GPS Tracker: WinterThis privacy policy applies specifically to the GPS Tracker: Winter app and supplements the general privacy policy of this website, which covers visiting the website itself.
1. Data Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Core Principle: Local Data Processing
GPS Tracker: Winter is designed so that all data – saved places, recorded runs, route photos, emergency contacts, and settings – is stored exclusively on your iPhone or iPad. There is no developer-operated server that this data is transmitted to. The app does not track you, does not include any analytics or advertising SDKs, and does not build usage profiles. The app requires no user account and no sign-in.
3. Location Data (GPS)
Your GPS location is used to record runs, lifts, and breaks, show them on the map, and calculate speed and altitude. Location data is processed exclusively on the device and only collected with your consent.
4. Recording in the Background
While a recording is running, the app keeps tracking your location even when the screen is locked or you switch to another app – otherwise your recorded track would have gaps. Background recording only runs while you have actively started a recording and stops as soon as you end it.
5. Motion and Elevation Data
For vertical metres and distances covered on foot, such as waiting in a lift line, the app uses your device's motion sensors (step counter) and barometric sensor (altimeter). These values are processed exclusively on the device and stored together with the respective recording.
6. Camera and Photos
Photos you take during a recording are stored in the app folder on your device. A photo is only copied to your Photos library if you explicitly enable that.
7. Health Data (Apple Health)
If you grant access, GPS Tracker: Winter reads your heart rate, active energy, and body weight from the Health app to show them alongside your recording. Every finished recording is also saved to Health as a workout. This health data never leaves your device: it is neither shared with the developer nor with any other service, is explicitly not transmitted to the app's iCloud database – not even with iCloud Sync enabled – and is not sent to your Apple Watch. The energy value estimated from body weight and active time is not an Apple Health value and is treated exclusively locally, like the other metrics. You can revoke access at any time in iOS Settings.
8. Emergency Contacts
In the "I Need Help" feature, you can store the name and phone number of emergency contacts so you can reach them quickly if needed. This information is stored exclusively on your device (or, with iCloud Sync enabled, in your own private iCloud database) and is never transmitted to the developer or any third party.
9. Apple Watch
If the Watch app is installed, you can start, pause, and stop a recording right from your wrist and read your current metrics there. This transfer runs through Apple's own device-to-device connection between iPhone and watch (WatchConnectivity); no developer server is involved. During a recording, the watch may also briefly capture your heart rate itself through its own workout session, to update the values on the iPhone more frequently – the finished workout is only ever saved through the iPhone, as described in section 7.
10. Live Activity and Home Screen Widget
The Live Activity on the Lock Screen/in the Dynamic Island, as well as the Home Screen and Lock Screen widget, show only values from your current or most recent recording. They read these values through an on-device, shared storage location (App Group) and do not collect any additional data themselves.
11. Map Data (OpenStreetMap)
Piste, lift, and cross-country trail data comes from OpenStreetMap contributors and is stored entirely inside the app on your device. Displaying runs, lifts, and huts and matching your ride to them sends no request to OpenStreetMap or any other server, and your location is never transmitted for it – this also works without an internet connection. The full attribution is available directly in the app under "Map Data" in Settings.
12. iCloud Sync
You can optionally enable syncing your data via iCloud. In that case, your recordings including their tracks, photos, emergency contacts, and settings are synchronized between your Apple devices through your own, private iCloud account (CloudKit). This transfer takes place exclusively via Apple's own iCloud infrastructure; the developer has no access to this data. Apple's privacy policy additionally applies: apple.com/legal/privacy. You can disable iCloud sync at any time in the app's settings; health data is excluded from this (see section 7).
13. Access Permissions at a Glance
The app requests each permission (location, motion, camera, photo library, Apple Health) individually, the first time the corresponding feature is used, with an explanation of its purpose. You can revoke granted permissions at any time via the iOS system settings; the app otherwise remains fully usable, only that particular feature becomes unavailable.
14. Legal Basis
The described data is processed to provide the app functions you requested (Art. 6 (1) (b) GDPR) and, in the case of optional iCloud sync and optional health data, on the basis of your explicit consent (Art. 6 (1) (a) GDPR).
15. Disclosure to Third Parties
Your app data is not shared with third parties, except for the described, technically necessary processing by Apple in connection with iCloud, Apple Health, Apple Watch, and the Apple frameworks used. OpenStreetMap map data is used only locally; no data is transmitted to OpenStreetMap.
16. Your Rights
Since your app data is stored exclusively locally or in your own iCloud account, you always have full control over it: you can view, edit, and delete saved places, recordings, and emergency contacts directly in the app; "Delete All Data" in Settings permanently removes all data from your device (and optionally also from your private iCloud database). Subject to the applicable legal requirements, you also have the rights to access, rectification, erasure, restriction of processing, objection, and data portability.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller (based in Essen, North Rhine-Westphalia, Germany) is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW – State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de
Web: ldi.nrw.de
17. Last Updated
September 2026