1. Data we collect
Account data
- Email address and name provided during registration.
- Password stored only as an encrypted hash.
- Apple Sign in identifier, if you choose to use Apple login. We may receive a stable identifier and optionally an email address and name, including an Apple private relay address.
Location data
- Current GPS location and background location during active ride recording, used for route generation, navigation and ride recording.
- Start and destination points selected while planning routes are saved to your account.
Ride and route data
- Generated and saved routes, GPX traces and elevation profiles.
- Preferences such as ride type, distance, direction and route ratings.
- Ride history and statistics.
Subscription and purchase data
We process an anonymous RevenueCat user identifier and purchase
tokens provided by App Store or Google Play, including subscription
status, renewal date and transaction identifier. We do not receive
payment card details.
Push notifications and technical data
- Expo Push device token used to send notifications, for example about weather windows, weekends or reminders.
- App version, operating system, device model, language, crash logs and basic usage metrics.
2. Legal basis and purposes
We process data to provide the service, comply with legal
obligations and pursue our legitimate interest in securing and
improving Untrack. Location data is processed only after you grant
system-level permission on your device.
3. Service providers
We use trusted providers that process data on our behalf and under
appropriate agreements:
- Apple Inc. for Sign in with Apple, App Store distribution and store payments.
- Mapbox for maps, geocoding and map usage telemetry under Mapbox policies.
- RevenueCat for subscription management and Pro entitlement status.
- Expo (EAS) for push notifications and app update distribution.
- Untrack API and cloud infrastructure providers that host our backend and database.
- Optional third-party integrations, only if you knowingly connect them.
We do not sell personal data and do not use it for targeted advertising.
4. International transfers
Some providers, including Apple, Mapbox, RevenueCat and Expo, may
be based in the United States. Data may be transferred under the
European Commission Standard Contractual Clauses and the Data
Privacy Framework where applicable.
5. Retention
- Account data is kept while you maintain an account.
- Routes and ride history are kept until you delete them or delete your account.
- Technical logs are kept for up to 90 days.
- Billing data required by law is kept for the legally required period.
6. Your rights
You may request access, correction, deletion, restriction,
portability or objection regarding your personal data. You can delete
your account in the app settings, which permanently deletes your
data. For privacy matters, contact us at
kontakt@untrack.cc.
7. Security, children and changes
Communication with our backend uses HTTPS. Passwords are stored as
hashes. We use encryption in transit and infrastructure-level access
controls. Untrack is not directed to children under 13 and we do not
knowingly collect data from such users. We may update this policy;
material changes will be announced in the app or by email.