Encrypted GPS team tracking
that nobody else can read.
Xopoz is a privacy-first Android app for professional field teams. Every position is encrypted on the device before it leaves. The server stores only ciphertext and holds no keys — so even a full breach can't reveal where your team is.
No ads · No data broker · No phone number required · Free for 3 months · Android 8.0+
Why Xopoz
Privacy that's structural, not a policy promise
Most tracking apps ask you to trust their servers. Xopoz is built so you don't have to.
Encrypted on the device
GPS coordinates are encrypted before they ever leave your phone. The server sees ciphertext only and cannot decrypt a single position.
Per-team encryption keys
Each team uses independent keys. The same device is encrypted differently for every team it belongs to — no cross-team data leakage, ever.
No Google dependency
Uses the native Android GPS API directly — not Play Services. Runs on any Android device, including custom ROMs and de-Googled phones.
Battery-intelligent tracking
Hardware motion sensors detect movement at near-zero power. GPS wakes instantly when you move and powers down when you stop — continuous tracking without the drain.
Works off-grid
No connection is needed to keep recording your own position. Fixes cache locally and sync to the team the moment connectivity returns. Deploy private tile servers for restricted networks.
Device-centric model
Each physical device is its own tracking entity. One user with three devices appears as three members — ideal for shared vehicles, equipment, and multi-device operations.
Geofencing Beta
Draw zones and get entry and exit alerts. The full monitor loop is shipped and in active testing — a crossing is confirmed after a 5-minute dwell to filter out GPS jitter.
Run trails & Track Manager
Record run sessions as saved tracks and keep a full trail history of where the team has been. Import and export routes as standard GPX files.
Safe team sharing
Share with your team, not with the world
Every position is encrypted for your team before it leaves your phone. The server relays ciphertext it cannot read — and anything kept on your own device stays encrypted and under your control.
Encrypted for the team
Positions are encrypted with your team's own key before transmission. The server stores and forwards blobs it holds no key for — a breach exposes nothing readable.
Your history stays yours
Local position history is optional, encrypted with a device-only key, and kept for exactly as long as you set. It's excluded from device backups, and erasing it overwrites the data — the server never holds a readable copy.
Private points of interest
POIs are private by default and stay on your device. When it helps the team, sharing a point of interest with them is a deliberate, optional action — never automatic.
Each position becomes one 16-byte (128-bit) AES-CBC ciphertext block. A 64-bit initialization vector — securely random and unique to every fix — is split and spread through the block, so it never travels separately and identical coordinates never produce identical ciphertext.
Built for the field
Designed for real coordination, not social feeds
Where reliability, privacy, and battery life matter more than status updates.
Getting a child to school or on a trip. Follow the route in real time and know they arrived safely — encrypted end to end, with no ads, no data broker, and no social feed attached to your family's movements.
Monitoring a team in the mountains. Keep an expedition or mountain-rescue group together on one map as they move through the backcountry. Each device records its own track and pushes position to the team the moment it can.*
* A network connection is required for a position to propagate to other team members. Out of coverage, fixes are stored locally and sync automatically once connectivity returns.
Tracking without surveillance.
Install Xopoz and get your team on the map — encrypted end to end, with no ads and no data monetization.