Privacy Policy
1. Controller
Ali Tamás Sándor
Email: barangoloapp@gmail.com
This policy covers the Barangoló app for Android and iOS (the “app”). Personal data is processed under the EU General Data Protection Regulation (GDPR, 2016/679) and Hungarian Act CXII of 2011 on informational self-determination.
2. What stays on your device
The following is stored only on your phone. We have no access to it, and uninstalling the app removes it:
- Your location (precise or approximate, as you allow) — used to show where you are on the map and, while you follow a route you started, to warn you when you leave it, including with the screen off. It is never requested in the background otherwise, no track is recorded, and it is never sent to a server.
- Saved routes — planned routes and imported GPX routes, with their names. Neither the files’ content nor their names leave the device. If you share a route as GPX, the app you choose receives it through the system share sheet.
- Downloaded map regions (including the details shown on place cards), searches and settings (such as theme, supporter status, and the store’s last answer about your membership, so that it works without an internet connection).
3. Processing that happens off the device
| What | Data | Purpose and legal basis | Who, how long |
|---|---|---|---|
| Map downloads | IP address, the region downloaded, time (technical data) | Delivering the map file. Legitimate interest (GDPR Art. 6(1)(f)). | Cloudflare, Inc. (hosting, processor). Not used to identify you. |
| Usage statistics | Anonymous app-instance ID, device model, OS, language, country, and which features you used (e.g. which screen you opened, which region you downloaded, whether you started following a route, or reached for a membership feature). No search terms, locations, file names or route names are sent. | Improving the app by learning what works and what does not. Legitimate interest (Art. 6(1)(f)). | Google Firebase Analytics (Google Ireland Ltd., processor). Kept for up to 14 months. |
| Crash reports | On a crash: a technical description of the error, device model, OS version, anonymous installation ID. | Fixing bugs. Legitimate interest (Art. 6(1)(f)). | Google Firebase Crashlytics (Google Ireland Ltd., processor). Kept for 90 days. |
| Advertising | Advertising ID (Android), IP address, device data, interaction with ads. | Showing and measuring ads. Your consent for personalised ads (Art. 6(1)(a)); otherwise legitimate interest. | Google AdMob (Google Ireland Ltd., independent controller), under Google’s Privacy Policy. |
| Support (purchases) | That a purchase happened, the product (e.g. monthly or yearly membership) and its state (e.g. active subscription, free trial). We receive no name, email or card data. | Delivering what you paid for (unlocking the membership features, removing ads). Performance of a contract (Art. 6(1)(b)). | Google Play or the Apple App Store (independent controllers), under their own terms. |
| Contacting us | Your email address and message, if you write to us. | Answering you. Legitimate interest (Art. 6(1)(f)). | Us; mail is stored by Google (Gmail). Kept for 1 year after the matter is closed. |
On a place’s card, the “Call” and “Website” buttons open your phone’s dialer or browser. We send no data when you use them; the call is subject to your phone provider’s privacy rules and the website to its operator’s.
4. Ads and consent
On first launch the app shows no ads and asks for no consent. Later, in the European Economic Area, Google’s consent form (UMP) asks whether you want personalised ads. If you decline, only non-personalised ads are shown. On iOS the app does not request tracking permission (ATT), so ads there do not use the advertising identifier. You can make the choice again after clearing the app’s data, or write to us at any time. On Android you can delete or reset your advertising ID in the system settings.
If you are a Trail supporter member or have given a one-off tip, ads stop and the ads SDK is not loaded.
5. Transfers outside the EU
Google and Cloudflare may process data in the United States. Both participate in the EU–US Data Privacy Framework and use the European Commission’s Standard Contractual Clauses.
6. What we do not do
- We do not ask for registration, your name, email address or phone number.
- We do not send or store your location, and we do not record tracks — not while following a route either.
- We do not sell your data or build a profile of you.
7. Children
The app is not directed at children. We do not knowingly process data of anyone under 16.
8. Your rights
You may ask what data we hold about you, and ask for it to be corrected, erased or restricted. You may object to processing based on legitimate interest and withdraw consent at any time. As there is no account and analytics data is tied to an anonymous ID, we usually cannot link it to you — write to us and we will help. Uninstalling the app removes all data stored on the device.
We answer within 30 days: barangoloapp@gmail.com.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9–11, 1055 Budapest, naih.hu, ugyfelszolgalat@naih.hu), with the supervisory authority of your own EU country, or with a court.
9. Changes
If this policy changes, the updated version is published on this page with its effective date. Significant changes are also announced in the app.
The Hungarian version of this document is authoritative.