Summary
SurveyLog does not send your data to us.
- All journals, attachments, locations and contacts are stored on your device.
- Syncing to Google Drive is optional. Data is encrypted on the device with your passphrase before it is uploaded to your own Drive.
- There is no SurveyLog server, no advertising, no analytics and no third-party trackers.
- Data is shared only when you send it yourself, for example by email to a client.
Who we are
SurveyLog is developed by XMTN Studio ("we"). This policy explains how the SurveyLog Android app and the surveylog.xmtn.net website handle data. Questions about this policy can be sent to technical.support@xmtn.net.
Data stored on your device
When you use SurveyLog, the app stores the following in the app's internal storage on your device:
- Projects and journals: titles, notes, tags and survey times.
- Attachments: photos, videos, audio recordings and other files you add, with their captions.
- Locations: GPS coordinates, accuracy and altitude of points you tag, or coordinates you type in.
- On-site contacts: name, role, phone, email, organisation and notes that you pick from your phone's contacts or type in.
We do not receive, collect or have any way to see this data. It may contain personal information about other people, such as interviewees or clients. You are responsible for obtaining their consent under applicable law, including Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
App data is excluded from Android's automatic backup. This is deliberate, so that client data is never copied off the device unencrypted.
Android permissions
SurveyLog asks for a permission only when you use a feature that needs it. You can deny or revoke any permission in Android Settings, and the rest of the app keeps working.
| Permission | Used for |
|---|---|
| Location (precise & approximate) | Tagging a GPS point on a journal when you press "Tag location". Location is never tracked in the background. |
| Camera | Taking photos and videos as attachments. |
| Microphone | Recording audio and the sound of videos. |
| Photos & media / files | Choosing existing photos, videos, audio or files to attach. Only the items you pick are accessible. |
| Internet | Google sign-in, syncing to Google Drive, and sharing. Never used for ads or analytics. |
Contacts: SurveyLog does not request permission to read your whole address book. It uses the built-in Android contact picker, so the app receives only the contact you choose.
Google account and the Google data we access
Signing in with Google is optional. You only need it for sync. If you sign in, SurveyLog requests the following access:
| Access | Use |
|---|---|
Email address & basic account identity (openid, email) | Showing which account is signed in, and keeping local data from mixing between accounts. |
App data folder in Google Drive (drive.appdata) | Storing an encrypted copy of your journals in a hidden folder reserved for SurveyLog. The app cannot see any of your other Drive files. |
Data from Google APIs is used only for the purposes above. It is not sold, not used for advertising, not transferred to others, and not read by humans on our side. SurveyLog's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Encryption and sync
- Before upload, every journal and attachment is encrypted on the device with AES-256-GCM. The key is protected by a passphrase you create, which is turned into a key with PBKDF2-SHA-256.
- Your passphrase is never sent to us or to Google, and is not stored on the device.
- File names in Drive are random codes, so journal titles and project names are not visible.
- Important: if you forget your passphrase, the data in Drive cannot be recovered by anyone, including us. The data on your device is not affected.
Sharing
We do not share your data with anyone. Data leaves the app only when you send it:
- Email: SurveyLog prepares the report and attachments, then opens them in the email app you choose. That app does the sending. Recipients can read the PDF reports and photos you send.
- Android share menu: for example a PDF report shared to another app. What happens next is governed by that app's policy.
- Exports and backups: CSV, GeoJSON and backup files that you save yourself.
Retention and deletion
- Data on the device is kept until you delete it in the app, clear the app's data, or uninstall SurveyLog.
- Data in Google Drive can be deleted from the account menu in the app, or in Google Drive on the web: Settings → Manage apps → SurveyLog → Options → Delete hidden app data.
- You can revoke SurveyLog's access to your Google account at any time at myaccount.google.com/connections.
- Because we do not hold your data, we cannot access, change or delete it on your behalf. You control it entirely through your device and your Google account.
The surveylog.xmtn.net website
This website is static. It uses no cookies, analytics, advertising or third-party scripts. Your light/dark theme choice is kept in your browser's local storage and is not sent anywhere. The site is hosted by Cloudflare, which may process IP addresses and technical request data to deliver the pages and protect them from attacks.
Other terms
Children
SurveyLog is a professional work tool and is not directed at children under 13.
Changes to this policy
If the way SurveyLog handles data changes, this policy will be updated before that change is released. The effective date at the top of this page will change too. Significant changes will be announced in the app.
Contact
XMTN Studio
Email: technical.support@xmtn.net
Website: surveylog.xmtn.net