Camvaya Privacy Policy

Effective date: November 14, 2026

This policy describes the Camvaya Android app (com.synclusive.geotag) as currently configured. It explains what information the app uses, where it is stored, what leaves the device, and what controls are available. Optional Firebase sign-in, optional Firebase Analytics, and Google Mobile Ads banner, interstitial, and App Open ads are enabled in the production release.

At a glance

Information Camvaya uses

Location

When you grant location permission and use camera or batch features, Camvaya obtains the device's current location. It uses coordinates to show the location, find an address and map image, and create the stamp. The coordinates, timestamp, address, and selected details may be written into the stamped image (including EXIF metadata) and kept in the app's local capture database for the photo roll and reports.

When importing a photo, Camvaya can read that photo's existing EXIF location. If it has no location, you may choose a location manually; the image and record identify that location as manually set. Camvaya does not request background location access.

Photos and files

Camera images and selected imported images are processed on the device. Camvaya saves stamped photos to the shared Pictures/Camvaya folder. It creates a stamped output and does not overwrite the imported original. The output may contain GPS coordinates, date/time, address, notes, and other fields you chose to display, both visibly and in metadata.

Video recording can include microphone audio if you grant microphone permission and leave audio enabled. Recordings and watermarked exports are saved on your device; the original recording is preserved when you export a stamped copy. If Dynamic GPS is selected, measured location samples are kept in app-private files on the device to render the overlay and recover interrupted recordings. These samples are not uploaded by the app. They remain until app data is cleared or Camvaya is uninstalled, subject to Android backup settings.

Project reports and exports can contain photos, coordinates, addresses, timestamps, project details, and notes. On supported Android versions they are saved to Downloads/Camvaya; you can then share them using Android's share sheet. QR codes in reports may encode a map link for a location.

Project and customization information

If you use these features, Camvaya stores your project names, client/site labels, notes, watermark presets, custom stamp text, and company branding or logo locally on your device. These items may also be included in a photo or report when you choose those options.

Camera, sensors, and notifications

Camera permission is used for photo and video capture. Microphone permission is used only when audio is enabled for video recording; audio is stored in the local video file. If enabled in a stamp or Dynamic GPS video, compass or magnetic-field readings are obtained from device sensors and included only when available. Notification permission is used for batch-processing progress notifications; Camvaya does not need it for photo capture.

Information sent to other services

Camvaya has no Camvaya-operated server for photo or location storage. Network services are contacted only for the feature being used:

ServiceInformation and purpose
Android platform geocoderCoordinates may be passed to the geocoding service provided by Android or the device manufacturer to resolve an address. Its network behavior and provider are controlled by Android/device services.
OpenStreetMap NominatimIf the platform geocoder cannot provide an address, Camvaya may send the coordinate to Nominatim for reverse geocoding. The request also exposes ordinary network information such as your IP address. See the OpenStreetMap Foundation Privacy Policy and Nominatim Usage Policy.
Esri ArcGIS and OpenStreetMap tile serversWhen a map thumbnail is requested, Camvaya requests map tiles for the area around the selected location. Tile requests reveal the map area and ordinary connection information such as your IP address. Map data is cached on the device. See Esri's Privacy Statement, the OpenStreetMap Foundation Privacy Policy, and OSM Tile Usage Policy.
Open-MeteoOnly if you turn on the optional weather stamp field, Camvaya sends the coordinate to fetch weather information. Weather is off by default. See Open-Meteo Terms and Privacy.
Firebase AuthenticationIf you choose Google sign-in, your Google account identifier and authentication data are processed by Firebase to create and authenticate your Camvaya account. Camvaya does not upload photos, GPS records, projects, or presets to Firebase.
Firebase Analytics (optional)Firebase Analytics is enabled by default and receives screen-view and related app-usage events, plus app/device information and a pseudonymous app-installation identifier, to measure use and improve the app. Camvaya does not include photo content, photo EXIF, precise GPS coordinates, addresses, notes, logos, email addresses, or account IDs in these Analytics events. Google processes this information under its Privacy Policy. You can turn Analytics off at any time in Settings > Privacy; doing so stops future Analytics collection from the app.
Google Mobile AdsThe production release can request banner ads, interstitial ads at selected navigation/workflow breaks, and App Open ads when the app returns to the foreground, subject to consent, premium entitlement, ad availability, and frequency limits. Google Mobile Ads may collect and share IP address, product interactions, diagnostics, and device/account identifiers for advertising, analytics, and fraud prevention. Camvaya does not pass precise location or photo content to the ad SDK. See Google's Play data disclosure and Google's Privacy Policy.
Apps you choose to share withIf you share a photo or report, Android passes that file to the app or recipient you select. The shared file may contain location and other stamp/EXIF information. The recipient's own privacy terms apply.
Google Play and Firebase Cloud FunctionsIf you purchase or restore a subscription, Google Play processes payment and provides the purchase token to Camvaya. The app sends the token over an encrypted connection to an authenticated Firebase callable function, which forwards it to the Google Play Developer API to verify the subscription. Firebase Firestore stores a SHA-256 hash of the token (not the raw token), your Firebase user ID, product and base-plan IDs, entitlement tier, expiry time, subscription state, and verification/revocation timestamps. The raw token is used for verification and is not written to Firestore or Analytics. Google Play processes payment information under Google's Privacy Policy.
Firebase Cloud Functions and FirestoreThese services verify subscription status and keep the account's entitlement current. Real-time Play notifications are checked against the Google Play Developer API. No photos, videos, GPS tracks, addresses, or project records are sent to these services.

Camvaya caches map tiles and reverse-geocoding results locally to reduce repeat requests and support limited offline use. A cache hit may avoid a new request. Disabling the map field avoids map-tile requests; leaving weather off avoids weather requests. Address lookup may still contact the platform geocoder or Nominatim when needed.

Account services, advertising, and purchases

Google sign-in is optional for free camera use and is required to associate and restore a subscription entitlement. If you use it, Firebase Authentication processes your Google account identifier and authentication data to provide your Camvaya account. Sign-in does not upload your photographs, videos, GPS records, projects, or presets. You can request account deletion through the Camvaya account deletion page.

Google Play Billing is integrated. Purchase verification is performed by deployed Firebase Cloud Functions using the Google Play Developer API; the server grants an entitlement only after Play confirms it. Firestore stores the account-linked subscription status described above. On verified account deletion, a Firebase Auth deletion trigger removes that account's subscription records and associated token-hash records from Firestore. Deleting a Camvaya account does not cancel a Google Play subscription; manage or cancel it separately in Google Play.

The production release uses banner, interstitial, and Google App Open ads. The banner can appear below the camera controls and on supported browsing screens. Interstitial ads may appear only when opening the photo gallery or after five completed photo workflows, after a 90-second launch grace period, with a three-minute cooldown and a maximum of two per app session. They are never shown during capture or processing. App Open ads may appear when the app returns to the foreground after the first use and when a fresh ad is available, with a four-minute cooldown and a maximum of two per session. Google UMP handles consent where required; the app requests no ads until UMP permits it. Premium entitlements suppress ads. The ad-test build uses Google's test units for all configured placements.

Google Mobile Ads may collect and share IP address, product interactions, diagnostics, and device/account identifiers for advertising, analytics, and fraud prevention. Camvaya does not pass precise location or photo content to the ad SDK. Firebase Analytics is separate from advertising analytics, is on by default, and can be disabled in Settings > Privacy. The app does not include a separate crash-reporting SDK.

Storage, backup, and retention

Camvaya stores settings, presets, project records, capture records, address cache, and Dynamic GPS video location samples in app-private storage on the device. Images, videos, and reports saved in shared storage remain there until you delete them using your gallery or file manager. Deleting media from the gallery may not delete a separate local capture record. Clearing Camvaya's app storage or uninstalling it removes app-private records and settings; shared media and reports are not automatically removed.

Android backup: the app currently permits Android backup. If Android backup is enabled on your device, Android may copy eligible app-private data to the Google account/device backup service and restore it later. Camvaya does not receive or manage those backups. You can review or disable backup in Android system settings. Photos in shared storage may separately be backed up by Google Photos or another gallery/cloud app according to that app's settings.

Local records and Dynamic GPS samples remain until app data is cleared or Camvaya is uninstalled, subject to Android backup and restore settings. Cached map and address data may be evicted by the app or Android. Subscription verification records remain linked to the account while it exists and are removed from active Firestore collections when account deletion is processed.

Your choices

Children's privacy

Camvaya is a general-purpose camera app and is not designed for children. Camvaya does not knowingly collect children's personal information through a Camvaya-operated server.

Changes to this policy

We will change the effective date when this policy is revised. Material changes to data collection or sharing will be reflected here before the affected features are enabled for users.

Contact

Privacy contact: davidmani2004@gmail.com

Publisher/legal entity: Camvaya (GPS Map Camera: Camvaya)