TrackM8 Privacy Policy

Effective Date: 30/09/2025

Welcome to TrackM8, operated by Fit4U (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy forms part of our Terms of Service (ToS) & End User License Agreement (EULA) and governs how we collect, use, share, and safeguard your information when you access or use the TrackM8 mobile application and associated services (collectively, the “App” and “Services”).

This Privacy Policy outlines the following:

• The types of information we collect;

• How we use and share that information;

• Your rights and choices under applicable laws (GDPR, LGPD, CCPA, etc.);

• How you can contact us with questions or requests.

TrackM8 is available globally via Google Play (published in Pakistan). As such, this policy reflects our commitment to comply with international privacy regulations, including: GDPR (EU), LGPD (Brazil), CCPA/CPRA (California), PIPA (South Korea), and others. If you have any questions about this Privacy Policy or our data practices, please contact us at fit4u.apps@gmail.com.

---

1. Information We Collect

We collect both non-personal data and personal data to provide and improve our Services.

Non-Personal Data

When you use our App, we may collect non-personally identifiable information such as:

• Device type and operating system

• Language settings

• Country and time zone

• General usage patterns and aggregated analytics

This information does not directly identify you and helps us improve the App’s functionality and performance.

Personal Data

We may collect personally identifiable information (“Personal Data”) from or about you. This includes data you provide voluntarily and data we collect automatically while you use the App. We do not collect any sensitive personal data categories (e.g. race, ethnic origin, political opinions, health, religious beliefs, or sexual orientation) and the app’s content is appropriate for a general audience (ages 13+). TrackM8 is not directed to children under the ages defined in Section 2.H, and we do not knowingly collect data from them.

Location Data Notice: If you grant permission, TrackM8 collects precise GPS location data including in the background (when the app is closed or not in use) to enable core features like real-time family tracking, geofence zone alerts, and SOS emergency notificationssupport.google.com. We only collect background location data with your consent, and you can disable or revoke location access at any time (though certain features will not function without it).

Categories of Personal Data Collected & Uses

Below is an overview of the Personal Data we collect, the purpose for collecting it, and our legal basis (under laws like GDPR and CCPA) for processing it:

• Registration Information (Full name, email, phone number, profile photo, password)
  Purpose: Account creation and management; enable login (email or Google) and authentication for access control.
  Legal Basis: Contractual necessity (to provide core app services). Legitimate interest (to send product updates and support communications, with opt-out available).

• Contact Information (Name, email, support messages)
  Purpose: To respond to inquiries, provide customer support, and gather feedback.
  Legal Basis: Legitimate interest (fulfilling user-initiated requests and improving service).

• Location Data (GPS coordinates, location history, geofence zones)
  Purpose: Provide real-time location tracking, navigation guidance, and location-based alerts (e.g. notify when a friend enters/exits a zone); enable consensual location sharing with other users.
  Legal Basis: User consent (granted via in-app permission prompts for location, including background location). Contractual necessity (the app’s core functionality relies on location features).

• Log Data (IP address, device information, crash logs)
  Purpose: Debugging issues, analyzing performance, and improving reliability/stability of the App.
  Legal Basis: Legitimate interest (to maintain a high-quality, stable service).

• Push Notification Tokens (Firebase Cloud Messaging token)
  Purpose: To deliver essential in-app notifications (e.g. SOS alerts, geofence alerts, account updates).
  Legal Basis: Legitimate interest (necessary for providing service-related notifications).

• Saved Routes & QR Codes (Custom routes you save; invite QR codes/keys)
  Purpose: Enable reusing favorite routes and connecting with others through invite codes or QR scans for mutual tracking.
  Legal Basis: Contractual necessity (feature is part of core service functionality).

• Third-Party SDK Data (Data from SDKs like Firebase, Google Maps, AdMob, Meta, etc.)
  Purpose: Analytics and crash reporting (Firebase); map services (Google Maps); personalized ad delivery (Google AdMob, Meta Audience Network); and other enhancements.
  Legal Basis: User consent (where required, managed via in-app or device settings for analytics/ads). Legitimate interest (to improve app performance and support monetization through ads).

• In-App Purchase Data (Google Play Order ID, purchase token – no payment card details)
  Purpose: Verify and fulfill premium feature purchases or subscriptions.
  Legal Basis: Contractual necessity (to provide paid content or premium services you’ve purchased).

• Photos & Camera Access (User-provided photos or camera access, optional)
  Purpose: Allow you to capture GPS-tagged photos or share images within the app’s context. Photos are stored locally on your device unless you choose to share them with others.
  Legal Basis: User consent (we will request permission before accessing your camera or photos).

• Emergency Contact Data (Phone numbers or contact info you manually add for SOS alerts, optional)
  Purpose: To send your SOS emergency alerts to chosen contacts. This data is provided directly by you and is used only for emergency communication features with mutual consent (the contact must accept).
  Legal Basis: User consent (you manually input and authorize use of this data for SOS features).

• Advertising Data (collected via third-party Advertising SDKs)
  Purpose: Serve relevant, interest-based advertisements via networks like Google AdMob and Meta Audience Network. We do not store or directly access personal ad identifiers, but third-party SDKs may collect device identifiers and app usage data to personalize ads.
  Legal Basis: User choice/consent (you can opt-out of personalized ads via your device settings or in-app preferences; see Opt-Out Options below).

• Microphone/Audio Data (access to microphone for voice features)
  Purpose: Enable voice input for certain features (e.g. voice navigation commands). Audio input is processed on-device in real time and not stored or sent to our servers.
  Legal Basis: User consent (requested via system permission for microphone). Contractual necessity (for features that rely on voice input).

Additional Processing Notes

• Scope of Processing: Our data processing activities may include collection, storage, usage, transmission, and deletion or anonymization of personal data as needed for the purposes described. We do not process data beyond what is necessary for the stated purposes.

• Fraud Prevention: We may use certain Personal Data to detect, prevent, and address fraud, security breaches, or other illegal or harmful activities involving our App. This is done to protect our users and our services.

• Combination of Data: If we ever combine non-personal data with your Personal Data (for example, linking general usage analytics with your account), we treat the combined information as Personal Data and apply all the protections described in this policy for as long as the data remains combined.

---

2. How We Use Your Information

We use the collected information in various ways depending on how you interact with TrackM8:

• Automatically Collected Data: Certain data are collected automatically by the app (with your permission) to enable core features. For example, location data is continuously collected (even in the background) once you grant permission, so we can provide live tracking and timely alerts. This automatic processing is necessary to fulfill our services as described in our contract with you.

• Data You Provide Directly: If you voluntarily provide information (for instance, contacting customer support or submitting feedback), we will use that information for the specific purpose it was given (e.g. responding to your support query) and as otherwise outlined in this Privacy Policy.

• Third-Party Integrations: If you choose to sign in via a third-party service (like Google sign-in) or if our app integrates analytics/advertising SDKs, we may receive information from those third parties. For example, we might receive analytics insights or crash reports from Firebase, or ad performance data from AdMob. Any data received from third-party integrations will be handled according to this policy and any additional terms of those third parties.

A. SDKs & Tracking Technologies

TrackM8 and select partners use software development kits (SDKs), cookies, and similar tracking technologies to enhance functionality, personalize your experience, and analyze usage. For transparency, here are key SDKs and tools in our app, their purposes, and links to their privacy information or opt-outs:

• Google Play Services (Android) – used for in-app billing and purchase validation. (Privacy: Google Play Privacy, Google Privacy Policy)

• Firebase (Google) – used for cloud infrastructure, remote configuration, Crashlytics (crash reporting), push notifications, A/B testing, in-app messaging, and performance monitoring. (Privacy: Firebase Privacy Policy)

• Advertising Networks – we integrate advertising SDKs such as AdMob, AdColony, AppLovin, Chocolate Platform, Facebook Audience Network, Index Exchange, Media.net, Mobfox, OpenX, PubMatic, Rubicon, Sharethrough, Yieldmo, etc. These SDKs may collect anonymized device and behavioral data to serve relevant ads and measure their effectiveness. While this data does not directly identify you, it helps us support the app through ads. (Opt-out tools for individual ad partners: AdColon, AdMob, AppLovin, Chocolate Platform, Facebook, Index Exchange, Media.net, Mobfox, OpenX, PubMatic, Rubicon, Sharethrough, Yieldmo.)

We continuously update our SDK usage to ensure compliance and will reflect any major changes in this Privacy Policy.

B. Data Sharing – Third-Party Recipients

We may share your personal data with trusted third parties in the following categories, but only for the purposes described below and in accordance with applicable privacy laws:

• Advertising Partners: Data shared: Device identifiers, general usage data, and (if you have granted permission) location data.
  Purpose: To display personalized ads within the app and measure ad performance. (For example, our ad partners might use your device’s advertising ID and coarse location to show relevant local ads.) We do not share any direct identifiers like your name or contact info with advertisers.

• Service Providers: Data shared: Whatever personal data is necessary for the provider’s service.
  Purpose: We use third-party vendors for services such as cloud hosting (to store and process data securely), analytics, customer support tools, fraud detection, and payment processing. These providers act on our behalf and are bound by contractual data protection obligations. They are not permitted to use your data for any purpose other than delivering the contracted services.

• Corporate Transactions: Data shared: All data we have collected (if necessary for the transaction).
  Purpose: In the event of a merger, acquisition, bankruptcy, or other corporate reorganization involving TrackM8, your data may be transferred to the successor or acquiring entity. In such cases, we will ensure the new owner continues to honor the commitments in this Privacy Policy regarding your personal data.

• Legal Compliance (Law Enforcement or Government): Data shared: Only the data required by law (we minimize whenever possible).
  Purpose: If we are required by a valid legal process (such as a subpoena, court order, or government demand) to disclose some of your data, we will comply with applicable law. We will only provide the minimum amount of information necessary and, when permitted, will inform you of such disclosures. We may also share information in good faith if needed to investigate or prevent fraud, security issues, or potential harm to any person, in accordance with the law.

We ensure all third-party recipients are obligated to protect your data. They must only use the information for the specified purposes and are required to maintain its confidentiality and security. We do not sell your personal information to third parties. Any sharing that occurs (for example, for personalized advertising) is done in a controlled manner and may be considered “sharing” for targeted advertising purposes rather than a sale (see Opt-Out Options below for how to opt out).

C. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy (and to comply with legal requirements). Retention periods vary depending on the type of data and purpose of processing:

• Basic account information and data associated with core services are kept while you maintain an account with us.

• If you request deletion of your data or close your account, we will delete or anonymize your personal data, unless certain data must be retained for legitimate reasons as outlined below.

Even after a deletion request, we may retain data for a limited time under these circumstances:

• To comply with legal, regulatory, tax, or accounting obligations (for example, some transaction records may be kept for financial auditing or compliance purposes).

• To resolve disputes, enforce our terms, or respond to customer service issues.

• If required for safety, security, or legal processes (e.g. we may preserve data if we reasonably anticipate litigation or need to investigate misuse).

When no longer required, personal data will be securely deleted or anonymized. Apart from the above scenarios, we do not commit to retaining data for any specific period and may delete records as part of routine data management without prior notice to you.

D. Security Measures

We implement robust security practices to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Physical Safeguards: Secure data center facilities and access controls for servers where data is stored.

• Technical Safeguards: Encryption of data in transit (HTTPS/TLS) and at rest, firewalls, and regular security audits/updates to our software.

• Administrative Controls: Limited and role-based staff access to data, confidentiality agreements, and privacy training for our team.

If you believe your account or data may have been compromised, please notify us immediately at fit4u.apps@gmail.com. In the unlikely event of a data breach that legally requires notification, we will inform affected users and relevant authorities in a timely manner as required by law.

E. International Data Transfers

TrackM8 is a global service. We utilize cloud infrastructure in multiple regions (including servers located in the EU, United States, and Asia) to ensure reliable service. This means your data may be transferred to or processed in countries outside your home jurisdiction, which could have different privacy laws.

Whenever we transfer personal data across borders, we take steps to ensure adequate protection, such as:

• Relying on Standard Contractual Clauses (SCCs) approved by the EU for data transfers from the European Economic Areafit4uapps.blogspot.com, or equivalent legal safeguards for other regions.

• Complying with local requirements – for instance, observing data localization laws or obtaining your consent for cross-border transfer if required.

By using the App, you acknowledge that your information may be transferred to facilities in other countries. However, no matter where your data is processed, we will protect it as described in this Privacy Policy and in line with applicable law. For more details on our data transfer mechanisms, you can contact us at fit4u.apps@gmail.com.

F. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. We honor all user rights granted by applicable data protection laws. These rights may include:

• Access: You can request a copy of the personal data we hold about you, as well as information on how we use it and with whom it’s shared.

• Correction: You have the right to ask for correction of any inaccurate or incomplete personal data we have about you.

• Deletion: You can request that we delete your personal data. We will honor deletion requests whenever possible, barring situations where we need to keep certain data (as explained in Data Retention above) due to legal obligations or other exceptions.

• Restriction/Object to Processing: You may have the right to restrict or object to certain processing of your data, such as opting out of marketing emails or personalized advertising.

• Data Portability: For data you provided to us, you can request a transferable copy in a usable format so you can re-use it with another service.

• Withdraw Consent: If we rely on your consent for any processing (such as optional data collection or marketing), you can withdraw that consent at any time. This will not affect the lawfulness of any processing already done while we had your consent.

• Complaint: You have the right to lodge a complaint with a relevant data protection authority or regulator if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us or submit a Data Subject Rights request. The easiest way is to email us at fit4u.apps@gmail.com with your request. We may provide a form (or direct you to an online form) to clarify and authenticate your request. For your security, we will need to verify your identity before fulfilling substantial requests (such as accessing or deleting data). We will respond to your request within the timeframe required by law (generally within 30 days, with possible extensions as allowed).

G. Opt-Out Options

As noted, we do not sell personal data. However, to the extent that we share certain identifiers for advertising, you may have the right to opt out of such “sharing”/processing for targeted ads. TrackM8 provides the following opt-out and preference options:

• Interest-Based Ads: You can opt out of personalized, interest-based ads by adjusting your device settings (for example, on Android, you can reset your advertising ID or enable the “Opt out of Ads Personalization” setting). We also honor any “Do Not Sell or Share My Personal Information” preferences where applicable (e.g., a link in-app or via website footer for California residents to opt out of data sharing for targeted advertisingfit4uapps.blogspot.com). Additionally, you can use industry opt-out tools such as: the Digital Advertising Alliance (DAA) opt-out in the US, the DAA of Canada, the European Interactive Digital Advertising Alliance (EDAA) in Europe, or the Network Advertising Initiative (NAI) opt-outfit4uapps.blogspot.com. These tools allow you to globally opt out of interest-based ads from participating networks.

• Analytics: To opt out of analytics data collection (such as Google Firebase Analytics), you can disable analytics in the app settings if available, or revoke the permission if our app requests it. You can also adjust your device’s privacy settings (for instance, on Android, you can turn off “Usage & diagnostics” sharing with Google). Contact us if you need assistance disabling analytics tracking.

• Push Notifications: If you previously consented to push notifications but no longer wish to receive them, you can turn them off at any time in the app settings or in your device’s notification settings for TrackM8.

If you need help opting out of any feature or data processing, please contact us at fit4u.apps@gmail.com, and we will gladly assist in honoring your request.

H. Eligibility & Children’s Privacy

TrackM8 is not intended for use by children or anyone below the minimum legal age in their jurisdiction. We define “children” as follows:

• Under 13 years old in the United States (consistent with COPPA).

• Under 16 years old in the European Union (consistent with GDPR provisions for minors).

• Or below the minimum age of consent for data processing as defined by applicable laws in other regions.

We do not knowingly collect personal data from children as defined above. The App’s features and content are designed for a general audience aged 13 and over, and we do not include any content that is inappropriate for this age group (e.g. no explicit or sensitive adult content). If we learn that we have inadvertently collected personal information from a child without proper parental consent, we will delete that data promptly from our servers. If you believe a minor has provided us with personal data, please contact us at fit4u.apps@gmail.com so we can take appropriate action.

We encourage parents and guardians to supervise their children’s app usage. Android and Google Play offer parental control features – we recommend using these tools to prevent children from installing or using apps that are not meant for them.

---

3. Jurisdiction-Specific Notices

TrackM8 by Fit4U is published in Pakistan but available to users worldwide. We strive to adhere to privacy laws in all regions. Below we provide additional notices for specific jurisdictions, as required by those laws:

A. California Privacy Notice (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You can request to know which categories of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

• Right to Delete: You can request that we delete personal information we have collected from you (subject to exceptions where we may need to retain certain data for legal or business reasons).

• Right to Correct: You can request that we correct any inaccurate personal information we hold about you.

• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information. As noted, TrackM8 does not sell personal data, but we may share identifiers for advertising which falls under “sharing” for targeted advertising – you can instruct us not to share your data for these purposes (see Opt-Out Options above).

• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of quality based on you exercising any CCPA rights.

To exercise any of these California rights, you (or your authorized agent) can contact us as described in Section 2.F (Your Privacy Rights). We may need to verify your identity and residency before fulfilling requests. For more details on our data practices, you can refer to the relevant sections of this Privacy Policy which outline the categories of data we collect and how we use/share them. You can also view our full CCPA Privacy Notice (available via the link in our app or website) for a breakdown of CCPA-specific disclosures.

Do Not Sell/Share: As stated, we do not sell personal information. If we engage in sharing of data (such as device IDs for ads), California residents can opt out by using the “Do Not Sell or Share My Personal Information” option in the app settings or by contacting us. We also honor browser signals like Global Privacy Control (GPC) as a valid opt-out of sale/sharing request, as required by lawfit4uapps.blogspot.com.

B. Colorado Privacy Act (CPA)

If you are a Colorado resident using TrackM8 for personal or household purposes, state law grants you the following rights (in addition to those described in Section 2.F):

• The right to confirm whether we are processing your personal data and to access that data.

• The right to correct inaccuracies in your personal data.

• The right to delete personal data we have collected from you.

• The right to data portability, i.e. to obtain your personal data in a portable and, to the extent feasible, readily usable format to transfer to another entity.

• The right to opt out of: (a) targeted advertising, (b) the sale of personal data (which we do not do), and (c) profiling in furtherance of decisions that produce legal or similarly significant effects (TrackM8 does not engage in such profiling).

• The right not to be discriminated against for exercising your privacy rights.

You may submit requests to exercise these rights via our contact information. We will respond within 45 days (and if needed, explain a valid reason for any extension of up to an additional 45 days). If we decline to take action on a request, we will inform you and provide instructions on how to appeal our decision. If an appeal is ultimately denied, you have the right to contact the Colorado Attorney General’s Office. Please refer to Your Privacy Rights (Section 2.F) for details on how to submit a request.

We do not process “sensitive data” (as defined by the CPA – e.g. data about race, religion, health, sexual orientation, biometric identifiers) without consentfit4uapps.blogspot.com. TrackM8’s data collection is limited to the categories and purposes described earlier in this policy.

C. Virginia Consumer Data Protection Act (VCDPA)

For Virginia residents (acting in an individual or household context, not in a commercial context), you have rights very similar to those listed for Colorado above:

• Access and Confirmation: To confirm whether we process your personal data and to access it.

• Correction: To correct inaccuracies in your personal data.

• Deletion: To request deletion of your personal data provided by or obtained about you.

• Data Portability: To obtain a copy of personal data you provided to us, in a portable and readily usable format.

• Opt-Out: To opt out of targeted advertising, any sale of personal data (we don’t sell data), or profiling for legal or significant effects.

• Non-Discrimination: The right not to receive discriminatory treatment for exercising your rights.

You can exercise these rights by contacting us as outlined above. We will respond within 45 days, with a possible 45-day extension when reasonably necessary. If we refuse your request, you may appeal the decision by replying to our response or contacting us, and we will review and respond to appeals within 60 days.

D. Connecticut Data Privacy Act (CTDPA)

Connecticut residents have rights comparable to the VCDPA (Virginia) rights listed above. In summary, you may:

• Confirm and access personal data we process about you.

• Correct inaccuracies in your personal data.

• Request deletion of your personal data (with similar exceptions).

• Obtain a copy of personal data you provided, in a portable format.

• Withdraw consent if a processing activity is based on consent (e.g., you can withdraw consent for optional data uses).

• Opt out of targeted advertising and sale of personal data (again, we do not sell data, and you can opt out of ads as described).

• Not be discriminated against for exercising these rights.

Our process for Connecticut requests is the same as other regions: contact us to exercise rights, verification may be required, and we will respond within the statutory timeframe.

E. Utah Consumer Privacy Act (UCPA)

For Utah residents, the UCPA provides rights to:

• Confirm whether we process your personal data and to access it.

• Delete personal data you provided to us.

• Obtain a portable copy of personal data you provided.

• Opt out of the sale of personal data or use of data for targeted advertising (TrackM8 does not sell data, and targeted advertising can be opted out as described).

• Not be discriminated against for exercising your rights.

Utah’s law is broadly similar to the ones above; we extend the same controls and options to Utah users. Contact us to make any requests, and we will respond as required (generally within 45 days).

F. Nevada Privacy Rights

Nevada residents have the right to opt out of future sales of certain personal information under Nevada law. TrackM8 does not sell personal data for monetary consideration. However, if you are a Nevada resident and would like to ensure that your data is not sold, you can send a verified request to fit4u.apps@gmail.com with the subject “Nevada Do Not Sell Request.” We will note your preference and inform you if our policies change.

G. Other Regions

For users in other jurisdictions not explicitly listed above, we are still committed to protecting your privacy. Even if your country or state does not have specific privacy legislation, we will strive to honor basic privacy rights such as:

• The right to access your personal data that we have collected.

• The right to correct or update your information.

• The right to request deletion of your data, when feasible.

If you send us a request regarding your data, we will process it in line with global privacy principles and respond within a reasonable timeframe (typically within 30-45 days). If we cannot fulfill a request, we will provide an explanation. We treat all users’ data with the same high level of protection, security, and respect, regardless of where you are located.

---

4. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will update the “Effective Date” at the top of the policy. In case of material changes (meaning changes that significantly affect your rights or how your data is handled), we will provide a prominent notice within the app or via email (if appropriate) to inform you. We encourage you to review this Privacy Policy periodically.

By continuing to use the TrackM8 App after an updated Privacy Policy has been posted, you acknowledge and agree to the changes. If you do not agree with the changes, you should discontinue use of the App and may request deletion of your data as described above.

5. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are here to help and will respond as promptly as possible.

• Email: fit4u.apps@gmail.com

• Subject Line: “TrackM8 Privacy Inquiry” (or similar, to ensure it reaches our privacy team)

Thank you for trusting TrackM8. Your privacy is important to us, and we are dedicated to keeping your data safe and secure.