Privacy Policy

Maprider is an offline navigation app for motorcyclists, with a web app and an Android app. The publisher and data controller is Attila Papai, a private person in Hungary.

For all privacy questions, write to [email protected].

• Account: email address, language and a password hash (we never store your password). Purpose: to run your account. Legal basis: performance of the contract (GDPR Art. 6(1)(b)). You must give an email address and a password to have an account.
• Your content: saved routes, GPX files, folders and trips, including trip members and invitations. Purpose: to give you the service. Legal basis: performance of the contract. The owner of a trip sees the email addresses of all invited people. Members who accepted see the email addresses of the other members who accepted. An invitation shows the email address of the owner. Invite only people who know you and expect the invitation.
• Route points: when you ask for online routing, the app sends us the start, end and via points to calculate the route. We do not store them as a location history. Purpose: to calculate the route. Legal basis: performance of the contract.
• Terms acceptance: the date you accepted the Terms of Use at sign-up. Purpose: to prove that you accepted them. Legal basis: legitimate interest (Art. 6(1)(f)).
• Bot check: when you sign up on the web or in the Android app, Cloudflare checks that you are not a bot. Cloudflare may read signals from your browser or device for this. Purpose: to protect the service from abuse. Legal basis: legitimate interest.
• Error reports: Sentry receives crash and error reports with your user id, and with the device and app version. It does not receive your email address or name. Sentry does not store your IP address, but it works out an approximate location (country and city) from it and keeps that. Purpose: to find and fix errors. Legal basis: legitimate interest.
• Website analytics: Cloudflare Web Analytics measures visits to our website and how quickly its pages load. It receives information such as the page path, referring site, browser, device type and country. It does not use cookies or browser storage for this. Purpose: to understand and improve the website. Legal basis: legitimate interest.
• Usage analytics: PostHog measures how the web app is used, only after you say yes in the consent question. You can withdraw the consent at any time. Purpose: to improve the product. Legal basis: consent (Art. 6(1)(a)).
• Server logs: our service logs each request with your IP address, browser or device type, the time and, when you are signed in, your user id (for example a sign-up or the start of a map download). The mobile apps also send the app version, device model and system version. When you view the online map, the requests show which map area you look at. Purpose: security, fault finding and counting usage. Legal basis: legitimate interest.
• Support mail: if you write to us, we keep your mail and our reply in our support inbox. Purpose: to answer you. Legal basis: legitimate interest.

We do not sell your data and we do not use it for advertising. We make no automated decisions about you.

These companies and providers process data on our behalf:

• Cloudflare: web hosting, email, website analytics and the bot check.
• Hosting and database providers: they run our servers and store our data.
• Sentry (EU region): error reports.
• PostHog (EU region): usage analytics, only with your consent.

Google Play distributes the Android app under its own privacy policy. For this, Google is a separate controller. Google also provides the email service for support mail.

Cloudflare, Sentry, PostHog, Google and some of our other providers are US companies, or have US parent companies. Data can pass to the United States, or can be reached from there. Where this happens, the companies rely on the EU–US Data Privacy Framework (where the company is certified) or on the Standard Contractual Clauses of the European Commission to protect the data.

• Your account data and content: until you delete your account.
• After you delete your account, copies stay in our backups for up to 30 days. Then they are deleted automatically. We do not restore a deleted account from a backup.
• Sentry error reports: 30 days.
• Cloudflare Web Analytics: we can see the data of the previous six months.
• Server logs: 7 to 30 days, depending on the log type.
• Support mail: up to 1 year after we close your request.

The web app stores your login, your language and your map settings in the storage of your browser. This is necessary for the service. PostHog sets cookies or storage only after you say yes. You can change your choice at any time.

Under the GDPR you have the right to:

• access your data and ask for a copy;
• have wrong data corrected;
• have your data deleted;
• restrict the processing of your data;
• receive the data you gave us in a machine-readable format (data portability);
• withdraw your consent at any time, without affecting the lawfulness of the processing before the withdrawal.

Right to object: you can object at any time to processing that is based on legitimate interest. Write to [email protected].

You can delete your account yourself in the app (see the page “Delete account”). For other requests, write to [email protected]. We may ask you to confirm that the request is from you. We answer within one month. For complex requests we can extend this by two months, and we tell you if we do.

You can complain to the Hungarian data protection authority, NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság): postal address 1363 Budapest, Pf. 9., seat 1055 Budapest, Falk Miksa utca 9–11, [email protected], naih.hu. You can also go to court.

You must be 16 or older to use Maprider. If we learn that a user is younger, we delete the account.

The Android app stores downloaded maps, saved routes, trips and search history on your phone. The app asks for your location only to show your position and to guide you; it does not send a location history to us. Android backup does not include your routes, trips, search history or login data, so these do not go to your Google backup.

We protect your data with encryption in transit and with access control. We update this policy when the service changes. The date at the top shows the last change.