Please refer to http://support.kobotoolbox.org/managing-your-project-s-data/is-my-data-safe-on-your-server. Currently there are two staff administrators who could potentially access your data.
End-to-end encryption is available but disables our analysis tools, since our server cannot access your plain-text data anymore. See http://support.kobotoolbox.org/creating-forms/advanced/encrypting-forms. It’s on our wish list to add more user-friendly encryption capabilities; perhaps you or your organization could contribute to this effort: Add end-to-end encryption/zero-access encryption.
No GPS data is collected unless you explicitly add a geolocation question to your survey. If you meant that you might need to remove GPS data after it has been collected, there’s not yet an easy way to edit submissions in bulk and remove a single response. You could export your data and then delete all the submissions completely from our servers. Alternatively, you could edit the submissions individually within KoBo to remove the GPS data, or (advanced and unsupported) use the API to mass-edit submissions.
