SuperGhost
Privacy Policy
The short version
- No account. You never give us your name, email or phone number to use SuperGhost.
- We don't store your data. We don't keep a database of users, locations, searches or routes on our servers.
- No ads, no cross-app tracking. SuperGhost contains no advertising SDK. We use anonymous usage analytics (PostHog) to see which screens and features are used and to fix crashes. It never includes your location, searches or places.
- We never sell or share your personal information for advertising.
- Your simulated location stays on your phone. The simulation runs on your device.
- Some features need the internet: map tiles, search, routes and subscriptions work by passing requests through to the providers listed below, only as far as each feature needs.
This policy explains how SuperGhost (“SuperGhost”, “we”, “us”) handles information when you use the SuperGhost app for Android (the “App”). If you have questions, email superghost.dev.support@gmail.com.
1. Information the App handles
Your device location
With your permission (“while using the app” only), the App reads your device’s location to show your real position on the map and to offer “Current location” as a route start. This happens on your device. The App never requests background location.
Your location leaves your device only in these cases:
- when you choose “Current location” as a route start, those coordinates are sent to calculate the route; and
- when you search, the approximate area of the map (or your position) is sent as a hint so nearby results appear first.
The location you simulate
The point or route you choose to simulate is applied on your device, through Android’s mock location feature. We don’t receive it, except as described under “Searches, places and routes” when you look it up or calculate a route.
Searches, places and routes
To find places, name a dropped pin, or calculate a route, the App sends the relevant information to our server. That means your search text, the place you picked, the coordinates of a dropped pin, or the start and end of a route. Our server forwards the request to Google Maps Platform and returns the result to you. Our server does not store these requests or their results. It handles them in memory only for as long as it takes to answer.
History
Your recent spots and routes are saved only on your phone, so you can reuse them. They are deleted automatically after 30 days. You can remove them at any time by clearing the App’s storage or uninstalling the App.
Purchases
SuperGhost Pro is sold through Google Play. Google processes your payment, and we never see your card or payment details. To check whether your subscription is active, the App uses RevenueCat, a subscription service. RevenueCat receives:
- a random, anonymous app user ID,
- your purchase and subscription status from Google Play, and
- basic app and device information (such as the app version, platform and country).
Usage analytics and crash reports
The App uses PostHog, a product analytics service, to understand how the App is used and to fix problems. PostHog receives:
- a random, anonymous identifier created on your device (not linked to your name, email or Google account),
- app events, such as the screen you open, the app being opened or closed, the paywall being shown, a trial or subscription being started, or a simulation being started or stopped, together with the travel mode and the rounded distance of a route,
- crash and error reports, and
- basic app and device information, such as the app version, Android version, device model, language and approximate country (derived from your IP address).
Analytics never include your real or simulated coordinates, your searches, or the places and routes you pick. We don’t use analytics for advertising, and we don’t combine them with data from other apps or websites. The anonymous identifier is also passed to RevenueCat, so that subscription events (such as a trial starting or a renewal) can be counted in the same anonymous analytics.
Technical information
Like any internet service, our server provider (Cloudflare) sees the IP address of requests. We use it only in memory to limit abuse (rate limiting), and we do not store it. Cloudflare may keep limited logs under its own privacy policy.
2. Service providers
These providers process information on our behalf, or as independent services, to make the App work:
| Provider | What for | Their policy |
|---|---|---|
| Google Maps Platform (Maps SDK, Places, Routes, Geocoding) | Map display, search, addresses, routes | Google Privacy Policy |
| Google Play | App distribution and payments | Google Privacy Policy |
| PostHog | Anonymous usage analytics and crash reports | PostHog Privacy Policy |
| RevenueCat | Subscription status | RevenueCat Privacy Policy |
| Cloudflare | Hosting of our request-forwarding server | Cloudflare Privacy Policy |
The Google Maps SDK shown in the App may itself collect usage and device data. Google does this under the Google Privacy Policy, and it is outside our control.
3. What we don’t do
- We don’t sell personal information, and we don’t “share” it for cross-context behavioral advertising (as those terms are defined under California law).
- We don’t build profiles, and we don’t use your location to infer anything about you.
- We don’t use your information for advertising, and we don’t show ads.
4. Permissions the App asks for
- Location (while using the app): to show your real position and to start routes from it.
- Notifications: to show an ongoing notification while a simulation runs, with a Stop button.
- Mock location app (chosen by you in Developer options): so the App can provide the simulated location.
- Foreground service: to keep the simulation running while you use other apps.
You can withdraw any permission at any time in Android Settings.
5. Retention
We don’t keep your location, searches or routes on our servers. Anonymous analytics events are kept by PostHog for up to 12 months, then deleted. History on your device expires after 30 days. Our providers keep information according to their own policies, linked above.
6. Security
All connections between the App and our server, and between our server and Google, are encrypted (HTTPS/TLS). No method of transmission is perfectly secure, but we keep the information we handle to the minimum.
7. Children
SuperGhost is intended for adults and is not directed to children under 13. We don’t knowingly collect personal information from children under 13 (as defined by COPPA). If you believe a child has provided information through the App, contact us and we will help.
8. Your US state privacy rights
Residents of California and other US states with consumer privacy laws have rights over their personal information. These states include Virginia, Colorado, Connecticut, Utah, Texas and Oregon. Depending on your state, these rights include:
- Know and access: learn what personal information is handled about you.
- Delete and correct it.
- Opt out of its sale, of “sharing” for targeted advertising, and of profiling.
- Limit the use of sensitive personal information, such as precise location.
We don’t store your location, searches or routes on our servers, and we don’t sell, share or profile. Anonymous analytics are not linked to your name, email or account, so in most cases we cannot match them to you. Information held on your device is under your control. Information held by RevenueCat or Google can be accessed or deleted through them, and we will help you do so.
For the California Consumer Privacy Act (CCPA/CPRA), these are the categories of personal information handled in the last 12 months:
- identifiers: IP address, and the anonymous RevenueCat and PostHog identifiers;
- internet or other electronic network activity: anonymous app usage events and crash reports;
- commercial information: subscription status; and
- geolocation data: search hints and route points you choose to send.
We handle them only to provide the App. Precise geolocation is sensitive personal information, and we use it only as needed to provide the features you request.
To make a request, email superghost.dev.support@gmail.com. We respond within 45 days. We won’t discriminate against you for exercising your rights. You may use an authorized agent. If we deny your request, you may appeal by replying to our answer.
Do Not Track and Global Privacy Control: the App doesn’t track you across apps or websites. We treat a Global Privacy Control signal as a valid opt-out request, although we have nothing to opt you out of.
9. Where information is processed
Our providers may process information in the United States and other countries where they operate.
10. Changes to this policy
If we change this policy, we will update the effective date above. If the change is significant, we will also tell you in the App before it takes effect.
11. Contact
SuperGhost
superghost.dev.support@gmail.com