1. Controller
This Privacy Policy applies to the rarou iOS app, its routing service, and the website at rarou.keisel.dev.
The controller is Jonas Keisel. You can contact me at support@rarou.keisel.dev.
2. Data we process
Location, search, and navigation
When you use the relevant features, rarou processes your precise location. To calculate a route, origin and destination coordinates are sent to the rarou routing service. During active navigation, the app may use your location in the background. Search terms and the approximate search area are sent to Apple for place search.
Maps
The app loads map data from BergWerk GIS and the City of Vienna. These providers receive your IP address, technical connection data, and information about the map area being requested.
Data on your device
Favourites, recent searches, and your spoken-guidance preference are stored on your device. rarou does not require a user account.
Usage and error diagnosis
We use PostHog to collect information about app usage, navigation, performance, and technical errors. This includes random installation and session identifiers, app and device information, and technical measurements. rarou does not send origin or destination coordinates or search terms to PostHog through its analytics features.
IP anonymisation is enabled for analytics events in PostHog.
Website, routing service, and email
When you access the website or routing service, necessary connection data is processed, particularly your IP address, time, requested address, device and browser information, and response status. For route requests, the requested address may contain origin and destination coordinates. The website itself uses no cookies, forms, or in-browser analytics.
If you email us, we process your email address, message, and the accompanying data needed to handle your request.
3. How we use data
We process data to provide the map, search, routing, and navigation features you choose (Article 6(1)(b) GDPR). We also use technical usage and connection data to operate rarou securely and reliably, diagnose errors, and improve the service (Article 6(1)(f) GDPR). Our legitimate interest is a secure, stable, and understandable bicycle-routing service.
Depending on its content, we handle an email either to take steps before or perform a contract, or based on our legitimate interest in responding to enquiries (Article 6(1)(b) or (f) GDPR).
4. Services and recipients
- Hetzner Online GmbH hosts the website and routing service in Nuremberg, Germany.
- PostHog Cloud EU processes usage and diagnostic data.
- Apple processes data for place search.
- BergWerk GIS and the City of Vienna provide map data.
PostHog stores data in the selected EU data centre, but also processes it outside the European Economic Area to provide its services, particularly in the United States. PostHog relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses for these transfers. Apple also processes data globally and protects transfers from the EEA through EU Standard Contractual Clauses. More information is available in PostHog's data protection terms, Apple's Privacy Policy, or from our contact address.
5. Retention
- Data on your device remains there until you delete it, reset the app's data, or uninstall the app.
- PostHog currently retains analytics and error events for twelve months.
- Technical connection data on the server is automatically overwritten when the set storage limit is reached. The number of days this covers depends on data volume.
- Other technical diagnostic data is kept only as long as needed for operation, security, and troubleshooting.
- Emails are retained until the enquiry is resolved and afterwards only while required by law or for possible legal claims.
6. Your choices
You can change or withdraw location access at any time in iOS Settings. Without location and origin/destination details, location-based navigation and route calculation will be limited or unavailable. You can select a destination directly on the map instead of using place search.
7. Your rights
Subject to the GDPR, your rights include access, rectification, erasure, restriction, and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. To exercise these rights, contact support@rarou.keisel.dev.
You may also lodge a complaint with a data protection authority, in particular the Austrian Data Protection Authority.