Privacy Policy

Mobile app: data and permissions

The app processes precise location on the device and, when track recording or CarPlay is enabled, background location; project names, geometry, attributes and notes; selected or captured photos, video, audio and documents; motion data and LiDAR environment scans. These data support maps, waypoints, surveys, navigation, export and GIS features. The operating system asks for each permission when the related feature is used, and permissions can be withdrawn in iOS/iPadOS settings.

MAb FieldCore requires no account and the controller operates no cloud backend that automatically receives projects, media or scans. Photos, audio, documents, geometry and LiDAR stay local until the user chooses a network feature, export or share action.

External services used by the app

Place search and reverse geocoding send search text or precise coordinates to Nominatim/OpenStreetMap Foundation. Weather requests send precise coordinates to Open-Meteo; its Free API states that technical logs may include IP addresses and coordinates and are deleted after 90 days. Territory queries may send an area, municipality or coordinates to Overpass/OpenStreetMap instances and the ISTAT service. A selected map or navigation provider — such as Apple MapKit/Maps, Google, Esri, Stadia, OpenStreetMap or Waze — may receive the IP address, map tiles, destination or coordinates needed to answer the request.

Nominatim and OSMF services create access records containing IP address, client, date/time and requested resources and may analyse queries for security, operation and dataset improvement under the OSMF policy. The app does not use these data for advertising, profiling or tracking and integrates no controller-operated analytics. Each provider processes data under its own role, terms and privacy notice and only for the user-initiated service request.

In-app storage, sharing and deletion

Projects remain on the device until the user deletes them. Sessions marked private encrypt their JSON, geometry and attributes with AES-256-GCM and a device Keychain/Keystore key; original photos, media and LiDAR captures remain separate clear files inside the operating-system sandbox. Private keys do not migrate to another device, so a backup without its key intentionally remains inaccessible. Direct iOS File Sharing access to the Documents folder is disabled.

Local TV sends a project view over HTTP with a temporary token; WebDAV uses HTTP Basic and does not encrypt traffic or credentials. Both require an explicit action, must be used only on a trusted LAN or VPN, and stop when the app is no longer active. Exports, document providers and the system share sheet send files only to a destination chosen by the user. Delete a project, its attachments and exports in the app or chosen provider; withdraw location, camera, microphone, photos, motion or local-network access in system settings.

Advertising in Free and Trial editions

Only the Free and Trial editions may display a Google AdMob banner, limited to the project library and never over maps, navigation, CarPlay, LiDAR or RoomPlan captures. Paid editions neither request nor display ads.

Google Mobile Ads and the UMP consent platform may process IP address, device or advertising identifiers where available, app and ad interactions, diagnostics, approximate region and consent choices. Ads are requested only when UMP reports that requests are permitted; privacy options can be reopened in the app and consent may be withdrawn. Google acts under its own roles, terms, providers and safeguards for any international transfers.

• No advertising on CarPlay.
• No sale of projects, geometry, photos or LiDAR scans.
• Privacy rights contact: privacy@mabfieldcore.it.

Data controller

The data controller is Marcello Bisaccia. Privacy enquiries and data-subject rights: privacy@mabfieldcore.it.

Data processed

During a connection, the infrastructure may process technical data such as IP address, browser type, requested URL, date, time and security information. The site does not use these data for advertising or profiling.

If you choose to send an email, the sender address, message, attachments and delivery metadata are processed.

Purposes and legal bases

Technical data are processed to deliver and secure the site, prevent abuse and diagnose faults, based on providing the requested service and the legitimate interest in security.

Emails are processed to reply and, where relevant, take pre-contractual steps requested by you. There is no automated decision-making or profiling.

Whether data are required

Technical data are required to establish the connection. Sending an email is optional; without the relevant data, a reply cannot be provided.

Recipients and providers

Data may be handled by hosting, CDN, security and email providers under their respective roles and only to provide their services. They may also be disclosed to advisers or authorities where required by law or to protect rights.

International transfers

Some infrastructure providers may process data outside the European Economic Area. Where applicable, transfers must rely on an adequacy decision or safeguards under GDPR Chapter V, such as standard contractual clauses.

Retention

Providers retain technical data for the minimum period needed for security, diagnostics and applicable obligations, according to infrastructure criteria and settings. Emails are kept as long as needed to handle and document the request, and longer only for a relationship, legal obligation or dispute.

Your rights

Where applicable, you may request access, rectification, erasure, restriction, portability or object by contacting the controller.

• Obtain confirmation that data concerning you are processed.
• Correct inaccurate data or request erasure.
• Restrict or object to processing where the conditions apply.
• Lodge a complaint with the Italian Data Protection Authority.

Security and updates

Risk-appropriate technical measures include HTTPS, locally hosted resources and restricted external connections. This notice is updated when the site, providers or processing activities change.