Privacy Policy

Where Do I Take Photograph (WhatDoIPhotograph) — Android application

1. Data Collection

Where Do I Take Photograph collects the following data when you use it:

• Location data (latitude, longitude, timestamps): collected while a recording session is active, to trace your photographic route and mark spots where you stop to shoot.
• Photographs you choose to attach to a spot: stored as JPEG files inside the app's private storage.
• Session metadata: session title, duration, distance, notes, ratings, and the cross-references between spots and collections you build.
• Crash and event telemetry: anonymized crash reports and basic usage events (screen-views, feature interactions) sent to Firebase Crashlytics and Firebase Analytics to help diagnose problems and understand which features are used.

2. Local Storage

All primary user content — sessions, route points, spots, photographs, and collections — is stored locally on your device in an SQLite database (Room) at /data/data/com.photosession.app/databases/ and in private app file storage at /data/data/com.photosession.app/files/spot_photos/. None of this content is transmitted to a remote server unless you explicitly share or export it.

The app has no remote backend for user-generated content.

3. Permissions

The app requests the following Android permissions:

• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: required to record GPS coordinates while a session is active.
• ACCESS_BACKGROUND_LOCATION: Required for session recording continuity — the app records location-based photography sessions that may continue when the user navigates away or the screen turns off. Without background location, the session GPS trail would be lost.
• FOREGROUND_SERVICE / FOREGROUND_SERVICE_LOCATION / FOREGROUND_SERVICE_DATA_SYNC: required to keep the recording service alive in the background and to run the export/import service as a foreground operation with a visible notification.
• POST_NOTIFICATIONS (Android 13+): required to display the recording-in-progress notification and the backup-progress notification.
• INTERNET: required to fetch the static map image used in share-image rendering (see §4).

4. Third-Party Services

The app uses the following third-party services:

• Google Maps SDK and Google Static Maps API (Google LLC): renders the map inside the app and renders the static map tile included in share-image generation. Route latitude/longitude is transmitted to Google's servers during share-image rendering. Google's privacy policy applies: https://policies.google.com/privacy.
• Firebase Crashlytics (Google LLC): receives anonymized crash reports (stack traces, device model, OS version, app version). No personally identifiable information is intentionally sent. Crashlytics' data handling: https://firebase.google.com/support/privacy.
• Firebase Analytics (Google LLC): receives anonymized usage events (screen-views, feature interactions). No advertising identifier is collected; advertising IDs are explicitly NOT used by this app.

Crashlytics and Analytics collection is disabled in debug builds. Production builds collect telemetry by default; opt-out via app uninstall is the v1 control.

5. Data Sharing

The app shares data only with the third parties named in §4 (Google Maps API, Firebase Crashlytics, Firebase Analytics) and only for the purposes described above. The app does NOT sell or rent user data to any party. The app does NOT serve advertisements and does NOT collect any advertising identifier.

6. Your Rights

You have full control over your data:

• Export your data via Settings → DATA → Export. The app produces a single .zip archive containing every session, route point, spot, photograph, collection, and cross-reference, exported via the Android Storage Access Framework to a location you choose.
• Import your data on the same or another device via Settings → DATA → Import. The archive is appended (additive); existing rows are preserved.
• Delete your data by uninstalling the app. All on-device data is removed by the OS during uninstall.
• The app does not run a backend, so there is no remote account to delete and no remote data to request a copy of.

7. Children's Privacy

The app is rated "Everyone" / PEGI 3 and does not knowingly collect data from anyone under 13. It does not require account creation, does not collect personal information (name, email, phone number), and contains no advertising.

8. Changes

This privacy policy may be updated when the app changes. The effective date below reflects the most recent revision. Material changes will be reflected in the app's release notes (Play Store "What's new").

9. Contact

Questions about this policy can be raised on the developer's GitHub: github.com/kamhyh.

Effective date: 2026-05-14 — Where Do I Take Photograph v1.0 (com.photosession.app)