Your route is personal. Our processing stays limited.

1. Controller and scope

The controller is Supanat Konprom, an independent developer and the seller of TripVero (bundle ID com.kairo.routevero) (“TripVero Operator”, “we”). Contact: unclegrape1975@gmail.com. Additional verified trader contact details are displayed on the applicable App Store product page where required by law. This policy covers the app, website and support. Apple, RevenueCat and other providers may separately control processing they perform for their own purposes.

The Operator is an individual developer based in Thailand (177 Moo 1, Bang Pla Ma Subdistrict, Bang Pla Ma District, Suphan Buri 72150, Thailand) and has no establishment in the EU. Based on the current local-first design and a documented assessment under GDPR Article 27(2), no EU representative has been appointed; this position is re-assessed whenever the processing changes.

2. Data and purposes

The app may process route points, start and end locations, addresses, dates, times, distance, odometer readings, vehicles, drivers, classifications, business purposes, notes, favourite places and audit history. Only the Danish reimbursement profile displays an optional employee tax identifier/CPR field. Enter it only if your employer or adviser confirms that doing so is necessary and lawful; the app cannot determine your legal basis under Danish law. This sensitive information remains in local or private-CloudKit app data and appears in exports you create. The app also retains up to 500 local product-interaction and purchase-flow events for diagnostics. They are not sent automatically to the TripVero Operator or RevenueCat and leave the app only in an export you choose. Motion and location signals are used only when the relevant feature and iOS permission are active.

Purchases: when the app launches, the RevenueCat SDK contacts RevenueCat to check whether you have Pro, even if you never buy anything. RevenueCat then receives a random, pseudonymous app user ID created by the app (RevenueCat calls it “anonymous”; it contains no name or email address), your purchase history (products, transactions and subscription status), your IP address, your device’s identifier for vendor (IDFV), and your device’s language setting (locale), App Store storefront and iOS version. RevenueCat does not receive your trips, routes or GPS locations. Apple processes payment and purchase data as operator of the App Store.

Maps and addresses: to look up addresses, calculate directions and display maps, the app sends coordinates to Apple (MapKit and Apple Maps services), which processes them under Apple’s privacy policy. The app shows no ads, does not track you for advertising and sends no in-app usage analytics. Support through Google/Gmail may process your email, message, attachments and necessary device context.

This website sets no cookies. It keeps your language choice only in your browser (localStorage) and, for one session, a note that automatic language detection has already run (sessionStorage); neither is sent to us. Cloudflare may process IP address, user agent, and limited request, security and network-error logs to deliver and protect the site.

3. Legal bases

Each purpose has its own legal basis under GDPR Article 6(1). Contract (point b): providing the app functions you use, syncing your own trip data to your private iCloud, looking up addresses, directions and maps through Apple, and selling, checking and restoring purchases, including the RevenueCat purchase-status check when the app launches.

Consent (point a) where the law requires it: access to location and motion data on your device, which you grant through iOS permissions and can withdraw at any time.

Legitimate interests (point f): answering support requests and keeping the app, purchases and this website secure and free from fraud and misuse, including Cloudflare’s delivery and security logs.

Legal obligation (point c) where applicable: keeping purchase and accounting records for statutory periods and responding to valid requests from authorities.

You can disable automatic location and motion tracking and revoke iOS permissions. Face ID is optional. In the release build, private CloudKit sync starts automatically when your Apple account and iCloud are available; manage or block TripVero’s iCloud access in iOS/iCloud Settings.

4. Storage and recipients

Trip records are managed in the local app database and are not routinely accessible to us. When iCloud is available, the release build automatically syncs app records through your private Apple CloudKit database. TripVero has no in-app CloudKit on/off switch. Face ID is performed by iOS; we receive no face image or biometric template.

Data is disclosed only to necessary Apple services, RevenueCat for purchase status, Cloudflare for website delivery and security, Google/Gmail for support, recipients you choose during export, and authorities where a valid legal duty requires it. We do not sell route history or use it for behavioural advertising.

TripVero does not currently conduct cross-context behavioural tracking, and we do not knowingly allow third parties to collect personal information through the app or site over time and across unrelated services for behavioural advertising. Because there is no such tracking or sale or sharing for advertising to opt out of, browser Do Not Track (DNT) and Global Privacy Control (GPC) signals do not currently change the app or site’s behaviour. If these practices change, we will update this notice and any legally required controls before the change.

5. International transfers

Apple, RevenueCat, Cloudflare and Google/Gmail, or their subprocessors, may process data outside the EEA. Where required, transfers rely on lawful safeguards such as adequacy decisions, Standard Contractual Clauses and supplementary controls. RevenueCat describes its processor role and transfer safeguards in its Data Processing Addendum. Email unclegrape1975@gmail.com for information about the safeguards applicable to a transfer and, where available, a copy.

The Operator processes support messages and purchase administration from Thailand, a country without an EU adequacy decision. That data is limited to what you send us or what your purchase requires; your GDPR rights and complaint options remain unchanged.

6. Retention

Local and private CloudKit app data remains until you delete it or manage app and iCloud storage. “Delete all trips” deletes trips and their edit history, but not drivers, vehicles, favourite places, settings or purchase records. Uninstalling the app may not remove every private iCloud app record. Support records are normally retained for up to 12 months after closure unless needed longer for legal claims, security or law. Purchase records remain as needed for subscriptions, restoration, accounting, fraud control and statutory periods. Backups may persist for a limited overwrite cycle.

7. Choices and GDPR rights

You can export a versioned JSON copy of app data, correct or delete trips, disable automatic tracking, revoke iOS permissions and manage iCloud. Where applicable, you may request information, access, correction, erasure, restriction, portability or objection, and withdraw consent.

Email unclegrape1975@gmail.com. We may verify the request and normally respond within one month. For data held only on your device or private CloudKit database, we may direct you to in-app or Apple controls. For purchase-related requests, support may need to help identify your pseudonymous RevenueCat record. You may complain to the data protection authority in your country of habitual residence or work.

8. Children, automation and security

TripVero is a business productivity tool and is not directed to children. Minors may use it only with consent and supervision required by local law. TripVero does not make decisions producing legal or similarly significant effects through automated profiling.

We use reasonable safeguards, but no device, network, cloud platform or transfer is completely risk-free. Report suspected privacy or security incidents promptly to unclegrape1975@gmail.com.

9. Changes and contact

We update this policy when features, providers or law change. Material changes will be communicated through the app, website or App Store information where required. Contact unclegrape1975@gmail.com and avoid sending complete route histories or sensitive addresses unless necessary. The Operator is Supanat Konprom.