QField lacks a privacy statement

[gdt]

Describe the issue

QField lacks a privacy statement. Obviously GIS data is sensitive, as is the user's location. A user should be able to understand what will happen before using the plugin, or the app.

Expected behavior

I expect there to be a privacy statement which sets out clear expectations for data being transmitted outside the program. I expect it to follow the open-source norm that no data is sent unless specifically requested or consented to by the user. It should mention that external layers will get viewport coordinates, but that those layers are configured by the user.

Particular concerns are:
is location ever sent anywhere?
is there any analytics and if so what is in them?
are there any advertising sdks? (surely not, but there is no claim there aren't!)

Observed behavior

Look at qfield.org, and fail to find a privacy statement. Look at the app sources, read README.md, and look for PRIVACY.md. egrep -i for privacy, and see it only in the code of conduct, in a vcpkg directory. Look at the plugin page in qgis.

QGIS (please complete the following information)

• QFieldSync 4.12.1 (on qgis 3.34.13)

QField (please complete the following information)

tip of master branch in this repo

[m-kuhn]

You will find the privacy policy on https://qfield.org/privacy_policy.html

[gdt]

Great, can you link to it from the main page of qfield.org? I clicked around and searched in both rendered page and html source, and I can't find it.

This talks about the identifying information and the cloud service. But there's also "what does the app do" separately from that, which should be in the app repo at least. That's really what I was getting at; sorry for not being clear.

[m-kuhn]

The QFieldCloud privacy policy can be found here: https://qfield.cloud/privacy.html

https://qfield.org/privacy_policy.html is really "what does the app do" and is linked from the play store (i.e. where the binaries are distributed). I created a pull request for the website to link to it too.

[nirvn]

@m-kuhn , thanks for adding the privacy link on qfield.org , closing this as I think we've achieved proper visibility of privacy policies :)

[gdt]

Thanks. Being a person who cares about privacy, I don't use the play store, but rather get them from your github releases directly (via obtainium, so it's automated).