Privacy Policy
This explains what the EZ GPS app, the EZ GPS Beacon and this website do with information about you. It is written to match exactly what the app does today, not a template.
Last updated: 27 October 2026. Published by Good Pace Setter Global LLC, 10412 Colechester Street, Fredericksburg, VA 22408, USA (“EZ GPS”, “we”, “us”).
The short version
- We collect what the app needs to work: your email address, your phone’s position when you use a feature that needs it, the places you save, the places you share, the help messages you send, and a record of your subscription.
- We do not sell your information, we do not show ads, and we do not use analytics or advertising trackers. We do not collect your contacts, photos, microphone or background location.
- When you search for places, your position and what you searched for go to our server and to our map providers so they can answer. Our server’s request log keeps them for 30 days.
- You can delete your account at any time, in the app or without it. See how to delete your account.
- Your information is kept on servers in the United States.
- The app is for people aged 18 and over.
Who we are and how to reach us
Good Pace Setter Global LLC decides why and how your information is used, which makes us the “controller” (in some countries, the “data fiduciary” or “responsible party”). For anything in this policy, including using your rights, write to:
Joseph Jackson
privacy@ezgps.app
10412 Colechester Street, Fredericksburg, VA 22408, USA
This person is also our contact for data protection (including the Grievance Officer in India and the data protection officer or encarregado where a country asks for one). Our representative in the European Union and the United Kingdom is Elizabeth James (tech2tech02@gmail.com).
What we collect, and why
“Linked to you” below means we can tell it belongs to your account. Most of it is collected because you use a feature; the table says which.
| What | Details | Why we need it |
|---|---|---|
| Your account | Your email address and a password (we keep only a salted one-way hash of it, never the password), a random account number, and the date the account was made. | To create your account, let you sign in and keep it secure. |
| Google or Apple sign-in | If you sign in with Google or Apple we receive an identifier that Google or Apple gives us for you and your email address (with Apple’s “Hide My Email”, the private relay address Apple gives us). We do not receive your name, photo, contacts or anything else from them. For Apple we also keep an encrypted token whose only use is to tell Apple to remove EZ GPS from your Apple ID when you delete your account. | To let you sign in without a password, and to disconnect it when you leave. |
| Your position | Your phone’s latitude and longitude, only while the app is open and only when you use something that needs it: nearby places, directions, searching near you, or sharing your current location. If your phone lets you give “approximate” location, that is what we get when you choose it. We do not track you in the background and we do not keep a history of where you have been. | To find places and directions for where you are, and to share your location when you choose to. |
| Place searches | What you search for (a category such as “Hospitals” or words you type), together with the position you searched from. It is part of the web address the app asks our server for, so it also appears in our server’s request log (see “Technical records” below). The log does not contain your account number or email address, and we do not build a search history from it. | To answer the search. |
| Directions | The start and end positions of a route you ask for. | To work out distance and time. |
| Saved addresses | The label, address and map point of each place you save. | So your saved places are there next time. |
| Shares | When you share a place or your current location we keep the position, whether it is a chosen place or your current location, the link’s random code, its status (waiting, opened, cancelled, expired) and when it was opened. A “current location” share is marked as expired after 24 hours. Anyone who has the link can open it, with or without an account, and sees the place, its status and (if you attached one) the Beacon’s ID, and nothing about you: not your name, email or account. If the person opening it is signed in, we link their account to the share. | To make the share work and show you its status. |
| Your Beacon | The Beacon’s ID (read from its QR code), a secret key we make for pairing it (kept encrypted), its battery level and when it last checked in (only the latest values), and, if you entered one, the code from its box. The Wi-Fi name and password you type to connect it go from your phone to the Beacon by Bluetooth only: we never receive or store them. | To pair your Beacon, show its status and make sure only you can use it. |
| Help requests | The messages you write to our team and the answers, the help topic you came from, and the app version and phone type (iPhone or Android). | To answer you and fix problems. |
| Subscription and purchases | Your plan, its dates and status, and the reference Apple or Google gives the purchase. We give Apple or Google your random account number when you buy, so the purchase reaches the right account. We never see your card or other payment details. Beacon codes you redeem are recorded against your account. | To switch on your access, handle renewals and refunds, and keep the records the law requires. |
| In-app notifications | A short record of things that happened (for example, someone opened your share). | To show them in the app’s Notifications screen. We do not send push notifications, texts or marketing emails. |
| Technical records | For every request the app makes: the time, the internet address (IP address) it came from, the full web address asked for (which, for place searches, includes the position and search words), the result and how long it took. Our hosting provider keeps this log for 30 days and then deletes it automatically. Separately, the IP address (and, once you are signed in, your random account number) is held for about a minute to limit how fast one device or account can send requests. | To keep the service running and secure, find faults and stop abuse. |
| Log of important actions | A record that something important happened to an account (it was deleted, or our team changed its access), when, and by whom. It holds no personal details. | To show a request was carried out and to resolve disputes. |
What we do not collect: your contacts, photos, files, microphone recordings, calendar, health data, your name (unless it is part of your email address or help messages), your payment card, an advertising identifier, or your location when the app is closed. We do not use analytics, crash-reporting or advertising tools, and the app does not use cookies.
Help from Google inside the Android app
On Android the camera feature that reads a Beacon’s QR code uses Google’s ML Kit library. It reads the picture on your phone and does not send the picture anywhere, but Google says ML Kit sends Google information about the device and the app, such as its version, how the library performed and an identifier for that installation, for diagnostics and usage statistics (see Google’s ML Kit data disclosure). Google’s sign-in library, if you use it, may collect an identifier and your IP address to keep sign-in secure (see Google’s description). These go to Google under Google’s privacy policy, not through us.
What the app asks your phone for
- Location, while you use the app. For nearby places, directions and sharing your location. Never in the background. You can say no, or choose approximate location; typed searches and saved addresses still work.
- Camera. Only to scan the QR code on your Beacon. The picture is read on your phone, and nothing is recorded or stored.
- Bluetooth. To connect directly to your Beacon to set it up and check on it.
- Face ID, Touch ID or fingerprint. Only if you turn on App Lock. Your phone does the check and tells the app yes or no; we never receive or store biometric data.
You can change any of these at any time in your phone’s settings. The app also keeps your sign-in and your App Lock choice on your phone, in its secure storage, until you sign out or delete the app.
How we use it
- To provide the app: places, directions, saved addresses, sharing, Beacon pairing, help.
- To sign you in, keep your account and your Beacon safe, and prevent misuse.
- To run subscriptions and Beacon codes, and keep the records the law requires.
- To find and fix faults, from the technical records.
- To answer you, and to meet legal duties and defend ourselves in a dispute.
We do not use your information for advertising or marketing, we do not build profiles of you, and nothing here is decided about you by a computer alone in a way that has legal or similar effects.
Our legal reasons (where the law asks us to give them, such as in the EU, the UK and Brazil): to give you the service you asked for, which is a contract with you; because you allow it, for the permissions you give your phone (you can withdraw by switching the permission off); because we have a legitimate interest in keeping the service secure and working and in defending ourselves, which your rights do not outweigh; and because the law requires some records, such as tax and accounting records.
Who receives it
We do not sell your information and do not share it for advertising. We never give it to data brokers. It reaches these organisations, only so they can do the job named:
| Who | What they receive | Why |
|---|---|---|
| Google Cloud | Everything our server handles, and its request log | Runs our servers (Virginia, USA) |
| Neon | Our database: accounts, saved addresses, shares, Beacons, help requests, subscriptions | Stores our data (on Amazon Web Services, Virginia, USA) |
| Upstash | The IP address and, when you are signed in, your random account number, for about a minute | Limits how fast one device or account can send requests |
| Mapbox | The position and search words of a place search, or the start and end of a route, sent from our server (never your account or email) | Finds places and works out directions |
| An OpenStreetMap-based place server (overpass.private.coffee, a free public server run by an independent organisation) | The position and category of a place search, sent from our server (never your account or email) | Finds places where Mapbox has little data. We also keep our own copy of OpenStreetMap data for some countries. |
| Apple | Sign in with Apple, if you use it; your purchase, handled by the App Store | Sign-in and payments |
| Google sign-in, if you use it; your purchase, handled by Google Play; on Android, the diagnostics described above | Sign-in, payments and the QR scanner | |
| Your maps app | The destination (and starting point) when you tap “Get directions”. Apple Maps on iPhone; Google Maps or your browser on Android. | Turn-by-turn directions. That app’s own privacy policy then applies. |
| People you share with | The place, and the share’s status | You chose to send it. We do not control what they do with it, or with the apps you use to send the link. |
| Authorities | What the law requires | Only when a valid legal request or a duty to protect people requires it |
Our own team can see what it needs to help you: in the staff tools, your email address, subscription, Beacons and help requests. The staff tools do not show your saved addresses or the places you shared. A small number of people who run our systems can reach the database to keep it working.
If we ever sell the business or merge with another, your information would go to the new owner, who must keep to this policy or tell you first.
Where it is kept
Our servers (Google Cloud, Virginia), our database (Neon, on Amazon Web Services, Virginia) and our request limiter (Upstash, US East) are all in the United States. Mapbox, Apple and Google also handle information in the United States and elsewhere, and the public place servers are run by independent organisations that may be in other countries. If you live outside the United States, your information is therefore sent to a country where data protection law may differ from yours. Where your country’s law requires safeguards for this, we rely on the contractual safeguards recognised by that law (such as the European Commission’s Standard Contractual Clauses) in our providers’ terms, and on a provider’s certification under the EU–US Data Privacy Framework where it has one. You can ask us for a copy of the safeguards we use.
How long we keep it
| What | How long |
|---|---|
| Your account, saved addresses, shares, Beacons and their status, help requests, notifications, and sign-in links | Until you delete your account, which deletes or anonymises all of them straight away. You can delete a single notification or unpair a Beacon at any time. A share stays recorded with your account until you delete the account. |
| Subscription, purchase and Beacon-code records | 7 years, because the law requires us to keep payment records. After you delete your account they stay attached to a random account number but no longer to your email address or anything else that names you. |
| Log of important actions | For as long as the law requires. It holds no personal details. |
| Server request log | 30 days, then deleted automatically |
| Database backups | A short rolling history, currently 6 hours. Deleted data drops out as it expires. |
| The IP address and account number held to limit request speed | About a minute |
| Emails you send to us about your privacy | Only as long as needed to deal with your request, then deleted |
Apple and Google keep your payment and sign-in details under their own policies. We cannot delete those: you manage them in your Apple or Google account.
Your rights and choices
Wherever you live you can ask us to:
- tell you what we hold about you and give you a copy;
- correct what is wrong;
- delete your information (see how to delete your account);
- stop or limit how we use it, or object to a use that relies on our legitimate interest;
- give you your information in a form you can reuse;
- withdraw a permission you gave us (for example, by switching off location on your phone).
Email privacy@ezgps.app from the address your account uses. We may reply to check the request really comes from you. We answer within one month, sooner where the law sets a shorter time, and we do not charge you. If we cannot do what you ask, we will say why. You will not be treated worse for using your rights.
You can also delete your account in the app (Settings, then Profile, then Delete account), turn location, camera and Bluetooth off in your phone’s settings, cancel a share from the share screen, and unpair a Beacon from the Beacons screen. Deleting the account does not cancel a subscription: cancel it in your App Store or Google Play account first.
If you think we have handled your information wrongly, please tell us first so we can put it right. You can also complain to the data protection authority in your country; the notes below name them.
Notes for your country
These add to the rest of this policy. They are summaries, and the law of your country applies in full.
European Economic Area, United Kingdom and Switzerland
The GDPR (and the UK GDPR and Swiss law) give you the rights listed above, including to object, to restrict, to portability, and to withdraw consent at any time. Our legal reasons are in “How we use it”. You can complain to your national data protection authority (in the UK, the Information Commissioner’s Office). We do not make decisions about you by automated means that have legal or similar effects. Transfers to the United States are covered under “Where it is kept”.
United States
Laws in California and other states give residents rights to know, access, correct, delete and receive a copy of their information, and to appeal a refusal. In the last 12 months we collected these kinds of information: identifiers (email, account number, IP address), commercial information (subscription and purchase records), internet activity (the technical records), precise location, and what you write in help requests. We collected them for the purposes in “How we use it” and disclosed them to the providers in the table, for those purposes only. We do not sell personal information, we do not share it for cross-context advertising, and we use precise location only to give you the service you ask for, so there is nothing to opt out of or limit. By allowing location on your phone you agree to this use, and you can withdraw that at any time. You can ask through an authorised agent; we will check their authority. If we refuse a request you may appeal by replying to our answer, and, if you are still unhappy, contact your state attorney general. We do not respond to browser “Do Not Track” signals because the app and website do not track you.
Canada
We handle your information as Canadian privacy law (PIPEDA, and Quebec’s private-sector law) requires: with your consent, for the purposes above, and with the safeguards described. Your location is used only when you allow it on your phone, and you can switch it off. Your information is stored outside Canada, in the United States. You may ask for access or correction, withdraw consent, and complain to the Office of the Privacy Commissioner of Canada (or, in Quebec, the Commission d’accès à l’information).
Brazil
Under the LGPD you can ask us to confirm that we process your information, give you access to it, correct it, anonymise, block or delete what is not needed, give you a portable copy, tell you who we shared it with, and withdraw consent. Our legal reasons are in “How we use it”. Our contact for data protection (encarregado) is in “Who we are”. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
Nigeria
Under the Nigeria Data Protection Act 2023 you can ask us for access, correction, deletion, a portable copy, and to restrict or object to our use, and you can withdraw consent. We tell the Nigeria Data Protection Commission and you about a breach that puts you at risk where the law requires. A person under 18 is a child under that law, and the app is not for children. Your information is transferred to the United States as described above. You can complain to the Nigeria Data Protection Commission.
India
Under the Digital Personal Data Protection Act 2023 and its rules you can ask us for a summary of your information and who it was shared with, ask us to correct or delete it, withdraw your consent (as easily as you gave it, by switching off the permission or deleting your account), and name another person to exercise your rights if you die or cannot. Our Grievance Officer is in “Who we are”; please write to them first, and if you are not satisfied you can complain to the Data Protection Board of India. A person under 18 is a child under that law, and the app is not for children. On request we can give you this notice in any language listed in the Constitution’s Eighth Schedule.
Singapore
Under the Personal Data Protection Act you can ask for access to and correction of your information and withdraw consent for the uses described here (we will tell you what that means for the service). Our data protection contact is in “Who we are”. When your information goes outside Singapore, we make sure it stays protected to a standard comparable to the Act. You can complain to the Personal Data Protection Commission.
United Arab Emirates
Under the Personal Data Protection Law (Federal Decree-Law 45 of 2021) we tell you the purposes of our use of your information, the organisations that receive it inside and outside the UAE (listed above, all outside the UAE) and the safeguards for sending it abroad. You can ask to access, correct, delete, restrict or move your information and withdraw consent. You can complain to the UAE Data Office.
Australia and New Zealand
We handle your information in line with the Australian Privacy Principles (and, for New Zealand, the Privacy Act 2020). You can ask for access to and correction of your information. Your information is disclosed to overseas organisations: those in the table above, mainly in the United States; the independent public place servers may be run in other countries. If you are unhappy with how we handle a complaint you can contact the Office of the Australian Information Commissioner (or the New Zealand Privacy Commissioner).
Children
EZ GPS is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a child has an account, tell us at privacy@ezgps.app and we will delete it.
Security
- The app and our servers talk only over encrypted connections (HTTPS).
- Passwords are stored only as a salted one-way hash.
- Beacon keys, and the token we keep for Apple sign-in, are stored encrypted (AES-256-GCM). Your sign-in on your phone is kept in the phone’s secure storage.
- The staff tools can be used only by staff accounts, and requests are rate-limited.
No system is perfectly secure. If a breach of our systems puts your information at risk, we will tell you and the authorities as the law requires.
This website
This website does not use cookies, analytics, advertising or scripts from other sites. Our hosting provider, Cloudflare, sees the internet address of each visitor in order to deliver the pages, under its own privacy policy. The page for deleting your account asks you to sign in: your password is used once to check it is you and is not kept, and the page keeps no cookies.
Changes
We will change this policy when the app changes or the law does. The “Last updated” date at the top tells you when. For changes that matter to you we will tell you in the app or by email before they apply.