Who we are and what this policy covers
The data controller for the website and applications described here is Liangjiang New Area Weimang Topology Software Development Studio (Individually Owned Business) (Chinese legal name: 两江新区微茫拓扑软件开发工作室（个体工商户）), an individually owned business registered in Liangjiang New Area, Chongqing, China under Unified Social Credit Code 92500157MAKNFWQE3R.
Registered and operating address: Room 3-3, Att. G26-10-004571, 3F, No. 210, West Section of Jinkai Avenue, Dazhulin Sub-district, Liangjiang New Area, Chongqing, China (重庆市两江新区大竹林街道金开大道西段210号3楼3号附G26-10-004571号). Official email: monyoung@microtopology.com. Telephone: +86 19544575794.
This policy applies to microtopology.com and to our Android applications Topo Notes, Meridian Field and Atlas Local, including any future version distributed through Google Play under the same legal entity. It does not apply to third-party websites, services or app stores.
In this policy, “we”, “us” and “our” mean the legal entity named above. “You” means a visitor to the website or a user of an application.
Summary
This summary is a shortcut, not a substitute for the rest of the policy.
- We collect the information you choose to send us, account information needed to operate optional sync, app content you create, and limited diagnostics needed to keep the software reliable.
- Our Android products are designed to keep core content on your device unless you choose to export or sync it.
- We do not sell personal data and we do not use it for cross-context behavioural advertising.
- We share limited data with service providers such as Google Play services and Firebase for distribution, authentication and diagnostics.
- You can request deletion of your account and personal data at any time by emailing monyoung@microtopology.com.
Data we collect
We try to collect only what is needed for a specific purpose. The categories below describe the data we may collect depending on how you use the website and which product features you choose.
| Category | What it may include | How it is collected | Why we need it |
|---|---|---|---|
| Enquiry data | Name, email address, organisation, topic, message, consent record, correspondence. | Contact form, email, phone or support request. | To respond to your enquiry and keep a record of the request. |
| Account data | Email address, display name, account identifier, authentication token, preferences. | When you create an account or sign in with Google, if you choose an optional sync feature. | To create and secure the account, sync content and provide support. |
| App content | Notes, links, tags, attachments, files or photos you add, survey entries, form responses, field observations. | Created or selected by you inside an application. | To provide the core product feature and, if enabled, sync it across devices. |
| Location data | Precise location while recording a reading in Meridian Field; approximate location for a form field in Atlas Local. | Device location permission, only while you use the feature. | To geotag a field observation or measurement. We do not collect background location. |
| Camera, microphone and files | Photos, voice notes or documents you choose to attach. | Device permission, only when you start the relevant action. | To attach evidence, record a note or export/import a dataset. |
| Diagnostics and device data | Device model, operating system version, app version, language, crash reports, performance data, IP address, approximate region derived from IP, app instance identifier, timestamps. | Firebase Crashlytics and Analytics, Google Play services, and our server logs. | To keep the apps stable, diagnose crashes, prevent abuse and understand aggregate reliability. |
| Website server logs | IP address, browser user agent, requested path, timestamp, response status. | Automatically generated when you visit the website. | To deliver the site, protect it from abuse and investigate security incidents. |
We do not ask for passwords by email, and we do not collect payment card details on this website. If paid features are introduced through Google Play, payment processing will be handled by Google under its own terms and privacy policy.
How we use data and our legal bases
We use personal data for the purposes listed below. Where the GDPR or UK GDPR applies, we rely on the legal basis shown. Where another law applies, we rely on the equivalent lawful basis under that law, including consent where required.
| Purpose | Data used | Legal basis (GDPR/UK GDPR) |
|---|---|---|
| Respond to enquiries and provide support | Enquiry data, correspondence | Legitimate interests (responding to you); consent where required |
| Create and secure accounts; provide optional sync | Account data, app content | Performance of a contract |
| Provide location-based field features | Location data, app content | Consent (device permission) |
| Maintain reliability, diagnose crashes and prevent abuse | Diagnostics and device data, server logs | Legitimate interests (security and reliability) |
| Comply with legal obligations and respond to lawful requests | Relevant records | Legal obligation |
| Understand aggregate product usage | Aggregated analytics data | Consent where required; otherwise legitimate interests in improving the product |
We do not use personal data for automated decision-making that produces legal or similarly significant effects. Our AI-assisted features are designed to support a human decision, not to replace it.
International transfers
We are based in China. Our service providers may process data in other countries, including the United States, the European Economic Area and other locations where they operate. Data protection laws in those locations may differ from the laws where you live.
Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, the UK Addendum, or other lawful mechanisms. Where the law requires a separate consent, security assessment or filing for a transfer from China, we will put that mechanism in place before the transfer.
How long we keep data
We keep personal data only for as long as needed for the purpose for which it was collected, or as required by law. The periods below are our standard practice.
| Data | Retention period |
|---|---|
| Contact and support enquiries | 24 months from the last correspondence |
| Account data and synced app content | Until you delete the account or data, then up to 30 days for processing; backups are purged within 30 days after that |
| App content stored only on your device | Until you delete it, clear app storage or uninstall the app |
| Crash reports | Up to 90 days |
| Aggregate analytics | Up to 14 months |
| Website server logs | Up to 30 days, unless retained longer for a security investigation |
| Legal, tax and accounting records | As required by applicable law |
We may retain limited information for longer if a legal claim, a legal obligation or a security investigation requires it. When data is no longer needed, we delete it or de-identify it.
How we protect data
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and disclosure. These include:
- encryption in transit using TLS for the website and supported app connections;
- encryption at rest where supported by our hosting and storage providers;
- access controls, least-privilege permissions and authentication for administrative systems;
- logging and monitoring for security and reliability events;
- secure development practices, dependency updates and review of permission use;
- confidentiality obligations for staff and contractors who may access data;
- a process for investigating and responding to security incidents.
No method of transmission or storage is completely secure. If you believe your account or data has been compromised, contact monyoung@microtopology.com with the subject “Security report”. We will investigate and, where required, notify affected users and authorities.
Account and data deletion
You can ask us to delete your account and the personal data associated with it at any time. This section explains the channels, the verification steps and the response times. The same information is available on the Account & Data Deletion page.
If an app is installed
When an account feature is available in the app, open the app and go to Settings → Account → Delete account. Follow the confirmation steps. The app will explain what will be deleted and what must be retained by law.
If the app is not installed, or you prefer email
Send an email to monyoung@microtopology.com with the subject “Account Deletion Request — [App Name]”. Include:
- the app name (Topo Notes, Meridian Field or Atlas Local);
- the email address used for the account;
- whether you want the entire account deleted or only specific data;
- any information that helps us locate the account.
Do not send your password, payment card details or identity documents. We may ask you to confirm control of the account email address before we act. We will not ask for your password.
Response and completion times
We acknowledge deletion requests within five business days and complete them within 30 calendar days. If we need more time, we will explain why and give you a new date. Backup copies are purged within 30 days after the deletion is completed.
What is deleted
- account profile, email address, display name and account identifier;
- synced notes, survey entries, attachments and settings;
- preferences and identifiers associated with the account.
Content stored only on your device is removed when you delete it in the app, clear the app's storage or uninstall the app. Uninstalling the app does not automatically delete data held in an optional synced account.
What we may retain
We may retain limited records where required by law, such as tax, accounting, fraud-prevention or security records, or data needed to establish or defend a legal claim. We may also retain aggregated or de-identified data that cannot be linked back to you. Retained data is not used for marketing.
Contact form data
To delete data you submitted through this website's contact form, email monyoung@microtopology.com with the subject “Data Deletion Request” and the email address you used. We follow the same verification and response times.
There is no fee for an account or data deletion request.
Your rights
Depending on where you live, you may have some or all of the following rights:
- Access — ask for a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Deletion — ask us to delete your account and personal data.
- Restriction and objection — ask us to limit or stop certain processing.
- Portability — ask for your data in a structured, commonly used format.
- Withdraw consent — withdraw consent at any time where processing is based on consent, without affecting processing that already happened.
- Non-discrimination — we will not deny service or charge different prices because you exercised a privacy right.
- Complaint — complain to a data protection authority or regulator.
Under China's Personal Information Protection Law (PIPL), you also have the right to know how we process your data, to decide whether to consent, to copy and correct your data, to request deletion, to withdraw consent, and to request an explanation of our processing rules.
Under the GDPR and UK GDPR, you can object to processing based on legitimate interests. Under the California Consumer Privacy Act as amended by the CPRA, you can request to know, delete, correct and opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising.
To exercise a right, email monyoung@microtopology.com with the subject “Privacy rights request”. We may need to verify your identity. We respond within 30 days, or within the period required by applicable law. An authorised agent may submit a request on your behalf with proof of authorisation.
If you are not satisfied with our response, you can complain to your local data protection authority. In China, you may also contact the relevant cyberspace administration or market regulation authority. We would appreciate the chance to resolve the issue first.
Children
Our website and applications are not directed to children under 13. In China, we do not knowingly process the personal information of children under 14 without verifiable guardian consent. If you believe a child has provided personal data, contact monyoung@microtopology.com and we will delete it. If we learn that we have collected data from a child in violation of applicable law, we will take reasonable steps to delete it promptly.
App stores and third-party links
If you download an application through Google Play, Google processes information related to the download, your Google account, payments and app usage under Google's own privacy policy and terms. Google is not a party to this policy.
The website may link to third-party sites, including Wikimedia Commons, Google Maps and Google's privacy pages. We are not responsible for the privacy practices of those sites. Review their policies before providing personal data.
Changes to this policy
We may update this policy to reflect changes in our products, technology, legal requirements or business. The revised policy will be posted on this page with a new effective date. If a change is material, we will provide a clear notice on the website and, where appropriate, by email before it takes effect. Where required by law, we will ask for your consent.
The English version of this policy is the authoritative version. If we provide a translation, the English version controls to the extent permitted by law.
Contact and complaints
For any privacy question, request or complaint, contact:
Liangjiang New Area Weimang Topology Software Development Studio (Individually Owned Business)两江新区微茫拓扑软件开发工作室（个体工商户）
Room 3-3, Att. G26-10-004571, 3F, No. 210, West Section of Jinkai Avenue, Dazhulin Sub-district, Liangjiang New Area, Chongqing, China
重庆市两江新区大竹林街道金开大道西段210号3楼3号附G26-10-004571号
Email: monyoung@microtopology.com
Telephone: +86 19544575794
Unified Social Credit Code: 92500157MAKNFWQE3R
We aim to acknowledge privacy requests within five business days and to resolve them within 30 calendar days. Account and data deletion requests follow the process described in Account and data deletion.
App-specific privacy notices
The following notices add product-specific detail to this policy. If there is a conflict, the specific notice applies to that product.
Topo Notes — 拓扑笔记
Core data: notes, links, tags, attachments and settings are stored on your device. The core notebook does not require an account. If you enable optional sync, your account email and synced notebook content are stored with our service provider so the notebook can be restored on another device.
Permissions: files and documents (only when you attach or export a file), microphone (only when you record a voice note) and notifications (optional reminders). Topo Notes does not request background location, contacts or advertising identifiers.
AI features: optional summaries and suggested links are designed to run on the device where supported. If a feature requires cloud processing, the app will explain what is sent and ask before sending it.
Deletion: delete notes in the app, or email monyoung@microtopology.com with the subject “Account Deletion Request — Topo Notes” to delete a synced account.
Meridian Field — 子午现场
Core data: signal readings, survey notes, timestamps and location points are stored on your device by default. Export and optional team sync are started by you.
Location: precise location is used only while you are actively recording a reading or placing an observation. Meridian Field does not collect background location. You can revoke location permission in Android settings; measurement features that require location will then be unavailable.
Permissions: precise location (foreground only), camera (optional photo evidence) and network/Wi-Fi state (required for signal measurement). The app does not access contacts or advertising identifiers.
Deletion: delete a survey in the app, clear app storage, or email monyoung@microtopology.com with the subject “Account Deletion Request — Meridian Field” to delete a synced account.
Atlas Local — 图集本地
Core data: form definitions, entries, photos, notes and location points are stored on your device until you export or sync them. Collected datasets are not used for advertising or sold.
Permissions: camera (photo evidence), files and documents (import a form or export a dataset) and approximate location (only when a form asks for a site location). Each permission is requested at the moment of use and can be declined.
Deletion: delete entries in the app, clear app storage, or email monyoung@microtopology.com with the subject “Account Deletion Request — Atlas Local” to delete a synced account.
Data safety summary
This table summarises the disclosures we make for Google Play's Data safety section. It is a summary; the rest of this policy provides the detail.
| Data type | Collected | Shared | Purpose | Optional |
|---|---|---|---|---|
| Name and email (contact form) | Yes | With email service provider only | Respond to enquiry | Yes |
| Account email and display name | Yes, if you create an account | With Firebase Authentication as a service provider | Account and optional sync | Yes |
| Notes, survey entries and app content | Yes, created by you | Only if you enable sync | App functionality | Yes |
| Photos, files and voice notes | Yes, when you attach them | Only if you enable sync | App functionality | Yes |
| Precise location (Meridian Field) | Yes, while recording | No | App functionality | Yes |
| Approximate location (Atlas Local) | When a form asks | No | App functionality | Yes |
| Crash logs and diagnostics | Yes | With Firebase Crashlytics | Reliability and security | Limited by platform |
| Analytics and app identifiers | Yes | With Firebase Analytics | Aggregate product improvement | Where required, consent or setting |
| Advertising data | No | No | Not used | Not applicable |
We do not sell personal data and we do not share it for cross-context behavioural advertising. Data is encrypted in transit. You can request deletion using the process described in Account and data deletion.