Skip to content

Privacy Policy — Hecate Capture

Effective date: 2026-06-11 Developer: Matthias Morath

Hecate is a field tool for geo-referencing physical objects. It collects only what is needed to identify and locate the assets you record. There is no hosted backend operated by the developer, and no third-party analytics or tracking of any kind.

What we collect

What the app captures is defined entirely by the profile your organisation's administrator configures — a profile is a customizable form describing the fields and scans for one use case. We, as the developer, neither create these profiles nor ever see them or the data you capture against them. What any given deployment collects is therefore decided by your administrator, not by us.

For a typical profile the app handles:

  • Asset details you enter or scan (e.g. serial number, order number, type).
  • Precise location (GPS) at the moment of capture — only if you grant the location permission. You can decline or revoke it in iOS Settings at any time; the app still works without it.

Where it goes

Asset data is published only to the MQTT broker you configure. You choose and control that broker. The developer operates no server, receives none of your data, and never sees the profiles you use or the assets you capture against them. There is no advertising, no profiling, and no cross-app or cross-website tracking.

Storage and security

  • Assets are stored on your device until you delete them.
  • The broker password is held in the iOS Keychain — never in plain text and never written to logs.
  • Connections to the broker can use TLS (mqtts) so data in transit is encrypted.

Data sharing

We do not sell, rent, or share your data with third parties. The only transmission is the publish to your own MQTT broker, performed on your behalf at your direction.

Your choices

  • Location: grant, decline, or revoke at any time in iOS Settings → Privacy.
  • Photos: none. Hecate Capture cannot take a photo — the capability was removed, not switched off, because a photo cannot travel to an MQTT broker and Hecate runs no image backend. Reading a QR code from a photo you pick is a different thing: the image is decoded on-device and never stored or sent.
  • Deletion: delete any asset on-device at any time. Data already published to your broker is governed by your broker's retention.

Children

Hecate is a professional/field utility and is not directed at children.

Changes to this policy

If the app's data handling changes, this page and the in-app Settings → Privacy screen will be updated together.