Privacy Policy — Imboni GPS Tracking

Effective date: October 9, 2026

Last updated: October 9, 2026

Developer and publisher: Fidalix Ltd

Address: KK 31 Avenue, Gikondo, Kigali, Rwanda

1. Introduction

Fidalix Ltd ("Fidalix," "we," "us," or "our") respects your privacy and is committed to protecting personal information processed in connection with Imboni GPS Tracking ("Imboni," the "Application," or the "Service").

Imboni GPS Tracking is an Android application that allows authorized users to connect to compatible Traccar GPS tracking servers to monitor vehicles, assets, and other registered GPS tracking devices.

This Privacy Policy explains:

What information the Application accesses or processes.
How information is collected, used, stored, and protected.
When information may be shared with third parties.
How Google Maps and advertising services process information.
Your privacy choices and data protection rights.
How to request access to, correction of, or deletion of personal information.

By using the Application, you acknowledge that your information may be processed as described in this Policy, subject to applicable laws and any consent required for specific processing activities.

2. Application Editions

Imboni GPS Tracking is available in two editions.

2.1 Imboni GPS Open

The Open edition is distributed directly by Fidalix or authorized representatives.

It permits connections to supported tracking servers under the fidalix.com and netsource.co.rw domains and their authorized subdomains.

The Open edition does not include Google AdMob advertising.

2.2 Imboni GPS Tracking — Google Play Edition

The Google Play edition allows users to connect to compatible Traccar GPS tracking servers using valid domain names or IP addresses, including servers independently operated by third parties.

This edition includes Google Maps and Google AdMob advertising technology.

Although both editions share core tracking functionality, data processing may differ depending on the edition, connected server, enabled features, and permissions granted by the user.

3. Information We Access or Process

3.1 Account and Authentication Information

When you connect to a Traccar server, the Application may process:

Username or email address used to authenticate.
Password supplied during authentication.
Authentication session cookies.
Connected tracking server address.
User profile and server-assigned account permissions.
Group membership and device-access rights.

Authentication credentials are transmitted to the tracking server selected by the user.

The Application supports persistent sign-in and stores saved passwords locally in encrypted form using Android Keystore protection.

3.2 GPS Tracking and Vehicle Information

Depending on the features enabled on your tracking server, Imboni may retrieve and display:

GPS coordinates and location timestamps.
Vehicle or tracking-device names and identifiers.
Speed, heading, movement status, and location history.
Ignition, battery, fuel, and other available telemetry.
Geofences, routes, trips, and tracking reports.
Driver assignments and associated vehicle information.
Maintenance information and device events.
Overspeed, offline, SOS, ignition, and other alerts.

GPS coordinates shown in the Application generally originate from GPS tracking devices connected to the selected Traccar server.

The Application does not ordinarily require access to the Android phone's own precise GPS location to display tracked vehicles.

GPS tracking information may qualify as personal data when it identifies or can reasonably be associated with a person, including a driver or vehicle owner.

3.3 Application Preferences

The Application may store information locally, including:

Preferred server URL and username.
Selected object groups and device favorites.
Display theme and map preferences.
Notification preferences.
Traffic-map configuration, where provided.
Other settings necessary to maintain application functionality.

3.4 Technical and Diagnostic Information

The Application and its integrated service providers may process technical information such as:

Device model and operating system version.
IP address and network connectivity information.
Application and SDK version information.
Error codes, performance information, and crash-related diagnostics.
Advertising identifiers and related technical identifiers in the Google Play edition.

The Google Play edition may also store limited advertising diagnostics locally, including the most recent ad-loading status, error category, and time of the event.

4. How We Use Information

Information is processed for purposes that may include:

Authenticating users and maintaining authorized access.
Connecting to the selected Traccar tracking server.
Displaying live GPS positions and device status.
Providing maps, trips, reports, geofences, and alerts.
Maintaining application preferences and session continuity.
Troubleshooting connectivity, compatibility, and application errors.
Protecting accounts and preventing unauthorized access.
Providing advertising in the Google Play edition, subject to applicable privacy requirements.
Responding to support requests and complying with applicable legal obligations.

Where required by law, processing is based on an appropriate legal ground, such as contractual necessity, legitimate interests, compliance with legal obligations, or consent.

Fidalix does not intentionally use the complete GPS tracking history retrieved from a connected Traccar server to create advertising profiles.

5. Traccar Servers and Independent Operators

5.1 Servers Operated by Fidalix

When you connect to a server operated by Fidalix, Fidalix may be responsible for the processing and storage of tracking information, depending on the contractual relationship and whether Fidalix acts as a data controller or processor.

Access to such information is governed by applicable law, account permissions, service agreements, and operational security policies.

5.2 Independently Operated Traccar Servers

The Google Play edition allows connections to third-party Traccar servers that are not owned or controlled by Fidalix.

When you configure such a connection:

Your authentication information is sent to the server you select.
Tracking information is retrieved from that server.
The server operator determines its account management, data retention, backup, and access policies.
The server operator may independently collect, store, disclose, or otherwise process information according to its own privacy practices.

Fidalix does not normally maintain a central copy of all GPS data retrieved through the Application from independently operated servers.

Fidalix cannot directly delete or modify information stored on a third-party server without appropriate authorization or technical access.

Users should review the privacy policies and security practices of their chosen server operators.

The server operator is responsible for providing an appropriate legal basis for tracking identifiable individuals and for complying with applicable monitoring, employment, and privacy laws.

6. Google Maps

Imboni uses the Google Maps SDK for Android to display maps, vehicle positions, movement trails, and related location information.

Google may process technical information relating to map requests, device characteristics, IP addresses, map interactions, diagnostic events, and SDK-specific identifiers.

Depending on how mapping features are used, information relating to map areas and interactions may also be processed.

Google's handling of information is governed by its applicable terms and privacy practices.

For more information:

Google Privacy Policy: https://policies.google.com/privacy
Google Maps Platform: https://developers.google.com/maps

7. Advertising and Google AdMob

This section applies to the Google Play edition.

Imboni GPS Tracking may display advertisements supplied through Google AdMob, a Google advertising platform.

The Google Mobile Ads SDK may automatically collect or share information such as:

IP address and approximate geographic location inferred from it.
Advertising ID and other supported device or application identifiers.
Application usage and advertisement interaction information.
Technical and diagnostic information.
Information used for advertising delivery, measurement, and fraud prevention.

Advertising may be personalized or non-personalized depending on applicable law, user settings, consent choices, and Google's advertising policies.

7.1 Advertising Consent

Where legally required, the Application uses Google's User Messaging Platform to request or manage advertising consent.

Relevant users may be presented with a consent message before advertising requests are made.

Where supported and required, users can revisit their advertising privacy choices through the Application's Settings.

Users may also control certain advertising identifiers and preferences through Android or Google settings.

7.2 Advertisement Availability

Advertisement availability depends on multiple factors, including advertising inventory, connectivity, eligibility, consent, and technical conditions.

A failed advertisement request does not establish that the user is blocking advertisements.

The current Application does not require users to click advertisements in order to access normal GPS tracking functionality.

7.3 Advertising Data

Fidalix does not intentionally transmit Traccar login passwords or complete vehicle-tracking histories to AdMob for advertising targeting.

Google and its advertising partners may process information according to their own privacy terms.

Further information:

Google Advertising: https://policies.google.com/technologies/ads
Google Privacy Policy: https://policies.google.com/privacy

8. Notifications and Background Processing

Users may enable notifications relating to GPS tracking events.

Depending on the selected server and account configuration, notifications may concern:

Vehicle online or offline status.
Ignition changes.
Geofence entry or exit.
Speed-limit violations.
Alarm or SOS events.
Other supported tracking-device events.

When event notifications are enabled, the Application may periodically contact the configured tracking server while running in the background to check for relevant events.

Android notification permission may be requested where required.

Users can disable these alerts through the Application's notification settings or Android system settings.

9. Information Sharing

Depending on the Application edition and configuration, information may be processed by or shared with:

Connected Traccar server operators: For authentication, retrieval of tracking information, and authorized tracking commands.

Google Maps Platform: For displaying maps and related services.

Google AdMob and associated advertising services: For advertising delivery, measurement, diagnostics, and fraud prevention in the Google Play edition.

Infrastructure and technical service providers: Where necessary to operate Fidalix-controlled services, maintain security, or provide authorized technical support.

Public authorities: Where disclosure is required by applicable law or a valid legal process.

Other authorized users: Where the tracking server's account and permission configuration permits access to shared tracking devices.

We do not intentionally sell users' private GPS tracking histories to data brokers.

This statement does not mean that third-party advertising SDKs collect no information; their processing is described separately in this Policy.

10. Data Storage and Security

Fidalix implements security measures appropriate to the Application and services under its control.

The Application uses Android application-private storage for certain settings and session information.

Saved login passwords are encrypted using a key protected by Android Keystore.

Authentication session information is used to communicate with the selected tracking server.

Secure Server Connections

We recommend using HTTPS and secure WebSocket connections when connecting to Traccar servers.

The Google Play edition supports user-configured HTTP server addresses, including direct IP-based connections.

HTTP connections are not encrypted. When a user selects an HTTP server, account credentials, tracking information, and related communications may be exposed to interception or modification on the network.

Users should use HTTPS whenever possible, especially when accessing servers over public networks.

Data stored on third-party tracking servers is protected according to the policies and security measures implemented by those server operators.

No method of electronic transmission or storage can be guaranteed completely secure.

11. Data Retention

11.1 Information Stored on the Android Device

Application preferences, account identifiers, and other locally stored information generally remain until removed, overwritten, or cleared.

Signing out removes saved authentication credentials and the active session from the Application. Some preferences, including the previously used server address and username, may remain for convenience.

Uninstalling the Application or clearing its application data through Android settings generally removes its locally stored information.

11.2 GPS Data Stored on Tracking Servers

GPS position history, reports, device information, and account records are retained according to the policies of the selected Traccar server operator.

Where Fidalix operates the server, applicable retention periods may depend on customer agreements, service requirements, and legal obligations.

Where a third party operates the server, the third party determines its applicable retention practices.

11.3 Advertising and Technical Information

Information processed by Google or other independent service providers is retained according to their applicable retention policies.

Fidalix retains information under its control only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

12. Your Privacy Rights

Depending on your country and applicable privacy laws, you may have rights to:

Request access to personal data concerning you.
Request correction of inaccurate information.
Request deletion of personal information.
Request restriction of certain processing activities.
Object to processing where applicable.
Request data portability where legally available.
Withdraw consent for activities based on consent.
Lodge a complaint with a competent data protection authority.

Requests relating to data controlled by Fidalix may be submitted using the contact details below.

Requests concerning data maintained by independently operated tracking servers should normally be directed to the relevant server operator.

We may need to verify your identity or account authority before processing requests.

We will respond within the periods required by applicable law.

13. Account and Data Deletion

Users may remove the Application's local data by signing out, uninstalling the Application, or clearing its storage in Android settings.

These actions do not automatically delete GPS history or account records stored on a remote Traccar server.

Fidalix-Managed Accounts

If your tracking account or data is managed by Fidalix, you can request account or personal data deletion by contacting:

Email: info@fidalix.com

Subject: Imboni GPS Tracking — Account or Data Deletion Request

Please include enough information to identify the relevant account or service.

Do not send your password or other sensitive authentication credentials by email.

After appropriate identity verification, Fidalix will evaluate and process the request in accordance with applicable laws and any legitimate retention obligations.

Third-Party Traccar Accounts

If your account is hosted on a server operated by another organization, the server administrator is ordinarily responsible for deleting the server-side account and tracking records.

Fidalix cannot guarantee deletion of information that it does not control.

Where possible, Fidalix may assist users in identifying the appropriate organization to contact.

14. International Data Transfers

Imboni is available to users in different countries.

Information may be processed outside the country in which a user resides, depending on:

The location of the selected Traccar server.
Fidalix's service infrastructure.
Google Maps and advertising services.
Other authorized service providers.

Where Fidalix is responsible for an international transfer, it will apply measures required by applicable data protection laws.

Users connecting to independently operated servers should consult the relevant operator about its storage locations and cross-border data processing practices.

15. Children's Privacy

Imboni GPS Tracking is intended primarily for adults, vehicle owners, fleet managers, businesses, and authorized tracking-service users.

The Application is not specifically designed for children and does not intentionally offer child-directed advertising.

Individuals and organizations using tracking devices must ensure that monitoring of minors, passengers, employees, or other persons complies with applicable laws, including requirements relating to consent, notification, and lawful authorization.

If you believe Fidalix has improperly processed personal data concerning a child, please contact us.

16. Legal Compliance

Fidalix aims to process personal information in accordance with applicable laws, including Rwanda's legislation governing the protection of personal data and privacy.

For individuals in jurisdictions with additional data protection rights, including the European Economic Area and the United Kingdom, applicable local requirements may also apply.

The specific legal obligations and rights available to an individual depend on the circumstances of the processing and the applicable jurisdiction.

17. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in:

Application functionality.
Tracking-server integrations.
Advertising and third-party services.
Data processing and security practices.
Applicable legal requirements.

The updated version will identify its effective or revision date.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

18. Contact Information

For questions about this Privacy Policy, data protection practices, or privacy rights, contact:

Fidalix Ltd

KK 31 Avenue, Gikondo

Kigali, Rwanda

Email: info@fidalix.com

Website: https://fidalix.com

Please use the subject line "Imboni GPS Tracking — Privacy Inquiry" so your request can be directed appropriately.