Privacy Policy

Last updated: 20 April 2026

This Privacy Policy explains what personal data I collect through the OurMap mobile app (the "App") and how I use it. I care about keeping OurMap simple and respectful of your privacy: the App does not show ads, does not track you across other apps or websites, and does not sell your data.

1. Who is responsible (Data Controller)

The data controller for the App is:

Oksana Bryk (individual)
Poland
Email: support.ourmap@gmail.com

2. What data I collect

Category	What it is	Why
Anonymous user ID	A random identifier issued by Firebase Authentication on first launch.	To associate your trips and saved places with your device without requiring sign-up.
Display name	An auto-generated nickname (e.g. "Explorer") that you can edit in the Profile screen.	To label you inside shared trips and comments. Never your real name unless you choose to enter it.
Precise location	Your device's GPS coordinates, only while the App is in use and only if you grant permission.	To center the map on you and compute distance to nearby places. Location is used in-memory and is not uploaded or stored on my servers.
User content	Trip names, folder names, saved places (name, address, coordinates you pick on the map), notes, descriptions, and comments.	To let you save and share your trips across your devices and with collaborators you invite.
Subscription status	A flag indicating whether you have an active OurMap Pro subscription. Payment details stay with Apple.	To unlock paid features. I never see your credit-card or Apple-ID details.
Technical diagnostics	Basic crash and error information provided by the operating system and Firebase (e.g. error type, App version, iOS version).	To fix bugs. No contact details or location are attached to these reports.

The App does not collect: your email address, phone number, contacts, photos, camera input, health data, browsing history, advertising identifiers, or data about activity in other apps.

3. Legal basis (GDPR)

I process your personal data under the following legal bases in the EU General Data Protection Regulation (GDPR):

Performance of a contract (Art. 6(1)(b)) — to provide the App features you use (saving trips, sharing, subscription).
Consent (Art. 6(1)(a)) — for access to your precise location. You can revoke consent at any time in iOS Settings.
Legitimate interests (Art. 6(1)(f)) — for anonymous diagnostics and to prevent abuse of the service. You can object to this processing; see Section 7.

4. Who I share data with (Sub-processors)

I use the following service providers to run the App. They process data on my behalf under written data-processing agreements:

Google Ireland Ltd. — Firebase Authentication, Cloud Firestore, and Cloud Storage for Firebase. Servers are located in the European Union.
Apple Inc. — App Store, StoreKit (subscription billing), MapKit, and crash logs. Apple acts as an independent controller for payment data.

I do not sell your data, and I do not share it with advertisers or data brokers.

5. International transfers

My primary Firebase region is in the European Union. If data is ever transferred outside the European Economic Area (for example, because Google or Apple routes traffic through a non-EU data center), those transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

6. How long I keep data

Your user profile, trips, and saved places are kept until you delete them inside the App or request deletion of your account.
Anonymous diagnostics are retained for up to 90 days by Firebase.
Subscription records are kept for up to six years to comply with Polish tax and accounting obligations.

7. Your rights (GDPR)

Under the GDPR you have the right to:

Access the personal data I hold about you.
Rectify inaccurate data.
Erase your data ("right to be forgotten"). You can delete trips and places directly in the App, or email me to request deletion of your entire account.
Restrict or object to certain processing.
Portability — receive a copy of your data in a machine-readable format.
Withdraw consent (e.g. revoke location access in iOS Settings → OurMap → Location).
Complain to a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO) — uodo.gov.pl.

To exercise any of these rights, email support.ourmap@gmail.com. I will respond within 30 days.

8. Security

Data is transmitted over HTTPS. Access to the Firebase project is protected by two-factor authentication and role-based access control. Firestore security rules ensure that only the owner of a trip (or users they have explicitly invited) can read or write it. No system is perfectly secure, but I aim to follow industry-standard practices.

9. Children

The App is not directed to children under 13, and I do not knowingly collect personal data from children under 13. If you believe a child has provided me with personal data, please contact me and I will delete it.

10. Tracking

OurMap does not track you across apps or websites owned by other companies. The App does not use the Apple Advertising Identifier (IDFA) and does not show the App Tracking Transparency prompt because no tracking occurs.

11. Changes to this policy

I may update this Privacy Policy from time to time. Material changes will be announced inside the App or at this URL. The "Last updated" date at the top of this page tells you when the latest version took effect.

12. Contact

Questions about this policy or about your personal data? Email support.ourmap@gmail.com.