NoGpsNavigator
Privacy policy
What the app does
NoGpsNavigator displays maps, provides route guidance and checks location readings for inconsistencies. It can use an available network-derived position when GPS is suspicious. It does not guarantee detection of spoofing or accurate positioning without a suitable location source. Navigation does not require an account. This version contains no advertising or subscription billing.
Location and device signals
With Android location permission, the app reads precise or approximate location, reported accuracy, satellite information, GPS time and available motion signals for its GPS checks and navigation. These checks run on the device. GPS checking can continue while the app is minimized through a location foreground service with a system notification. It starts from the visible app after permission is granted and can be stopped in Settings. Android or device battery settings may stop the service. Opening the app is necessary after a force-stop or device restart.
Location permission does not by itself authorize sharing your position with the administrator. That requires the separate choices described below. Maps, address searches and routes involve external services as described in the following section.
Local diagnostic journal / Диагностика / אבחון
While protection runs, diagnostics are recorded automatically in private, non-backed-up storage: precise coordinates and their sources, timestamps, accuracy, GPS-check states, satellite counts and output status. Two rolling files retain approximately 4 MiB total. “Finish and share” creates a ZIP with the retained journal, app version, Android version and phone model, while automatic recording continues. No automatic upload occurs. Only your chosen sharing app receives the export. Exports remain in cache (up to three recent ZIP files); clearing app data or uninstalling removes these local files. No Wi-Fi identifiers, passwords or administrator credentials are included.
Во время работы защиты автоматически записывается локальный журнал: координаты, их источники, время, точность, состояния проверки GPS, количество спутников и статус передачи. Два сменяемых файла занимают примерно до 4 МБ и исключены из резервного копирования. «Завершить и поделиться» создаёт ZIP с журналом, версией приложения, Android и моделью телефона; автоматическая запись продолжается. Автоматической отправки нет: получателя выбираете вы. В кеше остаются до трёх последних ZIP. Очистка данных или удаление приложения удаляет локальные файлы. Идентификаторы Wi-Fi, пароли и данные доступа администратора не включаются.
בזמן שההגנה פועלת נרשם אוטומטית יומן מקומי: מיקומים, מקורותיהם, זמן, דיוק, מצב בדיקת GPS, מספר לוויינים ומצב העברת המיקום. שני קבצים מתחלפים תופסים כ-4 מ״ב ואינם נכללים בגיבוי. ״סיום ושיתוף״ יוצר ZIP עם היומן, גרסת האפליקציה, Android ודגם הטלפון; הרישום האוטומטי ממשיך. אין העלאה אוטומטית: אתם בוחרים עם מי לשתף. עד שלושה קובצי ZIP אחרונים נשמרים במטמון. ניקוי נתוני האפליקציה או הסרתה מוחקים את הקבצים המקומיים. מזהי Wi-Fi, סיסמאות ופרטי גישה למנהל אינם נכללים.
Map and navigation providers
Yandex MapKit requests map resources, address search results and routes from Yandex. Search text and route origin/destination are sent when you use those features. Requests can reveal your location or the area you view. Yandex also processes connection and SDK/device information under its own terms and privacy policy. MapKit's terms describe collection of technical device/network information, IP address and location information. See Yandex MapKit terms and Yandex privacy policy. Yandex downloads for offline use are not offered by this version.
MapLibre uses OpenFreeMap resources. Viewing and downloading maps sends requests for the relevant map area and ordinary connection information, including IP address, to OpenFreeMap and its delivery providers. See OpenFreeMap privacy policy. The Android geocoding service may be used as an address-search fallback; the query and geographic context are processed by the geocoding provider configured on your device.
Voice guidance uses your selected Android text-to-speech engine. Text may be processed locally or by that engine's online service, depending on its settings and installed voices. Links to another mapping app open only when you select them.
Local map data and visited areas
Remembering visited areas is enabled by default after location permission. A separate foreground service and notification allow it to continue while the app is minimized. This visited-area feature stores an unordered list of map-cell identifiers on the phone, not a timestamped journey log. This statement applies only to that list: the optional Wi-Fi database described below includes observation times. The visited-area list can still reveal places you visited. It is not uploaded to the administrator. You can stop recording and clear the list in Maps.
Automatic MapLibre map saving downloads nearby areas while the map screen is open and a suitable position is available. It can be switched off. Manual downloads and automatic map resources remain on the device until deleted; automatic resources may be replaced when the storage budget is reached. Map-provider requests reveal which areas are requested. Clearing the visited-area list does not automatically delete downloaded maps. Settings and language choices are also stored locally.
The app may remember the current navigation destination on this phone so you can choose to resume after the app process stops. This stores one destination name, address and position, not your current position or a journey history. It is not sent to My Shift Admin. Resuming requires your action and calculates a new route using an accepted current position. Stopping or cancelling that navigation, or arriving, clears the saved destination.
Wi-Fi collection removed in 1.1.6 / Сбор Wi-Fi убран / איסוף Wi-Fi הוסר
From version 1.1.6, local Wi-Fi learning, scanning and fingerprint matching are removed. Older saved observations are not read, used or uploaded. Android's system network location remains available. The following section documents the optional feature in earlier versions only.
Начиная с версии 1.1.6 сбор Wi-Fi и определение позиции по собственной базе удалены. Прежние записи не читаются, не используются и не отправляются. Системное определение местоположения по сети Android остаётся. Следующий раздел относится только к предыдущим версиям.
החל מגרסה 1.1.6 הוסרו איסוף Wi-Fi וקביעת מיקום באמצעות המאגר המקומי. רשומות קודמות אינן נקראות, אינן בשימוש ואינן נשלחות. מיקום רשת של Android עדיין זמין. הסעיף הבא מתייחס רק לגרסאות קודמות.
Optional local Wi-Fi learning / Запоминание Wi-Fi / לימוד Wi-Fi מקומי
Wi-Fi learning is off by default and starts only after you enable it in Settings. While protection is running, including in the background with its system notification, the app may scan nearby Wi-Fi access points within Android's permission and scanning limits. It does not connect to those networks. When native GPS passes the training checks and is corroborated by an independent network position, the app can save an observation: installation-salted hashes of access-point identifiers, signal strengths (RSSI), coordinates, observation time and estimated uncertainty. Network names (SSIDs), passwords and raw access-point MAC addresses are not stored. The records can reveal places and times you visited even though the identifiers are hashed.
The database stays in the app's private, non-backed-up storage on this phone. Wi-Fi fingerprints are not uploaded. Storage is limited to the newest 3,000 observations; records older than 90 days are pruned when the feature is used. Disabling the feature stops both collection and use of the saved observations but retains the database. The separate delete control clears the database and replaces the local hashing salt; if learning remains enabled, new observations may be saved afterward. Clearing app storage or uninstalling also removes the local database.
When GPS is unavailable or suspicious, fresh Wi-Fi scans may be compared with saved observations to estimate a position and uncertainty. This does not guarantee an exact address or uninterrupted positioning. A derived position may be used for navigation and optional output to other navigation apps. It may also be sent to My Shift Admin under your existing, separate location and background-sharing choices; the Wi-Fi fingerprints themselves are not sent to the administrator.
Запоминание Wi-Fi выключено по умолчанию и начинается только после включения в настройках. Пока работает защита, в том числе в фоне с системным уведомлением, приложение может сканировать соседние точки Wi-Fi в пределах разрешений и ограничений Android. Подключения к этим сетям не происходит. Если исходный GPS прошёл проверки для обучения и подтверждён независимым сетевым местоположением, сохраняются хеши идентификаторов точек доступа с локальной солью установки, сила сигналов (RSSI), координаты, время наблюдения и оценка погрешности. Названия сетей (SSID), пароли и исходные MAC-адреса точек доступа не сохраняются. Даже с хешированными идентификаторами записи могут раскрывать места и время ваших посещений.
База хранится только в закрытом хранилище приложения на этом телефоне, исключённом из резервного копирования. Wi-Fi-отпечатки не отправляются на сервер. Сохраняются не более 3 000 последних наблюдений; записи старше 90 дней удаляются при использовании функции. Выключение функции останавливает сбор и использование наблюдений, но сохраняет базу. Отдельная кнопка удаления очищает базу и заменяет локальную соль хеширования; если обучение остаётся включённым, после удаления могут сохраняться новые наблюдения. Очистка данных приложения или его удаление также удаляют локальную базу.
При недоступном или подозрительном GPS свежие результаты сканирования могут сопоставляться с сохранёнными наблюдениями для оценки положения и погрешности. Это не гарантирует точный адрес или непрерывное определение координат. Полученная позиция может использоваться для навигации и разрешённой вами передачи другим навигаторам. Она также может передаваться в My Shift Admin в соответствии с вашими отдельными настройками передачи местоположения, в том числе в фоне. Сами Wi-Fi-отпечатки администратору не передаются.
לימוד Wi-Fi כבוי כברירת מחדל ומתחיל רק לאחר הפעלתו בהגדרות. בזמן שההגנה פועלת, גם ברקע עם הודעת מערכת, האפליקציה עשויה לסרוק נקודות גישה קרובות ל-Wi-Fi במסגרת ההרשאות ומגבלות הסריקה של Android. היא אינה מתחברת לרשתות האלה. כאשר ה-GPS המקורי עובר את בדיקות הלימוד ונתמך במיקום רשת עצמאי, ניתן לשמור תצפית: ערכי גיבוב של מזהי נקודות הגישה עם מלח מקומי ייחודי להתקנה, עוצמות האותות (RSSI), קואורדינטות, זמן התצפית והערכת אי־הוודאות. שמות רשתות (SSID), סיסמאות וכתובות MAC מקוריות של נקודות הגישה אינם נשמרים. גם כשהמזהים מגובבים, התצפיות עשויות לחשוף מקומות וזמנים שבהם ביקרתם.
המאגר נשמר רק באחסון הפרטי של האפליקציה בטלפון הזה ואינו נכלל בגיבוי. טביעות ה-Wi-Fi אינן נשלחות לשרת. נשמרות לכל היותר 3,000 התצפיות האחרונות; תצפיות שגילן יותר מ-90 יום נמחקות בעת השימוש בתכונה. כיבוי התכונה מפסיק גם את האיסוף וגם את השימוש בתצפיות השמורות, אך משאיר את המאגר. כפתור המחיקה הנפרד מוחק את המאגר ומחליף את המלח המקומי המשמש לגיבוב; אם הלימוד נשאר פעיל, ניתן לשמור תצפיות חדשות לאחר מכן. ניקוי נתוני האפליקציה או הסרתה מוחקים גם את המאגר המקומי.
כאשר ה-GPS אינו זמין או חשוד, ניתן להשוות סריקות Wi-Fi עדכניות לתצפיות שמורות כדי להעריך מיקום ואי־ודאות. אין בכך הבטחה לכתובת מדויקת או למיקום רציף. המיקום המחושב עשוי לשמש לניווט ולהעברת מיקום ליישומי ניווט אחרים, אם הפעלתם אפשרות זו. הוא עשוי להישלח גם ל-My Shift Admin בהתאם לבחירות הנפרדות שלכם לשיתוף מיקום ולשיתוף ברקע. טביעות ה-Wi-Fi עצמן אינן נשלחות למנהל.
Optional output to other navigation apps
Location output through Android's mock-location mechanism is off by default. You must select NoGpsNavigator as the mock-location app in Android Developer options and enable output in NoGpsNavigator. When active, other apps allowed to access device location can receive the supplied fallback position. Android marks it as a mock location. Those apps handle it under their own policies. You can disable output and release the location provider from NoGpsNavigator Settings.
Online identifier and administrator sharing
On first use, the app explains administrator sharing and offers two choices. “Allow the administrator to see my location, including in the background” enables online status, location and background location sharing together. “Not now” keeps all administrator sharing off and lets you continue navigating. Nothing is sent to My Shift Admin before a choice is saved. Your choice is remembered; updating does not silently enable sharing. In Settings → My Shift Admin sharing, you can separately change online status, location and background location sharing.
When enabled, sharing sends a random installation identifier, the NoGpsNavigator app name and activity status to the private My Shift Admin dashboard. The identifier is not an advertising ID, IMEI or Google account. A personal name is sent only if you enter and save one. Location sharing also requires Android location permission and a running protection service. Sharing while minimized additionally requires your saved background choice. The app sends a current accepted position with its estimated accuracy, source and age. A network fallback may be sent when GPS is inconsistent; its accuracy is not guaranteed. The app does not send a route history, saved destination or the local visited-area list to the administrator.
Administrator sharing uses HTTPS to myshift-team-server.daring-mole-5348.chatgpt.site, serving the developer's My Shift Admin system. Hosting and connection providers process ordinary connection information such as IP addresses. The authorized administrator can view identifiers, optional names, activity and authorized locations. Navigation remains usable if sharing is disabled.
Retention and deletion
The live dashboard excludes stale online status after approximately 45 seconds and stale positions after approximately 30 seconds of location freshness. The last stored coordinate is cleared after approximately five minutes. These intervals do not represent a guarantee of network delivery. Turning sharing off requests an inactive state; if offline, the server expires the existing live state.
An identifier, optional name, choices, notice/consent records and last activity remain until disconnected. The in-app “Stop sharing and disconnect” control immediately disables sharing locally and asks the server to revoke the connection and clear the name and coordinates from the live participant record. If the connection is already revoked, retrying completes the local disconnection. If delivery cannot be confirmed, the app keeps sharing off and asks you to retry online. If the stored key is no longer available, the app can remove its local connection but cannot confirm deletion of the server record. A minimal identifier, credential hash and settings/notice/consent record may remain for access control. To request deletion of that retained record, email 0504569959f@gmail.com with your NoGpsNavigator installation ID, if available. Do not send passwords, location history or identity documents. If you no longer have the ID, explain that in your request so we can discuss what can be identified. We may need to verify that a request concerns your installation before deleting its record.
Local settings, visited areas and downloaded maps can be deleted through the app's controls or by clearing app storage or uninstalling. Uninstalling alone does not delete a server record. Contact information and messages you voluntarily send for support are used to answer and process your request. Map, speech and other external providers have their own retention practices.
Updates and security
The Google Play edition checks for updates through Google Play and installs them using Google's update flow. The separate website edition checks karantina.co.il/nogps/update.json in the background when a new app launch starts; returning from the background does not start another check. The older /nogpsnavigator/update.json address remains a compatibility feed for older installations. A confirmed new release requires updating before using the app screen; Cancel closes that screen. The APK is downloaded after you request the update, and its size, checksum, package, version and signing certificate are checked before installation. Website requests reveal ordinary connection information, not your navigation history.
Service requests use HTTPS. Installation credentials are encrypted with Android Keystore. App data is excluded from cloud backup and Android device-to-device transfer so installation credentials, consent, saved destinations and pending updates are not cloned to another phone. An ordinary update installed over the app preserves its local settings. If a connection key is irrecoverably missing or unreadable, administrator sharing stops and reconnecting requires a new explicit choice. A server record may remain until disconnected or deleted through support. No system can guarantee absolute security.
Your choices and contact
You can revoke Android location and notification permissions, stop foreground services, disable area recording, disable mock-location output and disable administrator sharing. Features that need those permissions or data will then be unavailable. This app is not designed for children. For privacy, deletion or support requests, contact 0504569959f@gmail.com. Material changes to these practices will be reflected in this policy and, where needed, an in-app notice or new consent request.