Ornova Labs ("we", "us", "our") respects your privacy. This policy explains what the GPS Ornova Camera mobile application (the "App") collects, why, who it is shared with, and the choices you have. It applies to the Android app com.ornova.camera, published by Ornova Labs on Google Play.
1. What stays on your device
The following never leaves your phone through the App, and we cannot see any of it:
- Photos and videos you capture, including the stamp burned into them.
- Your capture history, shown in the Gallery and in Reports, stored in the App's own database on the device.
- Site details you enter — project name, engineer name, chainage, site location, work ID, structure ID, notes and any signature you draw.
- Saved locations, custom logos, stamp templates and all app settings.
- QR codes you scan, kept in QR History on the device.
- Email addresses you save for sharing after capture. They are stored on the device and used only to fill in a draft in your own mail app.
Uninstalling the App deletes its database and settings. Photos and PDF reports already written to your phone's shared storage remain until you delete them yourself.
2. Information the App collects
2.1 Information you provide
- Site and project details, notes, person names and signatures you add as stamps.
- Custom logos or brand images you choose for stamping.
- Email addresses and subject or message text you configure for sharing after capture.
- Anything you send us directly, such as feedback or a support request.
2.2 Information collected automatically
- Precise location — latitude, longitude, altitude, accuracy and bearing, used to stamp your photos and to look up the street address shown on the stamp.
- Diagnostic and usage information — which screens are opened, and crash reports including device model, Android version and the technical details of the failure.
- Advertising identifiers and related data used by Google AdMob to deliver and measure ads.
- Photo fingerprints — see section 4. These are one-way codes calculated from a photo file. They cannot be turned back into the image.
- Purchase status for subscriptions, handled by Google Play Billing. We never see your card or payment details.
2.3 Permissions and what each is for
| Camera | To take photos and record video. Nothing else uses it. |
|---|---|
| Location (precise and approximate) | To geo-tag captures and resolve the address shown on the stamp. The App does not collect location in the background. |
| Microphone | Only while recording video, so the clip has sound. |
| Photos and media | To save your captures and reports, and to show them in the gallery. |
| Notifications | For service messages you have opted into. You can turn them off in Android. |
You can withdraw any permission at any time in Android's app settings. Features that depend on a permission stop working without it; the rest of the App continues.
3. How we use information
- To provide the App's features — stamping, reports, sharing and the rest.
- To keep the App working: diagnosing crashes and fixing faults.
- To understand which features are used, so development effort goes where it helps.
- To show ads in the free version, and to confirm a subscription in the paid one.
We do not sell personal information, and we do not use your photos, your site details or your location to build advertising profiles.
4. Photo Proof and what is uploaded
Photo Proof fingerprints each capture with a one-way code (SHA-256) calculated from the saved file, and records that code against a server clock so the photo's age can be shown independently of your phone's own clock, which its owner can change.
Only the fingerprint and the time it was received are stored on our Firebase project. The image itself, the file name, the coordinates, the address and your site details are never uploaded. A fingerprint cannot be reversed into a picture and identifies no person. Records are written anonymously, cannot be edited or deleted once written — that is what makes them evidence — and are not linked to a named account.
5. When data leaves your device
Four things send data off the phone, each only to make a feature work:
- Address lookup — your coordinates are sent to the Android platform's geocoding service so it can return a street address for the stamp.
- Map tile — your coordinates are sent to the Google Static Maps service to fetch the small map drawn on map templates.
- Weather — your coordinates are sent to the OpenWeatherMap service when a template includes weather.
- Photo Proof — the fingerprint described in section 4.
Your photographs are never sent to us or to any of these services.
6. Third-party services
These services are built into the App. Each handles data under its own privacy policy:
| Google Firebase | Analytics, Crashlytics, Remote Config, Cloud Messaging, Firestore and anonymous Authentication. |
|---|---|
| Google AdMob | Ads in the free version, with Google's User Messaging Platform for consent where it is required. |
| Google Play Billing | Subscriptions. Payment details are handled by Google and never reach us. |
| Google Play services | Location, maps, and the ML Kit barcode scanner used for QR codes. QR scanning runs on the phone. |
| OpenWeatherMap | The weather field on the stamp, when a template includes it. |
7. Sharing you start yourself
When you share a photo or report, or let the App open a prefilled draft in Gmail, Android hands the file to the app you choose. The draft is never sent automatically — you press Send. What happens to a file after it leaves the App is governed by the privacy policy of the app or service you sent it to.
8. Keeping and deleting data
- Captures and settings stay on your device until you delete them or uninstall the App.
- Deleting a capture in the App removes the file from device storage, not just from the list.
- Analytics and crash data are retained by Google for the periods set out in Firebase's documentation.
- Photo Proof fingerprints are kept so that old photos can still be verified. Because a fingerprint is anonymous and cannot be traced to you or reversed into an image, it is not personal data; if you want one removed, contact us with the fingerprint and we will remove that record.
To ask us to delete anything we hold, use the request page at https://ornovalabs.com/gps-ornova-camera/request-delete-user-data.html. It lists what you can delete yourself on the phone, what we can delete for you, and how long it takes — we acknowledge a request within three working days and complete it within thirty.
9. Security
Data on your device is held in the App's private storage, which other apps cannot read. Everything the App sends over the network goes over an encrypted connection. No system is perfect, so we do not claim absolute security, but nothing sensitive is sent in the first place.
10. Children
The App is a tool for work and is not directed at children. We do not knowingly collect personal information from children under 13, or under 18 where India’s Digital Personal Data Protection Act 2023 applies. If you believe a child has provided us information, contact us and we will delete it.
11. Your rights
Under the EU and UK GDPR, India’s Digital Personal Data Protection Act 2023 and comparable laws elsewhere, you may have the right to access, correct, delete or export personal information, to object to processing, and to withdraw consent. In practice most of your data is already in your hands: it is on your phone, and you can delete it there. For anything else, contact us and we will respond within the time your local law allows.
You can reset or delete your advertising identifier in Android's privacy settings, and change your ad consent choices from the App's settings where that prompt applies.
12. Changes to this policy
If this policy changes, the updated version appears here with a new date at the top. Material changes will also be announced on the Google Play listing. Continuing to use the App after a change means you accept the updated policy.
13. Contact
Questions about this policy, or a request about your data, can be sent to:
- Ornova Labs, West Bengal, India
- support@ornovalabs.com
We answer data requests at this address within the time your local law allows. The developer contact details on the App's Google Play listing reach us as well.