NewTag Privacy Policy
Effective: August 25, 2026
Published policy: https://bunzee-labs.com/newtag-privacy-policy
NewTag is an Android application which lets a user import and view location reports for their own Find My accessories. This policy describes how NewTag handles data.
The short version
NewTag has no advertising, analytics, tracking, or developer-operated account service. It
does not collect any data. Most app data stays on the Android device,
but the features which talk to Apple Find My, Google Maps necessarily
send data to those services as described below.
Data stored on the device
NewTag may store the following in its private app storage:
- Imported accessory records, including cryptographic keys and accessory identifiers;
- Tag names, ordering, settings, and location-report history;
- Synthetic tags and locations while the special reviewer demo is active.
The saved Apple account session is encrypted with AES-GCM using a key held by Android Keystore. Android backup is disabled for the application. No security measure is perfect, so users should still protect access to their device and should treat exported accessory bundles as sensitive.
Data sent off the device
NewTag has no developer-operated backend. Depending on the features used, the app
communicates directly with these third parties:
Apple
When a user signs in or refreshes accessories, NewTag sends the Apple ID credentials, session data, device identity, cryptographic requests, and accessory key identifiers needed to provide the requested Find My functionality.
Maps and device location
The app requests only Android's approximate-location permission. It uses the last known approximate device location to move the map when the user taps the location control; NewTag does not save that device location in its database.
Google Maps receives map requests, which can reveal the displayed map area and tag-location area, as well as request and device metadata. Google states that the Maps SDK automatically collects IP address, device and request metadata, crash metrics, a Maps SDK pseudonymous identifier, and, depending on use, map interaction events such as panning and zooming. Google handles that data under the Google Privacy Policy and documents the SDK data in its Maps SDK disclosure.
NewTag uses Google Play services to obtain the last known approximate device location.
Android's system geocoder, when available, may send tag coordinates to the geocoding service
configured by the device so that NewTag can display a human-readable place name.
When the user chooses Navigate, NewTag sends the selected tag coordinates to the maps application the user chooses. When the user exports tags or diagnostic logs, NewTag writes the resulting file only to the destination selected through Android's document picker. A QR import is decoded on the device and is not uploaded by NewTag.
Retention and deletion
Data stays in private app storage until the user removes it, clears NewTag's storage, or
uninstalls the app. Signing out removes the saved Apple account session but deliberately does
not erase imported tags, location history, or the app's iCloud keychain membership.
File-imported tags can be removed in the app. Tags obtained from the linked Apple account are
retired when they disappear from that account so their existing history is not silently
destroyed.
To remove all locally held data, use Android Settings to clear NewTag's storage or uninstall the app. Files the user exported are outside NewTag's private storage and must be deleted separately. Removing the app's entry from the Apple account or iCloud keychain, when applicable, must be done through Apple's account tools.
Children
NewTag is not directed to children under 13 and does not knowingly operate a service which
collects children's data.
Changes and contact
Material changes will be published in this file and the effective date above will be updated.