Privacy Policy

Applies to the mobile application TUVAMBES GeoCam : GPS Camera (package com.tuvambes.geocam) and this page.

TUVAMBES GeoCam is built to be private by design. It is a GPS camera that works almost entirely on your own phone. We do not run a server that receives your photos, videos or location, we do not ask you to create an account, and we do not sell your data. If you turn on Google Drive backup (Pro), the captures you choose are copied from your phone straight to your own Google Drive — never to us. This policy explains, in plain language, exactly what the app does with information and the few cases where information leaves your device.

1.Who we are

TUVAMBES GeoCam (the “App”) is developed, published and copyrighted by TUVAMBES Technologies, a division of TUVAMBES Enterprises. TUVAMBES Technologies is the technology division of TUVAMBES Enterprises and is responsible for designing and building the company's software and IT solutions, including this App.

TUVAMBES Enterprises is the registered business that operates the App and is the entity responsible for your information (the “data fiduciary” / data controller) for the limited purposes described here. In this policy, “TUVAMBES”, “we”, “us” and “our” refer collectively to TUVAMBES Technologies and TUVAMBES Enterprises. Our contact details are in section 19.

2.Scope & your consent

This policy applies to your use of the App and this website. It does not apply to third-party services the App connects to (section 6), which are governed by their own privacy policies, or to any separate services of TUVAMBES Enterprises.

By installing and using the App, and by granting the permissions it requests, you consent to the practices described in this policy. Where your consent is the legal basis for processing, you may withdraw it at any time by revoking the relevant permission or turning off the relevant optional feature (see sections 7 and 14); withdrawal does not affect processing already carried out. Where we rely on other lawful bases, we do so only to provide the App you asked for, to comply with law, or for our legitimate interest in operating the App securely.

3.Our privacy-first approach

The App is an on-device GPS camera: your captures are made and kept on your phone. In normal use:

• There is no TUVAMBES account, login, or user profile. If you connect Google Drive, you sign in to your Google account on Google's own screen; TUVAMBES never receives your Google password or access tokens.
• The App sends your photos, videos and location to no TUVAMBES server, cloud database, or media storage — your captures stay on your phone. The one exception is a file you choose to upload to the online checker on our website, which is checked and deleted immediately (section 10). With Google Drive backup turned on, the captures you choose are copied from your phone directly to your own Google Drive account, not to us (section 6).
• We use no third-party analytics, tracking, advertising-profiling, or crash-reporting SDK of our own beyond the advertising component described in section 8.
• Your photos and videos, the GPS “GeoStamp” overlay, and the map are all created and composited locally on your device.

4.What we do not collect

We do not collect, store, sell, rent, or share:

• Your photos or videos — a file you upload to the online checker is only checked and then deleted immediately, never kept.
• Your location history or a record of where you take pictures.
• Your name, email, phone number, or contacts (we never ask for them in the App). If you connect Google Drive, Google gives the App your Google account's email address; it is kept only on your phone, to show which account is connected and to keep uploading to it, and is never sent to us.
• Any behavioural profile, usage analytics, or advertising profile built by us.

Because there is no account and we keep no uploaded files, there is no personal dataset held by TUVAMBES that could be exported, sold, or breached.

5.What is processed on your device

To do its job, the App reads the following on your device, at the moment you use a feature, and writes the result into the photo or video you choose to keep:

• Camera image and video — the picture or clip you capture.
• Dual camera (optional, all plans) — uses the rear and the front camera together. On phones that can run both cameras at the same time, the front camera shows live beside the rear camera for as long as Dual camera is on, both photos are taken at the same instant, and a Dual video records both cameras into one video with the GeoStamp. On other phones, the App takes one photo with each camera when you press the shutter, about a second apart, with an on-screen indicator naming the camera in use, and video is not available while Dual camera is on (see the Terms). The pictures are put together on your device (picture-in-picture or split screen) or kept as a linked pair of photos. The App does not detect, recognise or analyse faces, and nothing is uploaded; the separate camera shots are deleted once the capture is saved. A PDF report of a Dual camera photo also lists both cameras' details.
• Portrait + landscape (optional, all plans) — when turned on, each photo or video is also saved in the other orientation: a second file cropped from the middle of the same frame on your device, kept and signed together with the first.
• AR measure (optional, on supported phones) — only while the AR measure screen is open, the camera image and motion sensors are processed on your device by Google Play Services for AR (ARCore) to find surfaces and place the points you add. With Detect, the App itself also analyses the camera image — and, for a box or a cylinder, ARCore’s depth — on your device, to find a shape’s outline (a rectangle, a circle or a patch), a box’s or cylinder’s size, or the corner or edge a point snaps to; these are used only to place the points, and are not kept or uploaded. When you take the photo, the measurement lines are drawn into it on your device. Nothing from this screen is uploaded by the App, and the App does not turn on ARCore's cloud features (Cloud Anchors or the Geospatial API). See section 6.
• Barcode / QR scanner (optional, all plans) — only while you have Scan code switched on in the camera, the camera image is read on your device by Google ML Kit's barcode model, which is built into the App (nothing is downloaded), to find barcodes and QR codes. The camera images are not kept or uploaded. The code you keep — its type and contents and when it was read — is written into the GeoStamp of your next capture and kept in that capture's gallery record, its signed record (section 10) and, if you export them, its PDF and Excel reports (as the Asset ID). The App does not open links or act on what a code contains; Copy puts it on your phone's clipboard only when you tap it.
• Which way the phone pointed — at each photo or video, the phone's tilt (from its motion sensor) and its compass direction, worked out on your device and kept in the capture's gallery record and signed record, so a later photo can be lined up with it (Ghost overlay). Nothing is uploaded.
• Ghost overlay — Before & After (optional) — a photo you pick (from the App's gallery, or from your phone with Android's own picker) is shown over the camera on your device to help you take a matching photo. On Plus and Pro the new photo's gallery and signed records link it to the earlier one (a pair ID and, on Pro, the earlier file's SHA-256 fingerprint). Side-by-side images and wipe videos you choose to make are created on your device and kept in the App's gallery. A Before photo picked from the phone is chosen in Android's own photo picker, which gives the App only that one photo — never access to your other photos. A reduced-size copy (at most 2048 pixels) is kept in the App's private storage, so the After photos taken against it can be paired with it and shown with it in the Before & after images, wipe videos and reports you make; the copy is deleted once no capture taken against it remains. A photo picked from the phone is not a GeoCam capture: it carries no GeoCam signature, and the App does not read or record where or when it was taken (on Pro, only its SHA-256 fingerprint is recorded in the After photo's signed record). Nothing is uploaded.
• On-photo measure (optional) — the points you place on a photo in the review and the real length you enter for a reference (for example a card or an A4 sheet). The measurement is worked out and drawn into the photo on your device.
• Microphone audio — only while you record a video, to include its sound.
• GPS location and sensors — latitude/longitude, altitude, accuracy, direction/compass, and speed, used to build the GeoStamp overlay (coordinates, address, Plus Code, map, and time) and to show your position; and — only when your GeoStamp template shows them — magnetic field and battery level.
• Date and time — from your device clock.
• Your company logo (optional) — an image you pick, kept as a small copy (at most 512 px) in the App's private storage and placed on your captures.
• Photo mark-up (optional) — drawings, shapes and text you add to a photo on the review screen. They are drawn into the photo on your device before it is saved; the GeoStamp area is kept free of marks.
• Collections, saved locations and notes — the names, client/site details and notes you type, kept in the App's private storage.
• Map of your captures — the saved positions of your own captures, shown as markers on the in-app map (captures within 20 metres share one marker) and filtered by date on your device. The markers are drawn on your device; the map tiles for the area you view come from Google (section 6).
• Photo and video details — the details screen reads a file's own information (size, resolution, length, EXIF data) on your device.
• Gallery thumbnails — small preview images of your photos and video frames, made on your device and kept in the App's private cache to show the gallery. A thumbnail is removed when you delete its capture, and the system may clear the cache at any time.
• PDF reports (optional) — made on your device when you export a capture or a collection. A report contains reduced-size copies of the photos and video frames together with their details (date, time, coordinates, Plus Code, address, collection names and notes). It is kept temporarily in the App's cache and leaves the App only when you share it or save it to your phone's Downloads folder from Reports.
• Excel reports (optional, Pro) — made on your device in the same way as PDF reports: a spreadsheet listing your captures' details (file name, date and time, coordinates, Plus Code, address, collection, measurements, scanned codes and whether each is signed) — no photos are put in it. It is kept temporarily in the App's cache and leaves the App only when you share it or save it to your phone's Downloads folder from Reports.
• Before & after images and videos (optional, Plus and Pro) — made on your device from a Before photo and the After photo taken against it; kept in the App's gallery when you choose Save, and leave the App only when you share them.
• Compass accuracy — when your GeoStamp shows the compass or the direction, the App reads the accuracy your phone reports for its compass, on your device, to ask you to calibrate it before a capture. Nothing is kept or uploaded.
• Video qualities — what your phone's camera can record (for example 8K, 60 fps at Full HD and 4K, video stabilisation) is read on your device to offer only the qualities it supports. Nothing is sent anywhere.
• Your acceptance of these terms — the version of the Terms & Privacy disclosure you accepted, the plan it was for and the date and time, kept only in the App's private storage on your phone and shown under Settings › Terms & Privacy.
• Capture evidence (on unless you turn it off: Settings › Security & authenticity › Record satellite time & GPS signal) — at the moment of capture, the App reads what your phone already knows: its satellite (GNSS) time and network time, whether automatic date & time is on, how many satellites it was using and could see and their systems (for example GPS, Galileo or NavIC), and the phone's maker, model and Android version. The App does not contact a time server or turn the GPS on for this. These details go into the capture's signed record (section 10).
• Originals kept beside edits (on unless you turn it off: Keep the original when editing) — when you add mark-up or measurements to a photo, the photo as captured is also saved and signed in the App's private storage, linked to the edited copy. It is deleted together with the capture.
• The camera's unstamped photo (off unless you turn it on: Keep the camera's unstamped photo) — the camera's own photo, before the GeoStamp is added, is also saved and signed with the capture. It uses about twice the storage.
• Custody log (on unless you turn it off: Keep a custody log) — a short record, kept with each capture in the App's private storage, of when it was captured and signed, saved to your phone gallery, shared, put in a report or checked, with the file's name, size and SHA-256 fingerprint at that moment. Each entry is signed with your phone's hardware key. It is never uploaded and leaves the App only inside an evidence package you share.
• Google Drive settings (only if you connect Google Drive) — the connected Google account's email address, what the backup takes (photos, videos, kept originals and camera photos, chosen collections), the Drive folder name you choose, how it is divided, the network choice (Wi-Fi only, or Wi-Fi and mobile data), which captures you asked to back up and the list of files waiting to upload, kept in the App's private storage on your phone. For a capture kept only in Google Drive, a small preview (at most 1024 px) stays in the App's private storage so the gallery can show it.
• Verification reports and evidence packages (optional) — made on your device when you choose Export report (PDF) or Export evidence package after checking a file. A report lists each checked file's name, size and SHA-256 fingerprint, the result, and the contents of its signed record (including the time, location, phone details and any measurements). An evidence package (a ZIP file) also contains the files themselves and the custody log. They are kept temporarily in the App's cache and leave the App only when you share them.

This information is used to produce your capture. When you keep a capture, it is saved in the App's private storage on your device (the in-app Gallery). It is copied to your phone's photo gallery only when you choose “Save to phone gallery” (for one capture, a selection, or a whole collection), and it leaves the App only when you share or export it, or when the Google Drive backup you turned on copies it to your own Google Drive (section 6). Location is used only while you are actively using the App — there is no background location tracking.

Restore from the phone gallery reads only the photos and videos you pick in Android’s own picker, checks them on your phone, and copies GeoCam’s own captures taken on this phone back into the App; nothing is uploaded and your phone gallery is not changed.

Copies you save to your phone gallery or share are then handled by your device and the apps you choose — for example, other apps allowed to access your photos, or a cloud photo backup you have turned on — and are outside the App's control.

6.When information leaves your device

A few features rely on third-party services. When you use them, the App sends the minimum data needed, over an encrypted (HTTPS) connection, directly from your device to that provider. We do not receive or store that data ourselves. Each provider handles the data under its own privacy policy.

Google Drive backup & restore (optional)

Google Drive backup (Pro) copies the captures you choose to your own Google Drive; every capture stays on your phone. Restore from Google Drive (any plan) brings them back, for example on a new or reset phone. Both are off unless you use them in Settings › Storage. Before Google's sign-in opens, the App shows what connecting means and asks you to continue.

• What the App asks Google for. Two things, on Google's own account picker and consent screen: access to only the files and folders the App itself creates in your Google Drive (Google's drive.file permission), and your account's email address. The App cannot see, open, change or delete any other file in your Drive. It never sees your Google password; Google Play services keeps the access tokens on your phone.
• How the App uses this Google user data. Only to provide the backup and restore you use: to create the folder you choose (and its year/month or collection subfolders), copy your captures into it, check each backup (the copy in Drive must match the file on your phone byte for byte), list the files it created when you restore, bring captures back to the App when you ask, and show which account is connected. The email address and the IDs of the files the App created are kept only on your phone.
• What is backed up. What you choose: photos, videos, and — if you include them — the original beside an edited photo and the camera's unstamped photo; all captures, or only those in collections you choose; and any captures you select in the Gallery. Each is copied exactly as saved, including what it contains: the picture or video (and anyone in it), the location, address, time and other GeoStamp details, the standard photo and video details (EXIF) and the signed record (section 10). Captures taken before you turned the backup on are backed up only if you ask. Nothing else (settings, collections, notes, saved locations, custody logs) is uploaded.
• Where it goes, and when. Directly from your phone to Google over an encrypted (HTTPS) connection, in the background — even when the App is closed — whenever the network you chose is available: Wi-Fi only by default, or Wi-Fi and mobile data if you allow it (your mobile operator may charge for data). There is no TUVAMBES server in between.
• Free up phone space (off by default). When you turn it on, once Google Drive confirms a backup byte for byte, the App removes its own copy from its gallery (its private storage) and keeps a small preview; a copy you saved to your phone gallery is never removed. To share, verify or export such a capture, download it back (checked against Google Drive).
• Restore from Google Drive (any plan). The App lists only the files it created in the Google Drive you connect, downloads to your phone the captures not yet in its gallery (over your current connection) and checks each one's GeoCam signature on the phone. Your files in Drive are not changed.
• Limited use. The App's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the backup, restore and download features you see in the App; it is never sent to us, sold, transferred to others, used for advertising, or read by people.
• Your control. Disconnect any time in Settings › Storage — uploads stop and the App asks Google to revoke its access — or remove the App's access in your Google Account (Security › Your connections to third-party apps & services). Files already in your Drive stay there, under your control; delete them in Google Drive if you want. Deleting a capture in the App does not delete its copy in your Drive, and the App deletes nothing in your Drive except a copy that arrived damaged during a backup (moved to the Drive trash and sent again).
• If your plan lapses, new backups pause (they continue if you subscribe again); on any plan you can still download captures kept only in Google Drive and restore your backups.
• Google's role. Google Drive is a Google service: files there are stored and processed by Google under the Google Terms of Service and the Google Privacy Policy, use your Google storage, and may be stored outside your country.

7.Permissions and why we ask

The App requests only the permissions its features need. You can grant or revoke each one in your device settings; a feature simply will not work without the permission it needs.

8.Advertising and your choices

The free version of the App may show ads through Google AdMob. Ad partners may process a resettable device advertising identifier and limited technical data (such as device type and coarse region) under their own privacy policies to select and measure ads, and may use Android's Privacy Sandbox features (such as Topics) where available. We do not build our own advertising profile of you.

You can:

• Reset or delete your advertising ID, and opt out of ad personalization, in your device settings.
• Upgrade to a paid plan to remove ads entirely.

Where the law requires consent for personalized advertising (for example, in the European Economic Area, the United Kingdom, and Switzerland), the App shows Google's consent message before personalized ads are served. You can change or withdraw your choice at any time in the App under Settings › Privacy › Ad privacy choices, or through your device settings, and upgrading to a paid plan removes ads entirely.

9.Language & translation

The App is offered in more than 40 languages, and the on-photo GeoStamp can display text (including addresses and place names) in different languages. Some of this text — particularly addresses translated on your device — is produced by automated or assisted translation. Addresses are translated by Google ML Kit on-device translation (Google Translate's models) and are marked “Translated by Google”; see section 6.

10.Media authenticity feature

The App adds a cryptographic signature to your captures and can check them later, so anyone can see whether a photo or video is unchanged since GeoCam saved it. This works entirely offline:

• Signing uses a private key generated and stored inside your device's hardware-backed secure keystore. The key never leaves your device and is never sent to us.
• Checking runs on the device that does the check, against public trust information bundled in the App. No photo, video, result, report or custody log is sent to us or to any server. The checking method is published at tuvambes.in/geocam/verification so that others can check files independently.
• What a signed capture carries. The signature adds a signed record inside the file: the capture date, time and time zone; the GPS coordinates with their accuracy, altitude and fix time (when available); whether the phone reported a mock-location (fake GPS) app; random identifiers that link the files of one capture (for example an edited photo and its original); and the App's name, version and platform. With Record satellite time & GPS signal on, it also holds the satellite and network time, the automatic date & time setting, the satellites used and in view and their systems, and the phone's maker, model and Android version (section 5).
• The signer. The record also carries a public key that belongs to the App on your phone, and a certificate from your phone's secure hardware (Android key attestation) that states the App's package name and signing certificate, that the key is kept in secure hardware, and your phone's security state — whether its bootloader is locked and its software verified, its Android version and its security patch level. These contain no name, phone number, IMEI or serial number, but every capture from the same installation of the App carries the same public key, so files signed on the same phone can be recognised as coming from the same phone.
• Anyone you share the original file with can read this record, even if the visible GeoStamp is cropped, and even if your phone hides the location in the file's standard details (Android may do this when another app opens or shares a file). Think about this before sharing an original file.
• Photo and video details. Photos also carry standard photo details (EXIF) — the date and time, the location, the phone model and the camera settings — and videos carry the location where they were recorded. A Dual camera photo also lists the details of both cameras (lens, exposure and picture size) and an id linking the photos of the same capture. Copies you save to your phone gallery or share keep these details.
• Dual camera captures. A Dual camera photo or video is put together on your device from the rear and front cameras, and its signed record notes that it is a dual-lens capture.
• Portrait + landscape pairs. Each file of a pair is signed, and its signed record notes that it is one of a portrait + landscape pair.
• Marked-up photos. If you add mark-up to a photo before saving it, the marks become part of the signed photo, and the signed record notes that it was marked up in the App. With Keep the original when editing on, the photo as captured is kept and signed too, and the marked-up copy's record links to it; the same applies to measured photos.
• Measured photos. Measurements are drawn into the photo before it is signed. The signed record and the App's gallery record contain them: each measurement's kind, value and ± estimate, the points you placed, and whether it was measured in AR or on the photo (with the reference length you entered) — and, on the Pro plan, the 3D positions and tracking confidence of the AR points. Anyone you share the original file with can read them.
• The GeoStamp's map. When a capture has a mini-map, its signed record contains the map image's size in pixels, the map view's size and zoom, and that it was placed whole and unedited with Google's logo as Google drew it — never the map image itself or any other map data.
• Angle and Before & After link. A signed record contains which way the phone pointed (tilt and compass direction) and, for a photo taken with the Ghost overlay on Plus or Pro, its pair ID and the earlier photo's ID — and, on Pro, that photo's SHA-256 fingerprint. Anyone you share the original file with can read them.
• Scanned codes. When a capture is taken with a scanned barcode or QR code, its signed record contains the code's type, its full contents and when it was read — and, on the Pro plan, the code's raw bytes. Anyone you share the original file with can read them.

A check gives one of four results: Verified (unchanged since GeoCam saved it), Verified – Mark-up, Verified – Measurements or Verified – Mark-up & measurements (unchanged, with additions made in the App before saving), Modified (a genuine GeoCam signature, but the file was changed after it was signed) or Unverified (the App could not confirm where the file came from — for example because a chat app re-compressed it). Unverified is not an accusation that a file is fake. What the results mean, and what they do not show, is explained in the Terms.

Online checker on our website. Anyone — including people who don't have the App — can check a GeoCam file at tuvambes.in/geocam/verification. You don't have to: the App and the reference verifier check files without uploading them. If you use it:

• What happens to your file. The file you choose is sent over an encrypted (HTTPS) connection to our web server, hosted by Hostinger, checked, and deleted as soon as the check finishes, before the result is shown. Anything unpacked from an evidence package is deleted too. If a check fails, the file is deleted all the same, and the server software also removes every upload when the request ends.
• What is processed. The whole file and what it contains — the picture or video (and anyone in it), and the location, time, phone details and measurements in its signed record — only to produce the result. It is not kept, not looked at by a person, not analysed for faces, not used for any other purpose and not shared.
• The result is shown only in your browser and is not stored by us; print or save it yourself if you need it.
• What is kept. Our hosting provider's standard access logs — your IP address, the time, the page address and your browser type, never the file — kept for a limited time for security; and an abuse-prevention counter linked to a one-way coded form of your IP address, deleted within an hour. The checker sets no cookies and has no analytics or ads.
• Google's revocation list. Our server downloads Google's public list of revoked phone attestation certificates at most once a day; nothing about you or your file is sent to Google.
• Why we may process it. To carry out the check you ask for when you tick the box and upload the file; the security logs and counter, for our legitimate interest in keeping the service safe.
• Your responsibility. Upload only files you have the right to share. If a file shows other people or their information, make sure you may share it for checking.

11.Data retention

Because the App is on-device, we do not retain your personal data on any server — there is nothing on our side to keep or delete. Your captures, settings, saved locations and authenticity keys live on your device for as long as you keep them, and are removed when you delete them, clear the App's data, or uninstall the App (captures you saved to your phone gallery or shared stay where you put them). Kept originals, the camera's unstamped photos and custody logs are stored with their capture and deleted with it. Gallery thumbnails and exported PDF reports kept in the App's cache are removed when you delete the capture or when the system clears the cache; verification reports and evidence packages stay there until the system clears the cache. A file uploaded to the online checker is deleted as soon as it has been checked and its result is not stored; our hosting provider keeps its access logs for a limited time, and the abuse-prevention counter is deleted within an hour. Data sent to the third-party services in section 6 is retained by those providers under their own policies. Captures copied by Google Drive backup stay in your Google Drive until you delete them there — disconnecting or deleting a capture in the App does not delete them; the connected account's email and the upload list are removed from your phone when you disconnect (or uninstall the App). Anonymous, on-device records of an active subscription persist only to keep your paid features working.

When you change plan. Upgrading, downgrading, cancelling or letting a subscription lapse deletes nothing: your captures, templates, collections, logo and settings stay on your phone, and features above your new plan are simply not used until you upgrade again. With Google Drive backup, new backups pause when the plan no longer includes it; files already in your Google Drive stay there, and on any plan captures kept only in Drive can still be downloaded and your backups restored. Plan changes are handled by Google Play, which tells the App only which plan is active — the App keeps that status on your phone, and TUVAMBES receives no payment or account details.

12.Data security

Because your content stays on your device, the main protection is your device itself — keep it locked and up to date. Within the App, settings are stored using encrypted device storage (Android Keystore-backed), and authenticity keys are hardware-backed. Data sent to the third-party services in section 6 travels over encrypted HTTPS connections. Google Drive backup and restore use the narrowest Drive permission Google offers (only the files the App creates); Google Play services keeps the access tokens; every backup and every restored file is checked against Google Drive's own checksum, and with Free up phone space on, a capture's phone copy is removed only after that check. Screenshots and screen recording are blocked while the App is open, and its screen is hidden in the recent-apps view. Files uploaded to the online checker travel over HTTPS, are held only in temporary server storage while they are checked, and are then deleted; the checker refuses to give results if its own files or trust list have been changed. No method of storage or transmission is 100% secure, but we design the App to keep data on your device wherever possible.

13.Children's privacy

The App is a general-purpose photography tool for adults and is not directed to children. It must not be used by children under 13, and anyone under 18 (or the age of majority where they live) may use it only with the consent and supervision of a parent or guardian (see the Terms). The free version shows ads, so it is not designed for children. We do not knowingly collect personal information from children. Under India's Digital Personal Data Protection Act, 2023, processing a child's data requires verifiable parental consent; because the App keeps data on the device and sends none to us, a parent or guardian controls the device and its content directly. If you believe a child has provided personal information through a mistake, contact us (section 15) and we will help.

14.Your rights & choices

Depending on where you live, you may have rights to access, correct, update, delete, or restrict the use of your personal data, to withdraw consent, and to nominate another person to exercise your rights (for example under India's Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or similar laws). Because the App holds your content only on your own device and keeps no server-side copy, you already have direct control:

• Access / correct / delete your content: manage it directly in your device gallery and files, and your saved data inside the App.
• Withdraw consent / revoke permissions: turn off camera, microphone, or location any time in device settings.
• Turn off optional data sharing: keep the GeoStamp in English (no translation pack is downloaded); disable the map/address if you prefer a location-only stamp; go offline to stop all network features.
• Advertising: reset your advertising ID or upgrade to remove ads.
• Google Drive backup: turn it off, change what it takes, or disconnect in Settings › Storage, or remove the App's access in your Google Account; manage or delete the uploaded files in your Google Drive.
• Evidence options: under Settings › Security & authenticity, turn off recording satellite time & GPS signal, keeping originals when editing, or the custody log — or turn on keeping the camera's unstamped photo. A change applies from then on; captures already signed keep their record.

If you are in the European Economic Area or the United Kingdom, you also have the rights to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to lodge a complaint with your local data-protection supervisory authority. Residents of other regions (for example, certain U.S. states) may have similar rights under their local laws. Because we hold no server-side copy of your data, most of these rights are exercised directly on your device; for anything else, contact us (section 15).

If you have a request or question about your rights, contact us using section 15 and we will respond within the timelines required by applicable law.

15.Grievance redressal

If you have a concern or complaint about how your information is handled, or wish to exercise a right under section 14, you can reach our grievance contact at contact@tuvambes.in. Please include enough detail for us to identify the issue. We will acknowledge your request and work to resolve it within the timelines required by applicable law, including, where relevant, the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it.

16.International users & transfers

The App is available to users worldwide and is operated from India. Where the App connects to the third-party services in section 6, the relevant data is processed by those providers, who may operate globally and may process or store data outside your country. Those providers are responsible for the lawful basis and safeguards for any international transfer (for example, the European Commission's Standard Contractual Clauses, where applicable), under their own policies. By using those optional features, you understand that the associated data is handled by the relevant provider on that basis. The App itself keeps your captures and personal data on your device and does not transfer them to us. With Google Drive backup on, the captures you back up are stored by Google in your Google Drive, which may be outside your country, under Google's terms. Our website, including the online checker, is hosted by Hostinger; a file you upload there is processed momentarily on its servers, which may be in another country, and deleted immediately (section 10).

17.Governing law

This policy is governed by the laws of India, and any matter relating to it is subject to the exclusive jurisdiction of the courts of Chennai, Tamil Nadu, India, without prejudice to any mandatory data-protection or consumer rights you have in your country of residence.

18.Changes to this policy

We may update this policy as the App evolves or as the law requires. When we make a material change, we will revise the “Effective” date at the top and, where appropriate, highlight the change in the App. Continuing to use the App after an update means you accept the current policy. If we ever want to use the Google user data described in Google Drive backup & restore in a new way, we will tell you and ask for your consent first.

Version 1.0 (21 October 2026) — first published version.

19.Contact us

For any question about this Privacy Policy or your data, please contact us: