Privacy Policy for Vetta

1. Introduction

Welcome to Vetta ("we," "our," or "the app"). Vetta is a hiking navigation app that helps you reach the summit with GPS navigation and topographic maps. We are committed to protecting your privacy and being transparent about the data we collect.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

2.1 Location Data

We collect precise location data (GPS coordinates) when you use the app for:

• Navigation: Real-time positioning on the map and turn-by-turn navigation
• Route tracking: Recording your hiking progress
• Elevation data: Determining your current altitude

Location data may be collected while the app is in the foreground or background when navigation is active. This data is primarily stored locally on your device. However, your coordinates may be sent to OpenRouteService (a third-party mapping service) to obtain elevation data when GPS altitude is unreliable.

2.2 Files and Documents

When you choose to import a GPX file (GPS track file):

• The app reads the file to display your route on the map
• The file path is saved locally to restore your navigation state
• Files are never uploaded to external servers
• This is entirely optional and user-initiated

2.3 App Activity and Preferences

We store the following data locally on your device:

• Your map provider preference (topographic or standard maps)
• Language preference
• Navigation progress and current waypoint
• Downloaded offline map areas
• Completed navigation count (used to show donation reminders)
• GPS refresh interval settings

This data is stored locally on your device using Android SharedPreferences (Android) or UserDefaults (iOS) and never leaves your device.

2.4 Technical Information

We collect minimal technical information:

• App version: To check for required updates via Firebase Remote Config
• Device type: Automatically collected by Firebase (Android or iOS)

We do NOT collect crash logs, analytics, or diagnostic data. Logging is local-only for debugging purposes.

3. How We Use Your Information

We use the collected information solely for app functionality:

• Location data: Display your position on the map, provide navigation guidance, and obtain elevation information
• GPX files: Display hiking routes and waypoints on the map
• Preferences: Remember your settings and restore navigation state
• App version: Notify you of critical updates that improve app functionality or security

We do NOT use your data for advertising, marketing, or any other purposes.

4. Data Sharing and Third Parties

4.1 OpenRouteService

We share your GPS coordinates with OpenRouteService (openrouteservice.org) to obtain:

• Elevation data for your current location
• Route calculations (when using navigation features)

This data is transmitted over HTTPS (encrypted connection). OpenRouteService has its own privacy policy, which you can review at: https://openrouteservice.org/terms-of-service/

4.2 Firebase (Google)

We use Firebase Remote Config to check for app updates. Firebase may collect:

• Device identifiers
• App version
• Connection metadata

Firebase's privacy policy: https://firebase.google.com/support/privacy

4.3 Map Tile Providers

Map tiles are downloaded from OpenTopoMap and OpenStreetMap contributors. When you view the map, your device makes requests to these services, which may log IP addresses and requested map tiles.

4.4 App Store Payment Services

In-app purchases (donations) are processed by the platform's payment system:

• Android: Google Play Billing — Google's privacy policy applies
• iOS: Apple In-App Purchases (StoreKit) — Apple's privacy policy applies

We do not have access to your payment information in either case.

5. Data Security

We take data security seriously:

• All network communications use HTTPS encryption
• Most data is stored locally on your device and protected by Android's and iOS's built-in security features
• We do not maintain any servers that store your personal data
• Location data is only transmitted when necessary for app functionality

6. Data Retention

All data collected by Vetta is stored locally on your device and retained until:

• You manually clear app data through the app settings
• You uninstall the app (all local data is automatically deleted by Android/iOS)
• You manually delete specific data (e.g., removing a GPX file or clearing downloaded maps)

Data shared with third parties (OpenRouteService, Firebase) is subject to their respective retention policies.

7. Your Rights and Choices

7.1 Data Deletion

You can delete your data at any time by:

• Uninstalling the app: This automatically removes all locally stored data
• Clearing specific data: Delete downloaded maps, navigation progress, or preferences through the app's Settings screen
• Contacting us: Email us to request deletion of any data that may have been shared with third parties

7.2 Location Permissions

You can control location access through your device settings:

• Android: Settings > Apps > Vetta > Permissions > Location — choose: Allow all the time, Allow only while using the app, or Deny
• iOS: Settings > Privacy & Security > Location Services > Vetta — choose: Never, Ask Next Time, While Using the App, or Always

Note: Denying location permission will prevent the app from providing navigation functionality.

7.3 File Access

The app only accesses GPX files when you explicitly select them using the file picker. You can revoke storage permissions at any time through your device settings.

8. Children's Privacy

Vetta is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify users through an in-app message if changes are significant
• Post the new policy at this URL

Your continued use of the app after changes constitutes acceptance of the updated policy.

10. International Data Transfers

If you use Vetta outside your country of residence, your location data may be transmitted to OpenRouteService servers, which may be located in different countries. These transfers are protected by HTTPS encryption and are necessary for the app's functionality.

11. Data We Do NOT Collect

For transparency, we want to be clear about what we do NOT collect:

• Personal identification information (name, email, phone number)
• Photos or videos (beyond user-selected GPX files)
• Contacts or calendar data
• Browsing history or search history
• Crash reports or diagnostic logs
• Analytics or behavioral tracking data
• Advertising identifiers

13. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data is:

• Consent: You provide consent by granting location and storage permissions
• Legitimate Interest: Processing is necessary for the app's core navigation functionality
• Contract Performance: Processing is necessary to provide the services you've requested

You have the right to withdraw consent at any time by revoking permissions or uninstalling the app.