Privacy policy

Who is responsible

RoadtripRadar is made by Magnus Strömberg, Sweden, who is the data controller under the EU General Data Protection Regulation (GDPR). Contact: roadtripradar@magnus.tech.

Without an account

You can use the app without an account. Then your places, categories, lists and settings are stored only on your phone. Nothing about you is stored on any server, with the exceptions below, which apply with or without an account.

What is sent to other services

Apple Maps

Your current position and a saved place's position, to work out the driving route between them, while the radar runs. The text you search for, and the part of the map you're looking at, when you search. A point's position, to look up its address, when you place a pin.

Apple handles what it receives under Apple's privacy policy.

The map service a link came from

When you share a map link into the app, for example from Google Maps, your phone opens the link to follow it to the place.

Our link service, resolver.magnus.tech

The link you shared into the app, but only when your phone can't read the link itself.

Our link service uses the link only to find the place it points to. The link travels in the body of the request, so it doesn't appear in the server's logs, and the service forgets it within ten minutes; until then it answers the same link again from memory. The server's access log records when a request came and from which IP address, not the link, and is deleted after 14 days.

OpenStreetMap's Nominatim

When a link names a place but carries no position, our link service looks the name up with Nominatim, OpenStreetMap's place search, and the app asks you to confirm the result on the map. Nominatim receives only the place name, from our server, so it doesn't see your IP address. The OpenStreetMap Foundation handles it under its privacy policy.

With an account

An account lets you share collections and keep your places if you lose your phone. It is stored with Google Firebase, which Google runs on our behalf as a data processor.

What is stored

• Your account: your email address, or the identifier Sign in with Apple gives us. If you choose to hide your email with Apple, we only get Apple's relay address.
• Your collections: each place's name, position, category, lists, any alert distance or time you set, and the link it was imported from, if it was. Also your categories and lists, and when and by which account each was created and last changed.
• Who is in a shared collection: each member's internal account identifier and role (owner, editor or reader). Not their email address.
• Invitations you send: the role offered, whether the invitation has been used, and the invitee's email address if you entered one. An invitation expires after at most seven days.

Where

Your collections are stored in Google's data centre in Stockholm, Sweden. Sign-in is handled by Firebase Authentication, which Google may process outside the EU, including in the United States. Such transfers are covered by Google's data processing terms, the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

Proving the request is from the app

To keep others from using the service with stolen credentials, the app proves to Firebase that it is the genuine app on a genuine iPhone, using Apple's App Attest. That proof says nothing about who you are or where you are.

Who can see your places

Only you, and the people you have invited into a shared collection. They see that collection's places, categories and lists, and each member's role. They do not see your email address, your other collections, or where you are.

Your location

The radar uses your position on your phone to find places ahead of you. Your position is never stored, never sent to us and never shared with other members. It is sent to Apple only to work out driving routes, as described above. Alerts are made on your phone; no notification service is involved.

What we don't do

No advertising, no analytics, no crash reporting, no tracking across apps or websites. We don't sell or share your data with anyone beyond what's described here.

How long, and deleting

• Your data is kept as long as you have an account.
• Deleting a place, list or collection in the app deletes it from the server too. A small record stays in the collection that something was deleted, when, and by which account, so the other phones in the collection remove it as well. It holds no name or position. A shared collection's owner can delete it for everyone; anyone else can leave it.
• Settings → Delete account deletes your account and everything stored with it: your own collections, your memberships and your invitations. Places you added to someone else's shared collection stay there, as that collection's places.
• Deleted data may remain in Google's backups for a limited time before Google removes it.
• Our link service forgets a shared link within ten minutes. Its access log, which holds no links, is deleted after 14 days.

Why we may use your data

To give you the service you asked for: storing, syncing and sharing your places (GDPR article 6(1)(b)). The link service's access log is kept in our legitimate interest in finding failures and stopping misuse of the service (article 6(1)(f)).

Your rights

You can ask to see the data we hold about you, have it corrected or deleted, get it in a portable form, or object to how it's used. Most of this you can do in the app: edit and delete your places, export a collection to a file under Settings → Backup, and delete your account. For anything else, write to roadtripradar@magnus.tech.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Changes

If this policy changes, the new version is published here with a new date. Significant changes will also be mentioned in the app's release notes.