Theme
Privacy Policy
Last updated: August 19, 2026
This Privacy Policy describes how Eagle Logistics ("we", "us") handles data in the With Tracker mobile application (the "App"). By installing or using the App, you agree to the practices described here.
If you have any questions, contact us at oscar@goeaglelogistics.com.
Summary
With Tracker is a privacy-focused location-tracking app. We do not collect, receive, or store your location data. Location is sent directly from your phone to the webhook endpoints you configure. We have no server in the path.
Data the App collects
Location data
- The App records your device's geographic location (latitude, longitude, speed, bearing, and a movement flag) only when you explicitly start tracking by tapping the start control in the App.
- Tracking does not start automatically on app launch, on device reboot, or on app reinstall. It stops when you stop it, and it stops on force-kill.
- Recorded location points are sent via HTTPS (or HTTP, if you explicitly configure an
http://URL after acknowledging a cleartext warning) directly to the webhook URL(s) you have configured in the App. We do not operate any server that receives, relays, or stores this data.
Data stored on your device
The App stores the following locally on your device, in the app's private sandbox (not accessible to other apps on a non-rooted device):
- Your list of configured Connections (label, webhook URL, optional bearer token, time window, metadata, and enabled flag) in a file named
connections.json. - The most recently recorded location point.
- A boolean flag indicating whether tracking was last on or off.
Tokens are stored in plaintext within the app sandbox. We recommend using device-level encryption (screen lock / full-disk encryption, which is on by default on modern iOS and Android) to protect this data. On a rooted or jailbroken device, this data could be exposed.
Data we receive
None. We do not operate a backend for the App. We do not receive your location, your tokens, your connection list, or any usage telemetry.
The only way we receive data is if you configure a webhook URL that points to a server we operate (for example, an Eagle Logistics endpoint). In that case, the data you send is governed by the privacy policy of that specific endpoint, not this App policy.
Third-party services and SDKs
The App contains no analytics SDKs, no crash reporters, no advertising SDKs, and no third-party data-sharing components. Specifically, the App does not include Firebase, Google Analytics, Sentry, Amplitude, Mixpanel, or any ad network.
The third-party components that touch the network or device sensors are:
| Component | Purpose | Network access |
|---|---|---|
| Tracelet | Location recording engine (GPS, motion, foreground service) | None — it only reads device sensors. |
| Dio | HTTP client used to POST to your configured webhooks | Only to URLs you configure. |
| flutter_map + OpenStreetMap tiles | Map rendering on the Home screen | Downloads map tiles from OpenStreetMap.org. See OSM privacy policy. No identifying information is sent beyond standard tile-request IPs. |
| app_links | Handles withtracker:// deep links for importing connection configs | None — reads incoming links only. |
All other dependencies (permission_handler, shared_preferences, path_provider, url_launcher, share_plus, package_info_plus, file_picker, uuid, go_router, flutter_riverpod, cupertino_icons) are local utilities with no network access.
The full dependency list is available in the App's pubspec.yaml.
Permissions the App requests
| Permission | Platform | Why |
|---|---|---|
| Location (When in use and Always) | iOS, Android | To record your location while tracking is active, including in the background when you have enabled it. |
| Motion / Activity | iOS, Android | To detect movement and let GPS sleep while stationary, saving battery. |
| Notifications | Android 13+ | To display the foreground-service notification required while tracking in the background. You can disable notifications in system settings; this will not stop tracking. |
| Foreground service (location) | Android 14+ | Required to keep tracking alive in the background. |
You can revoke any of these at any time via your device's system settings. The App will not function correctly without location permission while tracking is on, but it will not force-close or behave unpredictably.
Deep links
The App registers the withtracker:// URL scheme to allow importing connection configurations via a link or QR code. When you tap such a link, the App opens and pre-fills the connection form — it does not auto-import. You must review and confirm before anything is saved. No data is sent anywhere by opening a deep link.
Children's privacy
The App is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided data to a webhook you operate, please contact that endpoint's operator.
Data retention
Because we do not receive your data, we have nothing to retain. Data stored on your device remains until you:
- Delete individual Connections in the App,
- Uninstall the App (which removes the app sandbox and all stored data), or
- Clear the App's data in system settings.
Data sent to your configured webhooks is retained according to that endpoint's policy, which is outside our control.
Your rights
Since we hold no data about you, most data-subject rights (access, deletion, portability) do not apply to us. For data held by a webhook endpoint you configured, contact that endpoint's operator.
You can exercise control over on-device data at any time by deleting Connections or uninstalling the App.
Changes to this policy
We may update this Privacy Policy. When we do, we will update the "Last updated" date above and, for material changes, bump the App version. Continued use after a change constitutes acceptance.
Contact
Questions about this policy or the App's data practices:
- Email: oscar@goeaglelogistics.com
- Entity: Eagle Logistics github.com/eagle-logistics/with-tracker.