles from their own servers and may receive technical data in the process, such as the area you're viewing and your connection's IP address. That happens under Apple's or Google's own privacy policy, respectively. We don't pass them any routes, waypoints, or ride data.
Apart from the mapping service and AdMob, the app contains no other third-party SDKs: no analytics, no A/B-testing tool, no social logins, no other ad networks.
Downloading and updating the app runs through the App Store or Google Play. Apple and Google keep their own data in the process, such as download counts and, in aggregate, crashes and versions. We only see that data in aggregated form, never traceable to a person.
If you've chosen in your device settings to share diagnostic data with the developer, we receive crash reports via Apple or Google. A crash report contains technical information about the device and the error — no routes and no location.
Routes, progress, settings, and your consent choice are stored by you: they stay in place until you delete a route or remove the app from your device. We apply no retention period of our own, because we don't store anything about you.
Google's retention periods for advertising data are set out in Google's privacy policy. During that processing, data may be transferred outside the EEA; Google uses the European Commission's standard contractual clauses for that.
You have the right to access, correction, deletion, restriction, portability, and objection. Because we don't store any data about you ourselves, you exercise those rights in practice on your device:
Questions about your data? Email privacy@gpxnavigator.com; you'll get a reply within 30 days. You can also always file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Your routes live in the app's protected storage and are therefore covered by your device's disk encryption and access security. Traffic to the mapping service and to AdMob travels encrypted over HTTPS. Because we have no server and no account, there's no central place where your data could leak from.
The app is intended for adult travellers and is not directed at children. We don't knowingly collect data from children. The app's ad settings are configured so that AdMob may not serve child-directed or child-unsuitable ads.
If anything changes about how the app handles data, we'll update this policy and raise the version number at the top. For a material change — for example a new third-party service or a different ad format — we'll flag it in the app the first time it's opened after the update, and ask for your consent where required.