日本語

DustMetric: Rally RoadBook privacy policy

English translation prepared: 11 October 2026. Based on the policy updated 9 October 2026.

DustMetric: Rally RoadBook provides rally roadbook PDF display, distance measurement, speed and heading display, and wheel-sensor integration on your device. This policy describes information handled by the distributed app, where it is stored, sharing and deletion.

1. Information used on the device

Location

While the app is visible, precise or approximate device location is used to calculate distance, speed, CAP (travel heading) and GPS tunnel estimates. Latitude/longitude and route history are not saved. Location collection stops when the app moves to the background.

Bluetooth

Nearby devices permission is used to scan for and connect to CSC (Cycling Speed and Cadence) wheel sensors that transmit wheel revolutions. Device names, addresses, signal strength and pairing status are handled in memory while scanning. The selected sensor address is stored on the device for reconnection. Wheel revolutions are used for distance and speed calculations. Scanning and connections stop in the background. On Android 11 or earlier, location permission is also needed for Bluetooth scanning.

PDFs and markers

Selected PDFs are copied to Documents/CSCRoadBook/PDF/ for the library. The source is not overwritten. Marker strokes are saved in app-private storage. Exported marked PDFs are written to Documents/CSCRoadBook/Export/.

Password-protected PDFs are opened locally using the entered password. A temporary decrypted PDF is saved in the private cache and deleted when the display session ends or the loader is next initialized. Check the protection and contents of exported files before sharing.

License verification

A device code is derived from Android ID. Device license signatures, target device, type and expiry are verified locally. The license and trusted-time/boot information needed to detect clock rollback are stored privately. File-only verification does not send the device code to an authentication server. Copying sends it to the clipboard. Expiry verification may use OS-provided network or GNSS time.

Google Play purchase or dealer-account access sends the device code when purchasing, registering, restoring or renewing access. Device-specific signed permits and the purchase token or session information needed to renew them are encrypted using Android Keystore and saved in private storage excluded from backup. Permits are valid for 30 days after successful online verification; this is not the purchase entitlement's expiry. Existing device-file licenses do not acquire this 30-day condition.

Settings and running state

The app stores TRIP A/B distances, RUN/source/REV state, GPS multiplier and correction settings, tire circumference, last selected sensor address, last-opened PDF reference/identity/name, marker settings and strokes, row-detection cache, automatically read or user-corrected OCR distances/sections/instruction positions, remote assignments and scroll amount, display preferences, and the next-instruction alert state and selected sound reference. Location coordinates and route history are not stored.

2. External transmission and service providers

File-license verification, distance measurement and PDF processing take place on the device. The app does not use advertising, analytics or crash-collection SDKs.

Google Play purchase and restoration

The app uses Google Play Billing Library. Google Play handles purchase and payment. DustMetric does not receive card numbers or bank account information through the app. Google's privacy policy and Google Play terms apply to Google's processing.

To verify a purchase, its Google Play purchase token and device code are sent over HTTPS to https://dustmetric-account-auth.w031246231.workers.dev. The server sends the token to Google Play Developer API to check the product and purchase, pending, acknowledgment, cancellation, refund and consumption states. A valid purchase receives a signed device permit. Your Google Play account password is not sent to DustMetric.

Purchase tokens, order numbers and purchase-query responses are not stored in DustMetric's database or custom logs. The device stores the token encrypted for re-verification. Connection failures alone do not erase an unexpired permit. A successful check that finds no entitlement removes the Google Play permit. Existing file or dealer access is handled separately.

Dealer code and Google account access

Google sign-in sends Google identity information (ID token), a per-request random value and the device code to the same authentication server. An entered registration code is also sent to register access to the selected account. ID tokens may contain a Google user ID, name and email. The server verifies signature, intended app, expiry and the one-time random value.

The server stores a hash derived from the Google user ID, the registration-code hash, license number, registration/revocation timestamps, and hashes/expiry of device codes and sessions. These are pseudonymous data that can be associated with an account, not anonymous data. Raw Google ID tokens, user IDs, names, email addresses and registration codes are received and verified in memory, but are not stored in the database or custom logs.

Registration data is kept while needed to manage access and restoration on other devices. Signing out revokes that device's session and permit but does not delete the account or entitlement registration. Sessions are renewed online; expired sessions and one-time authentication requests are removed by later processing. Request registration-data deletion under section 4.

Authentication service operation

Purchase and account verification use Cloudflare Workers and D1. Cloudflare is a service provider. Source IP addresses are used to rate-limit improper requests. GPS coordinates, routes, Bluetooth sensor addresses, PDFs, images and OCR results are not sent to this service.

Normal operation does not output custom request-content logs, and Workers log/trace storage is disabled. Cloudflare infrastructure connection data is governed by Cloudflare's privacy policy. This does not mean no information is stored anywhere in the provider's infrastructure.

On-device OCR

If distances cannot be obtained from PDF text, enabling tracking automatically runs the bundled OCR and saves results. OCR review and correction allows re-reading and correction. PDFs, images and results stay on the device. Distances, sections, instruction positions and a PDF-content hash are saved privately. Deleting saved OCR in its dialog or deleting the PDF through the library deletes its OCR results.

Review access

When you explicitly select review access and enter a code, the code and a per-request random value are sent over HTTPS to https://dustmetric-review-auth.w031246231.workers.dev/v1/review/authorize. Authentication is renewed while in use; renewals stop in the background. GPS coordinates, PDFs and device codes are not sent. Authentication and expiry are held only in process memory and discarded on process exit or sign-out.

The review service manages a review-code hash and a dedicated signing key. Source IP addresses are used for rate limiting. It does not output custom request logs and Workers log/trace storage is disabled. Cloudflare's infrastructure connection data remains subject to its privacy policy.

Sharing and support

Only when you choose Share PDF does Android pass the exported PDF to another selected app. That app's privacy policy applies. Opening policy pages launches a browser; the browser and website have their own policies.

Device codes, contact details, recipient addresses and order/issue records voluntarily supplied to the seller outside the app are handled for license issue, management and support. Issue records are kept while needed for valid-license management, reissue and fraud prevention, then deleted when unnecessary. Support correspondence is normally deleted within one year after resolution, except records needed for legal obligations or unresolved disputes. Contact w031246231@gmail.com about deletion.

3. Backup and retention

Android cloud backup and device-to-device transfer are disabled for app-private settings and marker data. Settings remain until app data is cleared or the app is uninstalled. Markers remain until their PDF is deleted in the app, app data is cleared, or the app is uninstalled. Row caches may be removed by the device or OS. PDFs in the public Documents folders remain after uninstalling.

4. Deletion requests

Use Request data deletion in the app or the data deletion page, including after uninstalling. Email w031246231@gmail.com with the subject "DustMetric data deletion" and describe the data to delete. For dealer account access, include the registered Google account email and any available issue number or purchase record. Do not send Google passwords, registration codes, review codes, purchase tokens or license files. We will explain a safe verification method individually.

We explain effects on restoration and delete unnecessary data after confirming the request. Deleting a dealer account association prevents automatic restoration using that account. This does not delete the Google account, remove Google Play purchase history or request a refund. Records required for legal, accounting, unresolved-dispute or fraud-prevention reasons may be retained for the necessary period with an explanation. Revoked code hashes may remain to prevent reuse.

• Delete a managed PDF through the library to remove it and its markers.
• Delete exported PDFs separately through a file manager.
• Clear app data or uninstall to remove private settings, running state, markers, licenses and trusted-time information. Delete public PDFs and original downloaded licenses separately.
• Sign out on this device removes its dealer session and permit. Clearing data or uninstalling removes local Google Play permits/tokens but not the purchase itself. Seller-side issue records are not removed by uninstalling.
• Permits on other devices that have not checked online may remain until expiry. Sign out of review access to end the local review session.

Deleting server records does not erase device copies. Support correspondence is normally deleted within one year after resolution. Review authentication keeps no custom request-content logs; Cloudflare infrastructure data is described in section 2.

5. Permissions

• Precise/approximate location: local distance, speed and heading calculations.
• Nearby devices/Bluetooth: sensor scanning, connection and wheel data.
• Storage on Android 8/9: managed and exported PDFs.
• Internet: Google Play product lookup and purchase verification; Google sign-in and access registration/restoration/renewal; review authentication/renewal.
• Google Play billing: one-time purchases and owned-product queries.

The app does not request background location, advertising ID or all-files access.

6. Safety and children

The app is not designed for children. Stop in a safe location for detailed operations, setup or PDF selection.

7. Policy changes

If features change data handling, including advertising, analytics, crash reporting, online synchronization, accounts or billing SDKs, this policy and Google Play Data safety disclosures will be updated. Significant changes are announced by updating the policy date.

8. Operator and contact

Trading name: DustMetric
Support: w031246231@gmail.com