Privacy policy

I Data Controller

The data controller is:

II Data Processed

1. Registration data (first name, last name, e-mail address, phone number).
2. GPS and route data.
3. Stops/waypoints added by the User.
4. Folder structure and route organization.
5. Offline map data.
6. Google Sign-In data.
7. Device information (IP address, device model, device identifier).
8. RevenueCat payment data (customer ID, subscription ID, payment tokens — never full card numbers).

III Purposes of Processing

Data is processed for:

• providing the Application’s services,
• Account authentication and management,
• handling payments via RevenueCat,
• processing location data,
• improving Application performance,
• fulfilling legal obligations.

IV Data Retention

1. Account data is stored until the User deletes the Account.
2. Routes and folders are stored until deleted by the User.
3. Payment-related data is stored for the period required by tax law.

V Data Recipients

Data may be shared with:

• RevenueCat (payments),
• Supabase (database services),
• Google LLC (maps, login),
• technical and analytical service providers.

VI User Rights

Users have the right to:

• access their data,
• correct their data,
• delete their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent for location data at any time.

VII Data Security

1. Data is secured using modern technical and organizational measures.
2. All communications are encrypted using SSL/TLS.
3. RevenueCat meets the PCI DSS Level 1 security standard.

VIII Language Versions

1. The primary version of the Application and these Terms is English (U.S.).
2. Other language versions may be automatically generated.
3. If discrepancies occur, the English version controls.

IX Contact

For any inquiries related to data protection:

X Final Provisions

This Privacy Policy is part of the Terms of Service. In matters not covered, applicable law applies.