Moon Tracker Privacy Policy

1. Controller

EXIMUN SYSTEMS, S.L.U. · Tax ID (NIF) B93942795 · C/ Lepant 270, entresuelo, 08013 Barcelona, Spain · Barcelona Commercial Registry, sheet B-662456.

Privacy contact: privacy@eximun.com.

This policy covers Moon Tracker for Android (package app.moontracker), Eximun's app.

2. What the app uses on your phone and never sends

• Camera: shows the sky live behind the guide. The app doesn't take, save or send photos or videos.
• Approximate location: used only while the app is open, to work out where the Moon is, when it rises and sets, and the magnetic declination for the compass. The app doesn't save your location or send it anywhere. On Android, your phone's location service (Google Play services) provides it under Google's own terms.
• Motion sensors and compass: they orient the guide. Their readings are not saved or sent. On Android they need no permission.

3. What leaves your phone: the update check

Each time the app starts, it contacts Expo's update service and, if there is a new version, downloads it from Expo's servers. These requests include:

• a random installation ID that the app creates the first time it runs and keeps in its private storage;
• your IP address, as with any internet connection;
• technical details of the installed version: the platform (Android), the runtime version, the update channel and the identifiers of the installed, built-in and failed updates;
• only if the app had to start in emergency mode last time, a short technical error message (the error's type and text, up to 1,024 characters).

They never include your location, images or sensor readings, or anything that names you. Expo says it doesn't work out your location from these requests, combine them with data from other apps or use them for advertising.

4. Why we use it and on what legal basis

• To deliver updates and fixes, and keep the app working and secure.
• To check that updates reach phones and start correctly. For this we only look at aggregate figures in Expo's dashboard, such as how many installations run each version or had an update fail.

Legal basis: our legitimate interest in offering a working, up-to-date and secure app (Article 6(1)(f) GDPR). You can object by writing to privacy@eximun.com. The check is how the app receives updates and can't be turned off in the app; to stop it completely, uninstall the app.

5. Who handles your data

• Expo (650 Industries, Inc., United States) runs the update service for us, as our processor. Under its terms, Expo may also use this data in aggregated or de-identified form to improve its own services, as described in its privacy policy (expo.dev/privacy).
• Google distributes the app through Google Play and, on Android, provides the location service, under its own privacy policy (policies.google.com/privacy).
• If you write to us, we receive your email address and your message in our email service (Google Workspace).

We don't sell your data or share it with advertisers.

6. Transfers outside the European Economic Area

Expo and Google may process this data outside the European Economic Area, mainly in the United States. Both take part in the EU-U.S. Data Privacy Framework, which the European Commission recognises as giving adequate protection (Implementing Decision (EU) 2023/1795), and in its Swiss and UK versions. Expo's terms also include the EU standard contractual clauses.

7. How long we keep it

• On your phone: the installation ID stays until you uninstall the app or clear its data. If Android backup is on, your phone may include it in your backup and bring it back when you reinstall the app.
• At Expo: the error message is deleted after three days. The other records are kept only as long as reasonably necessary to run the update service, as Expo's privacy policy says; Expo doesn't publish a fixed period for them.
• At Eximun: we keep no copy of the update checks. If you write to us, we keep your message while we deal with it and afterwards only as long as we may need it for a related claim.

8. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to take it with you (Articles 15 to 22 GDPR). Write to privacy@eximun.com; we reply within one month.

The installation ID is random and the app doesn't show it, so we usually can't link any record to you (Article 11 GDPR). Tell us what you need and we'll do what we can, including asking Expo. You can get a new ID at any time by clearing the app's data or reinstalling it, provided no backup restores the old one.

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the data protection authority of the country where you live or work.

9. Permissions you control

On Android, Moon Tracker asks for two permissions: camera and approximate location. You can turn them off at any time in your phone's settings. The guide needs both; the plan needs location.

10. If you share a test report

If the app offers to share a test report and you use it, the app writes a short text about the test on your phone and opens your phone's share menu. Nothing is sent unless you choose an app and send it; that app then handles it under its own terms. We only receive it if you send it to us. The report doesn't include your exact location or any identifier.

11. Children

Moon Tracker is not directed at children under 13.

12. Security

The update check and the downloads travel encrypted (HTTPS). The installation ID is kept in the app's private storage on your phone. We have no server of our own that receives your data.

13. No profiles, no automated decisions

We don't build profiles or make automated decisions about you. You don't need to give us your name, email or any account details to use Moon Tracker.

14. Changes

If we change this policy, we'll update the version and the date at the top. If a change affects how we use your data, we'll tell you in the app before it applies.