Privacy Policy
TripRewind records your location and stores it on your device. There is no TripRewind account and no TripRewind server for your trips to go to. We do not collect personal information, we do not track your behaviour, and we do not have access to your data.
The app does contact a small number of outside services — map tile providers and your app store's billing. Every one of them is listed in full below, and none of them ever receives your location.
What the app accesses
Location (GPS)
TripRewind requests access to your precise location, including in the background. This is the core function of the app — recording where you go.
- Your GPS track is stored only on your device.
- It is not transmitted to TripRewind or any third party.
- Background location access is required so recording continues when your screen is off or the app is not in the foreground.
Microphone
If you use the voice note feature, the app requests access to your microphone. Speech is transcribed entirely on your device using the operating system's built-in speech recognition. Audio is not recorded or stored — only the resulting text note.
Camera and photo library
If you use the Take a Photo button, the app opens your camera. The photo is saved to your device's photo library. TripRewind accesses your photo library to display photos alongside your trip route — matched by timestamp and GPS coordinates. This matching happens entirely on your device.
What the app stores
All data is stored locally on your device:
- GPS track points (timestamp, latitude, longitude, accuracy, altitude, activity)
- Text and voice notes
- Trip names and date ranges
- Named locations you create
- App settings and preferences
- A short log of app events (launches, recording start/stop, errors, crashes), used to build a diagnostic report if you ask for one
- A running count of how often you have used each feature — see Diagnostic reports below
None of this leaves your device unless you choose to export or back it up yourself.
What the app does not do
- We run no server that receives your data. There is no TripRewind account, no login, and no cloud storage — your trips have nowhere to sync to.
- We do not collect, receive, or have any access to your location data.
- We do not use advertising networks, third-party analytics services, or behavioural tracking of any kind. No third party receives anything about you from this app.
- The app never transmits anything on its own. Everything that leaves your device — an export, a backup, a diagnostic report — leaves because you chose to send it, to a destination you picked.
- We do not sell or share your data.
Every network connection the app makes
We would rather you found this list here than found it yourself with a network monitor. It is complete.
Without you doing anything
| Who | When | What they see | What they never see |
|---|---|---|---|
| OpenStreetMap | Whenever a map is on screen | Which map squares to send, and your IP address — the same as any map app | Your track, your saved places, who you are |
| Esri | Whenever the aerial/satellite layer is on screen | The same, for aerial imagery | The same |
| RevenueCat our billing provider |
Every time the app starts | An anonymous ID, your device model, and whether you have bought the Rewind unlock | Any location data of any kind |
| Google Play / App Store billing | Only when you make a purchase | The purchase | Any location data of any kind |
Looking at a map necessarily tells a map server roughly which part of the world you are looking at. That is true of every map app ever made, and we would rather say so plainly than pretend otherwise. Turn your network off and TripRewind keeps recording everything — you just get a blank map. That is the honest demonstration of exactly what the network is used for.
The anonymous ID used for the purchase check is generated by the billing SDK on your device. It is not your name, your email, or your Google account, and it is never connected to any location.
There is no analytics SDK in the app. Fonts are bundled in the app rather than fetched.
Only when you explicitly act
An encrypted backup file, a share card image, a GPX/CSV/KML/JSON export, or a diagnostic report emailed to us. Each of these goes to a destination you pick, because you tapped the button that sends it. Note that exports are plain, unencrypted files containing full coordinates — that is deliberate, because being readable by other apps is the whole point of an export. Backups are the encrypted ones.
Diagnostic reports
If something isn't working, you can send us a diagnostic report from Settings → Help & support. It is written on your device, shown to you in full, and shared only if you then choose to share it.
A report contains your app version, device model and OS version, permission and settings state, counts and dates of your recorded data, recent app events (launches, errors, crashes), and a tally of how often you have used each feature.
It contains no coordinates, no trip titles, no notes, and no photos.
The feature tally is a plain count kept on your device — "playback started 42 times across 9 days" — recorded so we can tell which parts of the app are worth improving and which nobody uses. It is a running total only: it records no sequence, no session, and nothing about where or when you travelled. You can turn it off, and clear what's been counted, in Settings → Help & support. Turning it off also deletes the existing counts.
Backups
The encrypted backup feature (Settings → Backup) creates a single encrypted file of your trip data. This file is encrypted with AES-256-GCM before it leaves the app. The encryption key is stored in your device's secure storage (Android Keystore / iOS Secure Enclave) and never transmitted anywhere.
You choose where to send the backup — your own cloud storage, email, a USB drive, anywhere you like. TripRewind does not receive a copy.
To restore a backup to a new device, you need your recovery phrase. This phrase is generated the first time you back up. TripRewind does not store or have access to your recovery phrase.
Map tiles
When you view the map, TripRewind loads map tiles from OpenStreetMap (openstreetmap.org). These requests are standard tile fetches by geographic area — they do not include your personal location or identity. OpenStreetMap's own privacy policy applies to these requests.
When the satellite view is enabled, map tiles are loaded from Esri (esri.com). These are also standard geographic tile fetches and do not include your identity or location data. Esri's own privacy policy applies to these requests.
No map tiles are loaded during recording; the app records GPS data without any network connection.
In-app purchases
The optional Rewind unlock is paid for through Google Play (Android) or the App Store (iOS). TripRewind does not handle payment information or receive your billing details. Google's and Apple's respective privacy policies govern the purchase transaction.
We use RevenueCat (revenuecat.com) to check whether you have bought the unlock. This check runs each time the app starts, so the app knows which features to offer before you open anything. RevenueCat receives an anonymous ID and your device model; it never receives location data, and it never receives your name or email. RevenueCat's privacy policy applies to that check.
Children
TripRewind does not knowingly collect data from or target children. Because all data stays on your device and we collect nothing ourselves, the app does not pose specific risks in this area. The app is rated 4+ / Everyone.
Your rights
Because TripRewind does not collect your data, there is nothing for us to provide, correct, or delete on our end. To delete your data, use Settings → Clear this device — this performs a secure wipe of all recorded points on your phone.
What we cannot protect you from
This policy covers what TripRewind does with your data. It does not cover what your phone carrier, mobile OS (Android or iOS), or other apps can see. Your phone carrier can see your location independently of TripRewind. Google and Apple may receive location data through their operating system services, depending on your device settings. We have no control over this and make no claims about it.
Changes to this policy
If we make material changes, we will update the effective date and note the change in the app's release notes. Continued use of the app after a change constitutes acceptance.
Contact
Questions about this policy:
TripRewind is made by Teremian Consulting, Sydney, Australia.