Your route is personal. Our processing stays limited.

1. Controller and scope

The controller is Supanat Konprom, an independent developer and the seller of RouteVero (bundle ID com.kairo.routevero) (“RouteVero Operator”, “we”). Contact: unclegrape1975@gmail.com. Additional verified trader contact details are displayed on the applicable App Store product page where required by law. This policy covers the app, website and support. Apple, RevenueCat and other providers may separately control processing they perform for their own purposes.

The Operator is an individual developer based in Thailand (177 Moo 1, Bang Pla Ma Subdistrict, Bang Pla Ma District, Suphan Buri 72150, Thailand) and has no establishment in the EU. Based on the current local-first design and a documented assessment under GDPR Article 27(2), no EU representative has been appointed; this position is re-assessed whenever the processing changes.

2. Data and purposes

The app may process route points, start and end locations, addresses, dates, times, distance, odometer readings, vehicles, drivers, classifications, business purposes, notes, favourite places and audit history. Only the Danish reimbursement profile displays an optional employee tax identifier/CPR field. Enter it only if your employer or adviser confirms that doing so is necessary and lawful; the app cannot determine your legal basis under Danish law. This sensitive information remains in local or private-CloudKit app data and appears in exports you create. The app also retains up to 500 local product-interaction and purchase-flow events for diagnostics. They are not sent automatically to the RouteVero Operator or RevenueCat and leave the app only in an export you choose. Motion and location signals are used only when the relevant feature and iOS permission are active.

Apple and RevenueCat may process a pseudonymous app user ID, product, purchase status, transactions and technical entitlement data. Support through Google/Gmail may process your email, message, attachments and necessary device context. The website currently uses no advertising or analytics cookies; Cloudflare may process IP address, user agent, and limited request, security and network-error logs to deliver and protect the site.

3. Legal bases

Processing is used to perform requested app functions and purchases, provide support, protect the service, prevent misuse and meet legal obligations. Depending on the activity, the legal basis is performance of a contract, consent where law requires it, compliance with law, or legitimate interests in security, support and reliable operation. You can disable automatic location and motion tracking and revoke iOS permissions. Face ID is optional. In the release build, private CloudKit sync starts automatically when your Apple account and iCloud are available; manage or block RouteVero’s iCloud access in iOS/iCloud Settings.

4. Storage and recipients

Trip records are managed in the local app database and are not routinely accessible to us. When iCloud is available, the release build automatically syncs app records through your private Apple CloudKit database. RouteVero has no in-app CloudKit on/off switch. Face ID is performed by iOS; we receive no face image or biometric template.

Data is disclosed only to necessary Apple services, RevenueCat for purchase status, Cloudflare for website delivery and security, Google/Gmail for support, recipients you choose during export, and authorities where a valid legal duty requires it. We do not sell route history or use it for behavioural advertising.

RouteVero does not currently conduct cross-context behavioural tracking, and we do not knowingly allow third parties to collect personal information through the app or site over time and across unrelated services for behavioural advertising. Because there is no such tracking or sale or sharing for advertising to opt out of, browser Do Not Track (DNT) and Global Privacy Control (GPC) signals do not currently change the app or site’s behaviour. If these practices change, we will update this notice and any legally required controls before the change.

5. International transfers

Apple, RevenueCat, Cloudflare and Google/Gmail, or their subprocessors, may process data outside the EEA. Where required, transfers rely on lawful safeguards such as adequacy decisions, Standard Contractual Clauses and supplementary controls. RevenueCat describes its processor role and transfer safeguards in its Data Processing Addendum. Email unclegrape1975@gmail.com for information about the safeguards applicable to a transfer and, where available, a copy.

The Operator processes support messages and purchase administration from Thailand, a country without an EU adequacy decision. That data is limited to what you send us or what your purchase requires; your GDPR rights and complaint options remain unchanged.

6. Retention

Local and private CloudKit app data remains until you delete it or manage app and iCloud storage. “Delete all trips” deletes trips and their edit history, but not drivers, vehicles, favourite places, settings or purchase records. Uninstalling the app may not remove every private iCloud app record. Support records are normally retained for up to 12 months after closure unless needed longer for legal claims, security or law. Purchase records remain as needed for subscriptions, restoration, accounting, fraud control and statutory periods. Backups may persist for a limited overwrite cycle.

7. Choices and GDPR rights

You can export a versioned JSON copy of app data, correct or delete trips, disable automatic tracking, revoke iOS permissions and manage iCloud. Where applicable, you may request information, access, correction, erasure, restriction, portability or objection, and withdraw consent.

Email unclegrape1975@gmail.com. We may verify the request and normally respond within one month. For data held only on your device or private CloudKit database, we may direct you to in-app or Apple controls. For purchase-related requests, support may need to help identify your pseudonymous RevenueCat record. You may complain to the data protection authority in your country of habitual residence or work.

8. Children, automation and security

RouteVero is a business productivity tool and is not directed to children. Minors may use it only with consent and supervision required by local law. RouteVero does not make decisions producing legal or similarly significant effects through automated profiling.

We use reasonable safeguards, but no device, network, cloud platform or transfer is completely risk-free. Report suspected privacy or security incidents promptly to unclegrape1975@gmail.com.

9. Changes and contact

We update this policy when features, providers or law change. Material changes will be communicated through the app, website or App Store information where required. Contact unclegrape1975@gmail.com and avoid sending complete route histories or sensitive addresses unless necessary. The Operator is Supanat Konprom.