Last updated: [date]
Who we are
GeoStroll is made by [Business name], [Address], company number [Company number (KBO/BCE)]. We are the controller for the app. Questions about privacy: [privacy e-mail].
In short
GeoStroll has no server, no accounts and no analytics. Your trips and places are stored only on your phone. Your position never leaves your phone (pending S5-09). With your OK, GeoStroll asks Google about a place on your list when you are near it, so Google learns you are there.
What the app does with your location
iOS tells GeoStroll when you enter the area around a place on your list (geofencing). Your position is checked on your phone and never stored or sent (pending S5-09). The app stores only the distance to the place in its log, never your coordinates.
What goes to whom, and when
GeoStroll uses Google Maps features and content. Requests go straight from your phone to Google or Apple, never through us, except the key-file check. Every request also carries your phone's IP address.
| Recipient | When | What it receives |
|---|---|---|
| You search for a place or a destination | What you type, a session token, a point to centre the results (the middle of your trip's places or your destination, never your position), and the device ID that Google's software adds. Then the id of the place you pick, and your destination's Google id. | |
| You open Google's place card or confirm a place | The place's Google id, or the name and pin of your place, plus the device ID that Google's software adds. When you open it from "Nearby now", which lists only places you are standing near, this also tells Google you are near that place. | |
| You enter a place's area, only if you chose "With opening hours" and the place is confirmed | The place's Google id, the app's name (not its version, your phone's model or languages). This tells Google this device is at that place now. No device ID (pending S5-09). The request times out after 4 seconds. GeoStroll keeps nothing from Google except the place's id. | |
| You paste a short Google Maps link | The link, to unfold it. No cookies are sent. | |
| Apple | You view the map | The map area you look at; when the map shows your position, that is roughly where you are. |
| Apple | You confirm a pin | The pin's position, to find the place's time zone. |
| Apple | You open a place in Apple Maps | The place's position. |
| Apple, then us | The app crashes, only if you allowed "Share with App Developers" in iOS | A crash report without location data, place names, notes or links. |
| [hosting provider] (our website host) | The app checks for a new Google key file | Your IP address, the app version and the time; [host] keeps these logs [period]. |
With "Without hours", nothing is asked of Google when you enter a place's area. Reminders then say "You're near — tap for hours".
Legal bases (GDPR)
- Opening-hours check: your consent (Art. 6(1)(a)). You give it on the "With opening hours" screen; reminders work without it.
- Search, card, confirmation, link unfolding, map, time zone: needed to give you the feature you asked for (Art. 6(1)(b)).
- Crash reports and e-mails you send us: our legitimate interest in fixing problems and answering you (Art. 6(1)(f)).
- Key-file check: our legitimate interest in keeping the app's key working (Art. 6(1)(f)).
We make no automated decisions or profiles about you.
What is stored on your phone
Your trips (name, dates, the destination's Google id, time zone), your places (your pin, your name for it, note, category, reminder radius, Google place id and when you confirmed it, time zone), visit and snooze state, a reminder log (place name, time, outcome, distance; never Google's answer or opening hours), and your opening-hours choice with the date of every change and which version of our explanation you saw, so we can show you consented. No opening hours or other Google answers are stored. The data is included in your iPhone and iCloud backups.
What we receive
There is no GeoStroll server and no account. Through our website host, the IP address of each key-file check. Otherwise only what you send us: crash reports through Apple (if you opted in) and e-mails to us.
How long
On your phone: until you delete a trip, a place or the app. The reminder log keeps at most 2,000 entries per trip. E-mails: [retention period]. Key-file logs: [period]. Crash reports: as long as Apple's developer tools keep them. What Google and Apple receive: see their own policies.
Beta testers
TestFlight builds can export the reminder log as a file. It holds place names with times, which show where you were, but no coordinates. It reaches us only if you send it through TestFlight feedback or by e-mail, and we delete it at most 90 days after we have looked into it.
Google and Apple
Google and Apple process what they receive under their own terms and may do so outside the EU, including in the United States. Where they act as independent controllers, they are responsible for that processing and any transfer. See the Google Maps End User Additional Terms of Service, the Google Privacy Policy and Apple's Privacy Policy.
Your rights
- Withdraw consent at any time: Settings › Opening hours from Google › Without hours. From the next place, no check is made.
- Delete your data: delete the app to delete your trips and choices. Copies can stay in your iPhone or iCloud backups until those are deleted. What Google received falls under Google's privacy policy.
- Access, correction, erasure, restriction, objection, portability: your data is on your phone, where you can see, change and delete it. For anything we hold (e-mails, beta exports), write to [privacy e-mail].
- Complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.gegevensbeschermingsautoriteit.be, or the authority where you live.
Children
GeoStroll is meant for people aged 16 and older.
Changes
We will update this page and its date when the app changes what it sends. Important changes are announced in the app.
Contact
[Business name], [Address] · [privacy e-mail]