Privacy Policy

1. Data Controller

GhostTech ("the App") is operated by the GhostTech team. For any privacy-related queries, contact us at heslign@gmail.com.

2. Data We Collect

2.1 Google Authentication (Firebase Auth)

When you sign in with your Google account, Firebase Authentication stores:

• Your Google email address.
• A unique user identifier (UID) generated by Firebase.

We do not store passwords. Authentication is handled entirely via OAuth 2.0 through Firebase.

2.2 User-Generated Content (Community Feature)

If you register paranormal sites using the community feature, we store in Cloud Firestore the information you provide:

• Site name, description and category.
• GPS coordinates (latitude and longitude).
• Your author name (ownerName).
• Media files (images or videos) you voluntarily upload, stored on Cloudinary.

Content you publish is publicly visible to other app users.

2.3 Reports

When you report a site, we store in Firestore the report reason and the ID of the reported site (targetId). This information is used exclusively by administrators to moderate content.

2.4 Detection Features — 100% On-Device

The EMF radar, Ghost Vision SLS, EVP audio engine, AGSL night vision, digital geophone, waterfall spectrogram and surveillance mode process all data locally on your device. No sensor readings, camera images or audio are sent to any external server.

2.5 Usage Analytics (Google Analytics for Firebase)

We use Google Analytics for Firebase to collect anonymous/pseudonymous data about how the app is used, to help us improve it. This includes:

• Usage and interaction events: which features are enabled or disabled (camera, night vision, spectrogram, geophone, audio, Spirit Box, AI Voice, etc.), which sections/screens are opened (info, gallery, map, experimental, self-surveillance, learning center, settings), language changes, and PRO mode activations (via ad or purchase).
• Session metrics: session start, duration, first open, retention, and app updates.
• Technical/device data: device model, Android version, language, approximate country/region, and Analytics-specific identifiers (e.g. the app instance ID).

Usage analytics does not collect your photos, videos or audio recordings, camera or microphone content, or biometric data — all of that is processed exclusively on your device (see section 2.4). It also does not collect your precise location or your exact identity; your name or email are only used in the community and suggestions features described in this policy, which require your explicit action.

This data is processed by Google (Firebase / Google Analytics), which may involve international data transfers to Google's infrastructure. See Google's Privacy Policy and, optionally, how Firebase uses data.

We retain this data according to our project's Google Analytics retention setting, currently 14 months.

Legal basis: our legitimate interest in understanding real app usage to prioritize improvements and fix issues and, where applicable depending on your country of residence, your consent. You can limit tracking by resetting your Android device's advertising ID from Settings → Privacy → Ads. This feature is recommended for users aged 13 and up.

3. Third-Party Services

• Firebase (Google LLC) — user authentication, database, and usage analytics (Google Analytics for Firebase). See Google's Privacy Policy.
• Cloudinary (Cloudinary Ltd.) — storage for user-uploaded images and videos. See Cloudinary's Privacy Policy.

4. Data Sharing

We do not sell, rent or transfer your personal data to third parties for commercial purposes. Data is only shared with Firebase and Cloudinary to the extent strictly necessary for the service to function.

5. Data Retention

We retain your account data and published content for as long as your account is active. When you request account deletion, we will remove your data within a reasonable time frame as permitted by applicable law.

6. Your Rights

Depending on your country of residence, you may have the following rights:

• Access: know what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data.
• Portability: receive your data in a structured format.
• Objection or restriction: object to or restrict the processing of your data.

To exercise any of these rights, write to us at heslign@gmail.com.

7. Account Deletion

To request the complete deletion of your account and all associated data (published sites, reports, etc.), send an email to heslign@gmail.com with the subject "Account Deletion" and include the email address linked to your Google account. We will process your request within a reasonable time.

8. Children's Privacy

GhostTech is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the app after any changes constitutes acceptance of the updated policy.