Skip to main content

Privacy Policy — WARA PS Positio

Last updated: 2026-11-02

This Privacy Policy describes how WARA PS Positio (Google Play package waraps.positio), developed within the WARA PS project, processes personal data. For questions about this policy or your data, or to exercise your rights, contact [email protected].

In short

No data is tracked or stored unless you want it to be.

  • The app has no built-in server address and contains no analytics, advertising or crash-reporting service.
  • Until you enter the address and credentials of an MQTT broker (and, for video, a video server) and switch the connection on, the app sends nothing about you to any server. It only reads your position on your own device to show it on your map.
  • If you switch on the MQTT connection with credentials for a WARA PS broker, your telemetry (position and related status data) is sent to WARA PS, which receives it and may store it for 12 months.
  • If you switch on video streaming to a WARA PS video server, your video is sent to that server. Video is never recorded automatically. On WARA PS servers a stream is only recorded after you have granted recording of your video streams.
  • If you use an MQTT broker and a video server of your own, nothing is sent to or stored by WARA PS.
  • The one exception is the map: it is drawn from tiles fetched from third-party map services (see "Map services").

Purpose of the application

WARA PS Positio is a field-awareness application for the WARA PS situational awareness ecosystem. Once you connect it to an MQTT broker, it transmits your device's position, heading, and status to that broker, renders other agents, tasks, and map objects reported on the same broker, and handles WARA PS task intake and execution (accept, reject, complete, abort). It also supports live video streaming from the device's camera to a video server you configure.

Who is responsible for your data

The app does not send any data to its developers. The controller of the data received and stored on WARA PS servers is the WARA PS Core Team, Combitech AB, Universitetsvägen 14, Linköping, Sweden (contact: [email protected]). If you connect to a broker or server run by someone else, such as your own organization or another party, that party alone decides what is stored and for how long, and is the controller of that data. WARA PS does not receive it, and this policy does not describe their processing.

What stays on your device

  • Your position, read from the device's location services, is used to show your position on the map, whether or not any connection is switched on.
  • Your settings, and the server addresses you enter.
  • The usernames and passwords for the broker and servers, stored encrypted with the Android Keystore.
  • A task you have accepted, saved on the device so that it survives an app restart. It is deleted when the task ends.
  • A short breadcrumb trail of recent movement, kept in memory for the current session only.
  • Credentials and the saved task are excluded from Android's backup and device-transfer features.

Data sent when you switch on a connection

Precise geolocation and status (MQTT). While the MQTT connection is on, including while the app runs in the background (a notification is shown), the app publishes your position, speed, course, heading and battery level to the broker you configured, together with a heartbeat that identifies your agent (agent name, a randomly generated agent identifier, and the agent type and model you set), and status messages about tasks you receive. It also receives what other agents and systems publish on the same broker, so that authorized operators and connected command-and-control systems on that network see your position in real time, and you see theirs. The MQTT connection is off by default.

Camera and microphone (video). Only when you start video streaming, the app accesses the camera and sends live video to the video server you configured, using RTMP or WHIP. Audio is off by default: microphone audio is included only if you turn on "Enable audio" in the Video settings. The app does not store the stream on your device and never records it. A video server can record streams, but that is a manual function at the server side, available for any stream sent to the video server that is currently set, within or outside WARA PS. On WARA PS servers, a stream is only recorded after you have granted recording of your video streams. If your stream shows or records other people, you are responsible for having a lawful basis and for informing them.

Camera for setup QR codes. When you choose to import settings from a QR code, the app uses the camera only while the scanner is open, to read the code. Nothing the camera sees is stored or sent anywhere, and what the code contains is used only to fill in settings on your device after you have confirmed them. If you share your settings as a QR code, the code is only drawn on your screen. It contains your usernames and passwords only if you tick them, so show such a code only to people you trust.

Photographs and map points. If you attach a photograph to a map point, it is uploaded to the storage address you configured, via a pre-signed upload URL, and becomes visible to other authorized users on the network. The map points you create (name, description, position, photograph) are published to the broker. You can delete a point you created from within the app.

Route planning. If you enter a route-planner name in the Map settings, your position and the task's waypoints are sent over your broker connection to that route-planner agent when you press Route. The planner publishes the route it calculates on the broker, so other authorized users of the broker can see both the request and the answer.

Who receives your data

  • The broker, video server and storage servers you configure, the route-planner agent you name (it is reached through the broker), and the operators and systems connected to them.
  • Map providers and Google Play services, as described below.
  • Your data is not sold and is not used for advertising or analytics.

Map services

To draw the map, the app downloads map tiles and elevation data from third-party services: OpenFreeMap (street map and 3D buildings), Esri ArcGIS World Imagery (satellite imagery) and elevation data hosted on Amazon Web Services. These services receive your device's IP address and the map area you are viewing, which is usually centered on your position. The app sends no account or identity data to them. Some of these providers may process data outside the EU/EEA under their own privacy policies and safeguards. The street and satellite map addresses can be changed in the Map settings.

Google Play services

Positioning uses Google Play services on your device (its location service). Whether the device is moving is worked out from the phone's own motion sensors and the position itself; the app does not use Google's activity recognition and does not ask for the physical-activity permission. Google processes any data it receives under its own terms and privacy policy. The app does not send your position to Google itself.

Legal basis

  • Consent (GDPR Article 6(1)(a)): sending your telemetry, video, audio and photographs. You give it by entering the server details and switching the connection on, and you can withdraw it at any time by switching the connection off. Withdrawal does not affect processing that took place before.
  • Providing the map you request (Article 6(1)(b)): fetching map tiles.
  • The app does not intentionally process special categories of personal data. Providing data is voluntary: without a connection the app shows the map and your own position only.
  • The app makes no automated decisions about you.

Retention

On your device, data is kept as described above, and can be removed by clearing the app's data or uninstalling the app. On a server, retention is decided by the operator of that server. On WARA PS servers, stored telemetry is kept for 12 months. Video is only recorded on WARA PS servers after you have granted recording of your video streams; such recordings can be kept longer than 12 months, and you can ask for them to be deleted (see "Your rights").

Your rights

If the GDPR applies to you, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time. The app has no user accounts, so please include your agent name (shown in Settings) and the approximate times when you contact [email protected]. We aim to answer within one month. For data held by someone else's broker or server, contact the operator of that server. You also have the right to lodge a complaint with a data protection authority, for example, in Sweden, the Swedish Authority for Privacy Protection (IMY), or the authority in your own country.

You can control the app at any time: switch the MQTT connection and video streaming off, switch audio off, delete map points you created, and revoke the location, camera, microphone and notification permissions in Android's system settings.

Security

Whether a connection is encrypted depends on the server and the settings you choose. Credentials are stored encrypted on the device and are sent only to the server you configured, for authentication.

Children's privacy

WARA PS Positio is a professional field tool intended for operators within the WARA PS ecosystem and is not directed at, marketed to, or knowingly used by children.

Changes to this policy

This policy may be updated from time to time, including to reflect changes to the application's functionality. The date of the most recent revision is shown at the top of this document.