Privacy Policy

What GPX Map 3D collects, where it goes, and who sees it.

Last updated: 10 October 2026

Short version: We don't run any server. Your tracks, photos and recordings stay on your device and in your iCloud account. We never see or share them. The only exception is routes you explicitly choose to publish to the community library.

Who this applies to

GPX Map 3D is published by Frederic Leaux (France) and covers:

The web app at www.gpxmap3d.com
The macOS native app (Tauri)
The iOS / iPadOS / watchOS native app on the App Store

Data we collect

On the web app (gpxmap3d.com)

The entire web app runs in your browser. We don't upload your GPX files, photos or route metadata to any server. The only data that leaves your device is:

Routing requests — bounding box of your planned route, sent to the public BRouter instance at brouter.de. Anonymous, no account.
Place search — your typed query, sent to Photon (hosted by Komoot at photon.komoot.io). Anonymous, no account.
Weather lookup — coordinates of your route's centre, sent to Open-Meteo. Anonymous, no account.
POI lookup — bounding box of your visible map, sent to the public OpenStreetMap Overpass API. Anonymous, no account.
Map tiles — standard tile fetches from OpenFreeMap (vector) and AWS Open Data (terrain DEM).
Google Analytics — anonymous site traffic (page views, country, browser version). Not loaded when the app is wrapped in Tauri (macOS or iOS native).

We never see your GPX file content, your photos, your flags, or any other annotation.

On the iOS / iPadOS / watchOS app

The native app collects the following data, all stored locally on your device:

Location (CoreLocation) — used when you start a Follow my trace recording, Live Tracking session, or standalone Apple Watch recording. Points are written only to the local GPX file.
HealthKit — on your explicit permission, we save each Follow my trace recording as a Hike workout in Apple Health (so it credits your Activity rings). We also read the heart-rate sensor on the Apple Watch to populate the workout.
Photos — on your explicit permission, we read photos from your library to let you attach them (with their GPS tag) to a route. Photos are copied into the app's own storage.
Profile — pseudo and avatar you set manually (optional; only required if you want to publish to the community library).

iCloud sync (Apple CloudKit)

If you sign in with an iCloud account on your device, we use your own private iCloud container to sync your saved routes, photos, flags and profile across your iPhone, iPad and Mac. This data stays in Apple's infrastructure under your account — we never see it, and we have no access to it.

Community library (publishing a route)

If you explicitly choose to publish a route to the community library, the following data moves to the public CloudKit database (visible to all users of the app):

Route name, description, distance, elevation, countries
The GPX file content
Your pseudo and avatar
Ratings and the average rating other users give the route

Publishing is opt-in per route. You can unpublish at any time (the public record is deleted).

In-app purchases

Payments for GPX Map 3D Pro are handled entirely by Apple. We receive only the entitlement state ("Pro: yes/no") — never your name, email, credit card or billing address.

What we do NOT collect

No advertising identifiers (IDFA / IDFV)
No third-party analytics on the native app (no Firebase, no Mixpanel, no Amplitude, no Facebook SDK)
No crash reporters beyond Apple's own built-in system (TestFlight / App Store Connect reports) — these contain no personal data
No tracking across apps or websites

Data sharing

We don't sell, rent or share your personal data with anyone, for any purpose. The only data we willingly send to third parties is listed in the "Data we collect" section above — all anonymous, all operational (routing, geocoding, weather, map tiles).

Data retention and deletion

All data that lives on your device is deleted when you uninstall the app. All data that lives in your iCloud private container is deleted when you delete your iCloud container (iPhone Settings → Apple ID → iCloud → Apps using iCloud → GPX Map 3D → Delete Data). Public community routes you've published are deleted when you unpublish them from the app, or on request by email.

Your rights (GDPR, CCPA)

You can at any time:

Access and export your data — GPX files and bundles are exportable directly from the app; iCloud data is accessible via your Apple ID
Delete your data — uninstall the app and/or delete the iCloud container
Correct your data — edit your profile and routes directly in the app
Lodge a complaint with your local data-protection authority (CNIL in France)

Children

GPX Map 3D does not collect personal data from children under 13 (16 in some EU jurisdictions). The app is rated 4+ by Apple and is designed for general audiences, but it is not knowingly used by young children.

Changes to this policy

If this policy changes materially, we will update the "Last updated" date at the top. For significant changes affecting what data we collect, we'll show an in-app notice.

Contact

Questions, data-access requests, or data-deletion requests: [email protected].