Privacy Policy
EMS Response Tracker

1. Summary

EMS Response Tracker is a tool for emergency response personnel to time their action items and record GPS tracks during a callout. The app is designed to keep your data on your device. We do not run a backend server, we do not have user accounts, and we do not sell, share, or monetise your data.

The only data that ever leaves your device is anonymous crash diagnostics (when a crash occurs) and the standard map-tile requests required to display the map view. Both are described in detail below.

2. What the app stores on your device

When you use the app, the following information is written to a local SQLite database and to local preferences on your device:

• Callouts — start time, end time, and the action items you tap during the callout.
• Action item records — which item was active, and the start and end timestamps for each.
• Location points — GPS coordinates (latitude, longitude, accuracy, timestamp) sampled while a callout is active and GPS tracking is enabled.
• Templates — the list of action item templates you have configured.
• Settings — your preferences, such as the GPS ping interval and theme colour.

This data is stored locally and is not transmitted to xeni CODE or to any third party. If you uninstall the app, this data is removed from the device by the operating system.

3. Location data

The app requests permission to use your device's location only so that it can record GPS tracks during an active callout. Location collection is subject to the following rules:

• Location is only sampled while a callout is actively running. No background tracking takes place outside an open callout.
• You can disable GPS tracking entirely from the Settings tab, in which case no location data is collected at all.
• You can decline the system location permission. The app will continue to function for timing action items; only the map track feature will be unavailable.
• Recorded location points are stored locally in the app's database and are never uploaded to xeni CODE or any third party.

4. Map tiles

The Map tab displays an interactive map using tiles served by OpenStreetMap. When you view the map, your device makes standard HTTPS requests to OpenStreetMap tile servers for the visible map area. These requests carry the same information as any web request (your IP address, user agent, and the tile coordinates being viewed) and are handled under OpenStreetMap's own privacy policy.

xeni CODE does not operate the tile servers and does not receive a copy of these requests.

5. Crash reporting

The app uses Firebase Crashlytics to report unhandled errors and crashes. This is the only Firebase service enabled. When a crash occurs, Crashlytics collects the following:

• Stack trace and exception details.
• Device model, operating system version, and app version.
• An anonymous installation identifier generated by the Firebase SDK.

Crashlytics does not collect your name, email, phone number, contacts, photos, files, callout content, action item names, or location data. Crash reports are used solely to diagnose and fix bugs in the app. They are processed by Google on behalf of xeni CODE under Firebase's privacy and security terms.

6. Permissions requested

• Location (foreground) — required to record GPS tracks during an active callout. Optional; can be declined.

The app does not request access to your contacts, camera, microphone, photos, calendar, or any other sensitive system resource.

7. Sharing and disclosure

xeni CODE does not sell, rent, or trade any data. The only third-party services involved in operating the app are:

• Google Firebase Crashlytics — anonymous crash reports, as described in Section 5.
• OpenStreetMap — map tile delivery, as described in Section 4.

We may disclose information only if required by law, valid legal process, or to protect the rights, property, or safety of users or the public.

8. Your choices and controls

• Disable GPS tracking — toggle GPS off in the Settings tab to stop all location recording.
• Delete a callout — open the History tab and delete any individual callout. Deleting a callout removes its action item records and all associated location points.
• Remove all data — uninstall the app from your device. The local database and preferences are removed by the operating system.
• Crash reporting — to stop sending future crash reports, uninstall the app.

9. Data retention

Data stored on your device is retained until you delete it or uninstall the app. Crash reports collected through Crashlytics are retained according to Firebase's standard retention policy (typically 90 days for individual crash events).

10. Children's privacy

The app is intended for use by adult emergency response personnel. It is not directed at children under 13, and we do not knowingly collect any information from children.

11. Security

On-device data is protected by the operating system's standard application sandbox. Crash reports are transmitted to Firebase over HTTPS. No system can be guaranteed perfectly secure; however, because the app does not transmit your callout content or location data off the device, the surface area for compromise is intentionally small.

12. International users

xeni CODE is based in Cape Town, South Africa. Crash reports processed through Firebase Crashlytics may be processed on servers operated by Google in the United States or other countries.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted in the app or in the relevant app store listing.

14. Contact

Questions, concerns, or requests about this policy can be sent to xenicode.company@gmail.com.