In short: no account, no ads, no analytics or tracking. Your location, targets, routes and tracks are stored only on your iPhone; we (Gepgo) don't collect them. The one exception is Team Mode's internet sync, if you turn it on: your position and team messages are then written to Apple iCloud, encrypted with your team code, and nobody — including us — can read them.
1. Data processed on your device
| Data | Purpose | Where |
|---|---|---|
| Location (GPS) | Show your position, direction and distance to targets, record tracks, proximity alerts | Only on your device |
| Targets, routes, tracks, areas, imported map files | Content you create | Only on your device |
| Camera image | Live preview in the AR view | Not recorded; a photo is added to your Photos library only when you press the shutter |
| Motion sensors and compass | Heading and AR alignment | Only on your device |
| Name, team code, colour | Appearing in Team Mode | On your device; shared only with teammates who have the same team code (see section 3) |
Background location is used only while a track is recording or a proximity alert is on.
2. Requests to third-party services
Some features need to request data from these services over the internet. The requests contain no identity or account information, but as with any internet request the services can see your IP address and the map area requested:
- Apple Maps (MapKit): map display and place search — Apple Privacy Policy.
- Esri World Imagery and OpenTopoMap: Satellite and Topo map tiles (when viewing or downloading).
- Open-Meteo: terrain elevation and slope; the coordinates of the map center, a target or route points are sent.
3. Team Mode
Nearby phones: Apple's Multipeer Connectivity connects phones directly over Wi-Fi and Bluetooth with encryption; nothing passes through a server.
Internet sync (optional, can be turned off on the Team Mode screen): to reach teammates far away, your name, colour, position, messages and the targets, routes and areas you share are written to the app's database in Apple's iCloud (CloudKit). They are encrypted with AES-GCM using your team code before they leave your device, and record names are derived from the code too. The team code itself is never sent anywhere, so without it nobody — including Apple and Gepgo — can read the records. Share the code only with your team. Messages are kept for at most 48 hours, and tapping Leave deletes your record from iCloud. This feature requires being signed in to iCloud; Apple's Privacy Policy applies.
4. What we don't collect
The App contains no analytics, advertising, crash-reporting or tracking SDKs. We don't sell or share personal data. With your consent, Apple may pass anonymous crash and usage statistics to us through the App Store.
5. Deleting your data
Settings → Erase all data, or deleting the App, removes all your data. AR photos saved to your Photos library remain under your control. You can revoke permissions at any time in iOS Settings → Alpingo Pro.
6. Children
The App is intended for a general audience and collects no personal data from anyone, including children under 13.
7. Changes
We may update this policy and will mention significant changes in the app's release notes. The date of the last update is shown at the top of this page.
8. Controller and contact
Gepgo — for privacy questions and requests (including requests under GDPR):