"If the user chooses to opt-in and grants location-tracking permission, the app is then, and only then, able to track the user's location?"

You would be lying if you wrote that because you do not know if that is true.

But that's not true; it could easily fallback to other forms of geolocation like using the current IP.