Privacy Policy

Last updated: 8 October 2026

This is a translation. If it differs from the Vietnamese version, the Vietnamese version prevails.

1. Location data

xMap uses your device's GPS location to match you to the correct road segment, work out your speed, and warn you when you exceed the limit or approach a camera. Location is used only while you are using the app (foreground); we do not track your location in the background and we do not share your location publicly. While you are navigating, your location is also sent to our server to measure how accurate the speed limits are (see section 2). When you contribute a sign, the location at the time of capture is sent with it (see section 3).

2. Accuracy-measurement data

While you are navigating, each time the app answers a speed limit, xMap sends our server a record containing: your GPS position at that moment (latitude, longitude), the matched road segment and direction, the displayed limit with its kind and where it came from (a sign, map data, or a default rule), the match confidence, why the app did not sound an alert (if it did not), and the app version. If you are signed in, the record is linked to your account and is deleted when you delete your account. If you are not signed in, the record includes a random install id generated on your device, not linked to any account. This data is used only to measure how accurate the displayed speed limits are. Records are kept for 90 days, then deleted automatically. Position is still sensitive data, so records are protected like everything else (section 4).

3. Contributed data & image processing

When you use Sign detection, images from the camera are processed on your device (on-device) with a YOLO recognition model. Full-frame images are NOT uploaded to our server. For each sign recognised, the app uploads: a small cropped image containing only the sign (JPEG, up to 50 KB), the sign type, the GPS coordinates and heading at the time of capture, and the road segment it was matched to. This data is used for review; only after approval is the sign shown to other users.

4. Storage & security

Your account and contribution data is stored on our own self-hosted Supabase infrastructure and is encrypted in transit. Access to the data is limited by role and tightly controlled.

5. Sharing with third parties

We do NOT sell your personal data. Data is shared only with the technical services needed to run the app, and when required by law: the base map (CARTO, which sees your IP address and the map tiles you view) and crash reporting (Google's Firebase Crashlytics, release builds only).

6. Your rights

You have the right to view, edit and request deletion of your account and all related data at any time in Settings. When an account is deleted, your personal data is removed from our systems. If you use the app without signing in, contact us as described in section 7 to request deletion.

7. Contact

If you have questions about this privacy policy or want to exercise the rights above, please contact us by email: [email protected].

8. The xmaps.pro website

When you sign up for updates on xmaps.pro, we store your email address and the language of the page you were on, only to let you know when the app launches. To prevent automated sign-ups, our server also stores a hash of the IP address the sign-up came from instead of the address itself, used only to limit how many sign-ups come from one place. This email is not linked to any app account and is not shared with third parties. The data is held on our own self-hosted Supabase infrastructure, as described in section 4. To have your email removed, write to [email protected]. The page fonts are loaded from Google Fonts, so Google sees your browser's IP address when the fonts load. The website does not set tracking cookies. Cloudflare, which delivers the site, counts visits anonymously with Cloudflare Web Analytics (no cookies). It uses no other analytics tools.