Xopoz

1. Acceptance of Terms

By downloading, installing, or using Xopoz ("the App"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not use the App.

Xopoz is developed and operated by Tiritix, operated by Thierry Bremard, Nuremberg, Germany ("we", "us", "our").

2. Description of Service

Xopoz is a privacy-first GPS team tracking application for Android. The App enables:

• Real-time encrypted GPS position sharing within teams.
• Points of Interest management with folder-based organisation.
• Geofence alerts for monitoring area entry and exit events.
• Emergency SOS alerts with encrypted position data.
• GPX track import, visualisation, and export.

Each device is treated as an independent tracking entity. Teams are collections of devices, not people. You may register multiple devices under the same account.

Xopoz is currently provided free of charge. We reserve the right to introduce paid features in the future with prior notice.

3. Account Registration

• You must provide a valid email address to create an account. No phone number is required.
• You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.
• You must be at least 16 years old to use Xopoz.
• You must not create accounts using false, misleading, or disposable identities with the intent to abuse the service.

4. Team Membership & Consent

• Creating or joining a team requires explicit consent to share your position with all team members.
• Xopoz operates on a full-trust principle: every team member can see the real-time and historical position of every other member. There is no selective visibility. If someone should not see your location, they must not be in the same team.
• Team roles (Creator, Admin, Member) determine your permissions within each team.
• You may leave any team at any time. Leaving permanently deletes all your position data for that team.
• Team encryption keys are generated and stored locally on your device and are never transmitted to or stored on our servers.

5. Licence Grant & Restrictions

We grant you a limited, non-exclusive, non-transferable, revocable licence to install and use the App on Android devices you own or control, strictly for its intended purpose of team GPS coordination.

This licence does not include the right to:

• Sublicense, sell, resell, lease, or commercially distribute the App or any part of it.
• Copy, modify, adapt, or create derivative works based on the App.
• Use the App or its output as a component of another product or service without written authorisation.

The Xopoz application — including its code, design, encryption protocols, user interface, and documentation — is the intellectual property of Tiritix and is protected by applicable intellectual property laws.

6. Acceptable Use

You agree not to:

• Use the App to track any person or device without their knowledge and explicit consent.
• Use the App to harass, stalk, threaten, or abuse any individual, whether a team member or otherwise.
• Use the App for any purpose that is unlawful, fraudulent, or in violation of applicable local, national, or international law.
• Share your account credentials or Group Tickets (team join tokens) with unauthorised parties.
• Misrepresent your identity or impersonate another person when registering or using the service.

7. Prohibited Security Activities

Xopoz processes real-time geolocation data of natural persons — high-sensitivity personal data whose unauthorised disclosure can cause significant harm, including personal safety risks. We take this responsibility seriously and enforce the following prohibitions without exception.

Without prior written authorisation from Tiritix, the following activities are strictly prohibited:

• Reverse engineering: decompiling, disassembling, or attempting to derive the source code, encryption keys, cryptographic protocols, or internal architecture of the App or its backend systems.
• Security probing: conducting vulnerability scans, penetration tests, fuzz testing, or security assessments of any kind against any Xopoz or Tiritix system, API, or application.
• Traffic interception: intercepting, recording, replaying, or tampering with network traffic via proxy, man-in-the-middle, or packet inspection tools.
• API abuse: accessing, querying, or invoking any non-public endpoint; enumerating or reconstructing any API schema, route, or data model.
• Credential attacks: credential stuffing, brute-force authentication, token forgery, session hijacking, or any form of unauthorised credential exploitation.
• Automated extraction: scraping, crawling, harvesting, or systematic extraction of data from any Tiritix-operated service.
• Service disruption: any interaction that degrades, overloads, floods, or impairs the availability, integrity, or performance of any Tiritix service, including denial-of-service attacks.
• Tool creation: creating, distributing, or using tools specifically designed to attack, bypass, or circumvent the security, encryption, or privacy mechanisms of Xopoz.

8. Monitoring & Enforcement

All interactions with Xopoz systems are logged and monitored. Metadata collected includes source IP addresses, request timestamps (UTC), HTTP methods, URI paths, request headers, and response codes. Log data is retained in accordance with our data retention policy and applicable legal requirements.

Reservation of Rights: We reserve the right to investigate, suspend accounts, terminate access, delete data, and take any other technical or legal action — including pursuing civil damages and filing criminal complaints — if we reasonably suspect a violation of these Terms. In particular, any attempt to hack, crack, probe, or abuse the system will be met with the full extent of available legal remedies.

Under German and EU law, the mere attempt to circumvent access controls or test system defences without authorisation constitutes a criminal offence — no successful breach is required for prosecution. Applicable statutes include, without limitation:

• German Criminal Code (StGB) — §202a (data espionage), §202b (interception of data), §202c (preparation of data espionage), §303a (data tampering).
• Directive 2013/40/EU — Articles 3–8: criminalising unauthorised access to information systems.
• German Federal Data Protection Act (BDSG) — §42: criminal penalties for unauthorised processing of personal data.
• Convention on Cybercrime (Budapest Convention) — Articles 2–6: international framework applicable across 68+ signatory states.

Log data may be disclosed to law enforcement authorities, regulatory bodies, or legal counsel in connection with any investigation or proceeding arising from unauthorised access.

9. Privacy & Data Protection

Your use of Xopoz is also governed by our Privacy Policy, which explains in detail what data we collect, how we protect it, and your rights under GDPR. Key points:

• All GPS positions are encrypted on your device before transmission.
• Our servers store only encrypted data and hold no decryption keys.
• You control data retention (1–30 days) and can delete your data at any time.
• We do not sell, rent, or share your data with any third party.
• All data is processed on a single dedicated server located in Germany.

Nothing in these Terms overrides or weakens the privacy commitments made in our Privacy Policy.

10. Emergency SOS Feature

• The SOS feature sends an encrypted emergency alert with your position to your team members.
• Xopoz is not a replacement for emergency services (police, ambulance, fire). Always call your local emergency number (112, 911, etc.) in a life-threatening situation.
• We do not guarantee delivery, timeliness, or receipt of SOS alerts. Network conditions, battery state, and device availability may affect delivery.

11. Third-Party Services

• OpenStreetMap: the App uses OpenStreetMap for map tile rendering. Your use of map tiles is subject to the OpenStreetMap terms. Tile requests transmit your approximate viewport area but not your precise GPS position.
• Custom Tile Servers: if you configure a personal tile server, requests to that server are your responsibility.

No other third-party services, SDKs, or analytics frameworks are integrated. We are not responsible for third-party service availability, content, or policies.

12. Disclaimer of Warranties

Xopoz is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to:

• Merchantability or fitness for a particular purpose.
• Accuracy or reliability of GPS positions.
• Uninterrupted or error-free operation.
• Security against all possible threats.

GPS accuracy depends on your device hardware, satellite visibility, and environmental conditions. We do not guarantee the precision of any reported position.

13. No Guarantee of Reliability in Real-Life Scenarios

Xopoz is a location monitoring aid and does not claim to be 100% reliable. The application cannot be held responsible for incidents, accidents, or any adverse outcome arising from reliance on its features — including the Emergency SOS system.

Real-life situations introduce unpredictable factors entirely outside our control, including but not limited to:

• User stress: under pressure, users may tap incorrect buttons, miss confirmation steps, or misread information on screen.
• Insufficient battery: a device with low or depleted battery cannot send or receive alerts, update positions, or maintain background services.
• Network connectivity: poor, intermittent, or absent mobile data or Wi-Fi will prevent position sharing and alert delivery.
• GPS signal quality: dense buildings, underground locations, heavy foliage, or adverse weather can degrade or block GPS reception entirely.
• Operating system behaviour: Android and modified distributions (EMUI, MIUI, ColorOS, OneUI) may exhibit unpredictable behaviour regarding background services, real-time scheduling, and GPS access — potentially delaying or preventing position updates without warning.
• Device limitations: hardware defects, insufficient storage, or other device-specific issues.
• Human factors: failure to charge the device, forgetting to enable location permissions, not joining the correct team, or misconfiguring settings.
• This list is not exhaustive. Other unforeseen factors may affect operation.

Users must treat Xopoz as a supplementary tool, not a primary safety system. Always maintain independent emergency plans and backup communication methods.

14. Limitation of Liability

To the maximum extent permitted by applicable law, Tiritix shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the App, including but not limited to:

• Loss of data or encryption keys.
• Inaccurate GPS positions or failed position updates.
• Failed or delayed SOS alert delivery.
• Unauthorised access to your device or account resulting from your failure to safeguard credentials.
• Any injury, loss, or damage resulting from reliance on the App in emergency or time-critical situations.

In jurisdictions that do not allow the exclusion of certain warranties or the limitation of liability for consequential damages, our liability is limited to the maximum extent permitted by law.

15. Indemnification

You agree to indemnify, defend, and hold harmless Tiritix and its operator from and against any claims, liabilities, losses, damages, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Your violation of these Terms.
• Your misuse of the App, including use for stalking, harassment, or surveillance without consent.
• Any unauthorised access or security activity you conduct against Xopoz systems.
• Your violation of any applicable law or third-party rights.

16. Termination

• You may stop using the App at any time by uninstalling it. This removes all local data.
• You may leave any team at any time, which permanently deletes your team-associated data.
• We reserve the right to suspend or terminate accounts that violate these Terms, without prior notice if the violation involves security abuse or illegal activity.
• Upon termination, your data will be deleted in accordance with our Privacy Policy.
• Sections that by their nature should survive termination (including Sections 7, 8, 12–15, and 18) will survive termination of these Terms.

17. Changes to These Terms

We may update these Terms from time to time. Changes will be reflected on this page with an updated effective date. For material changes, we will notify you via email or in-app notification and may require renewed acceptance before continued use.

18. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of the Federal Republic of Germany, including the BDSG, StGB, and GDPR (EU) 2016/679, without regard to conflict of law provisions.

Any disputes arising from or relating to these Terms shall be subject to the exclusive jurisdiction of the courts of Nuremberg, Germany. Tiritix reserves the right to pursue legal proceedings in any competent jurisdiction where unauthorised activity originated, transited, or produced effects.

Supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

19. Contact

If you have questions about these Terms, contact us at:

Data Controller: Tiritix, operated by Thierry Bremard, Nuremberg, Germany.

Email: xopoz@tiritix.com

Website: tiritix.com