Privacy Policy

1. Who we are

This policy explains how we process your personal data when you use the MapPlanner website (map-planner.fr, map-planner.com, map-planner.de, map-planner.it and map-planner.es) and the MapPlanner mobile app for Android and iOS (together, the “Service”).

The data controller is MapPlanner - Map Services, a company registered with the Annecy Trade and Companies Register under number 953 260 510, with its registered office in Annecy (France).

For any question about your data, or to exercise your rights, write to us at contact@map-planner.com.

In short: we do not sell your data, the Service shows no advertising, we use no advertising identifier, and we do not pass your data to any third party for advertising or marketing purposes.

2. Your account

To create an account, we collect your email address, a username and a password, which we only store in hashed form: we never know your password. You can complete your profile (first name, last name, profile picture, city, postal code, country) and your preferences (language, units, currency, default activity).

If you sign in with Google, Facebook or Apple, that provider sends us your email address, your name and the identifier of your account with them, and, where applicable, your profile picture. We never receive the password of that account. With Apple, you can choose to hide your email address.

For the security of your account, we record the date and IP address of your latest sign-ins.

Legal basis: performance of the contract between us (our Terms of Use).

3. Your routes, photos and posts

We store what you create with the Service: routes you draw or import, recorded activities, places (POIs), collections, comments, ratings and photos.

The photos you add to a route or a place come from your device's camera or photo library, only when you choose to add them.

Each route has the visibility you choose: when public, any visitor of the Service can see it; when private, only you and the people you choose to share it with can see it. Your comments, ratings, photos and places posted on public content, as well as your username and profile picture, are visible to other users.

Legal basis: performance of the contract.

4. Your location

With your permission, the app uses your device's precise location while it is on screen, to show where you are on the map, guide you along a route and give you the figures of your activity. On the website, your browser only shares your location if you allow it.

Background location: the app only accesses your location in the background or with the screen off while recording an activity that you start yourself (Navigate › Start). Throughout the recording, a persistent notification shows it (on iOS, the system location indicator); recording stops when you tap “Finish”.

The track of an activity (positions and times, and altitude where available) stays on your device while recording. It is only sent to our servers when you save the activity, together with the model and operating system of the device that recorded it.

Real-time location sharing: only if you turn it on, your location is sent live, through our servers, to your friends, that is, the users with whom you have an accepted friendship. These positions are only relayed: we do not store them. Sharing stops as soon as you turn it off.

When you use the weather or route calculation, only the coordinates needed are sent to the service concerned (see the “Map and service providers” section).

We do not sell your location data, do not use it for advertising or profiling, and do not share it with any third party for those purposes. You can withdraw the location permission at any time in your device settings.

Legal basis: your consent (your device's location permission, turning sharing on) and performance of the contract.

5. Health Connect (Android) and Apple Health (iOS)

If you allow it, the app reads, read-only, your exercise sessions and their GPS route recorded in Health Connect (Android) or Apple Health (iOS), only when you ask to import an activity (for example one recorded by a watch) to turn it into a route.

Only the activity you choose to import is sent to our servers, where it becomes a route of your account. The app never writes to Health Connect or Apple Health and does not request access to any other health data.

Data obtained from Health Connect and Apple Health is never used for advertising or marketing, is never sold or transferred to third parties other than the technical providers needed to run the Service (such as our hosting provider), and is never used to determine creditworthiness or for lending purposes.

Our use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Data received from Apple Health (HealthKit) is used under the same principles and in compliance with Apple's rules.

You can revoke this access at any time in Health Connect or in the Health app. Legal basis: your consent.

6. Device, notifications and diagnostics

Notifications: if you accept them, the app creates a notification token that we link to your account to send you notifications (for example when a friend shares their location). They go through Expo's notification service, then through Firebase Cloud Messaging (Google) or the Apple Push Notification service (Apple). You can turn them off in your device settings.

Installation identifier: when first opened, the app creates a random identifier specific to that installation, used for our internal usage statistics. It is not an advertising identifier and is not derived from any identifier of your device.

Updates: to receive its updates, the app queries Expo's update service, which receives the IP address and the app version.

Diagnostics: when a crash or an error occurs, and to measure performance, the app and the website send technical reports (type of error, version, device model and operating system, loading times) to an instance of the Sentry tool that we host ourselves. These reports are not shared with anyone.

Legal basis: your consent for notifications; for the rest, our legitimate interest in keeping the Service working, secure and up to date.

7. Usage statistics

We measure how the Service is used (pages and screens viewed, features used, where the visit comes from, device and browser type, approximate country and city derived from the IP address) with tools we host ourselves. The approximate location is computed on our servers, without calling any third party.

From these measurements, we automatically group visits and accounts into broad usage profiles (for example by the activity practised), solely for internal statistics and to improve the Service. This grouping has no legal effect on you and is never used for advertising.

No third-party advertising or analytics tool is used. Legal basis: our legitimate interest in understanding and improving the Service; you can object by writing to us.

In the mobile app, you can also turn these statistics off at any time in Profile › Settings › Account (“Usage statistics”): no usage measurement is then sent from your device.

8. Purchases and the Explorer subscription

In the app, the Explorer subscription is bought through Google Play or the App Store: payment is handled by Google or Apple and we never receive your payment card details. App subscriptions are managed with RevenueCat, Inc. (United States), which receives your account identifier and your purchase history (product, dates, renewals, refunds) to tell us whether your subscription is active.

On the website, payment is handled by Stripe (payment cards) or PayPal. We only keep the information needed for invoicing; we do not store your payment card details.

Legal basis: performance of the contract and our legal obligations (accounting, invoicing).

9. Emails

Through Brevo, we send emails about your account (sign-up, password, purchases) and information emails about the Service (newsletter, tips, reminders). Every information email contains an unsubscribe link.

Legal basis: performance of the contract for account emails; our legitimate interest for information emails, which you can object to at any time.

10. Reports and blocks

When you report content or a user, we record the report (content concerned, reason, optional message and your account) to review it and enforce our Terms of Use. When you block a user, we record that block; the blocked user is not notified.

Legal basis: our legitimate interest in keeping the Service safe, and our legal obligations.

11. Map and service providers

To display maps and provide some services, your device or browser directly contacts the following servers, depending on the base map and features you use. They receive your IP address and the map areas or coordinates requested, but neither your identity nor your account:

• our own servers (map-planner.com): base maps, offline maps, route calculation, elevation and place search;
• Mapbox (United States);
• Esri / ArcGIS (United States);
• Thunderforest (United Kingdom);
• OpenTopoMap;
• OpenStreetMap (United Kingdom);
• IGN – Géoplateforme (France);
• swisstopo – geo.admin.ch (Switzerland);
• USGS (United States);
• Ordnance Survey (United Kingdom);
• Open-Meteo, for the weather.

Each of these providers processes this data under its own privacy policy.

12. Recipients and providers

Your data is hosted in France by OVH. It is only accessible to the MapPlanner staff who need it and, each for its own part, to our providers: OVH (hosting), Brevo (emails), RevenueCat (app subscriptions), Expo (app notifications and updates), Google and Apple (app stores, notifications, sign-in), Meta (sign-in with Facebook, if you use it), Stripe and PayPal (payments on the website).

We may also disclose your data to our advisers (bound by professional secrecy), to any administrative or judicial authority lawfully requesting it and, in the event of a sale, merger or restructuring of all or part of our business, to the acquirer.

We neither sell nor rent your personal data.

13. Transfers outside the European Union

Some of these providers, notably RevenueCat, Expo, Google, Apple, Meta, Mapbox, Esri, Stripe and PayPal or companies of their group, are established or process data outside the European Union, in particular in the United States. Depending on the case, these transfers rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies) or on the standard contractual clauses adopted by the European Commission. You can write to us to find out more.

14. Retention periods

We keep your data for as long as needed for the purposes described above:

• account, routes, photos and posts: as long as your account exists; when it is deleted, they are erased or deactivated as described in the “Deleting your account” section;
• track of an activity being recorded: on your device only, until you save or discard it;
• positions shared in real time: not stored;
• orders and invoices: 10 years, under our accounting obligations, including after the account is deleted;
• usage statistics: as long as they are useful for audience measurement; when your account is deleted, they are anonymised;
• diagnostic reports and abuse reports: as long as needed to handle them;
• cookies: see the “Cookies and trackers” section.

15. Security

All communications between your device and our servers are encrypted (HTTPS). Passwords are stored in hashed form and access to data is restricted to the people who need it. As no system is infallible, we recommend using a password that is unique to the Service.

16. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, in particular to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time, without affecting what was done before. You can also give instructions about what happens to your data after your death.

You can edit most of your information from your account and export your routes (for example in GPX format). To exercise your other rights, write to contact@map-planner.com from your account's email address; we reply within one month, which may be extended in the cases provided for by the GDPR.

If you consider that your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, or with the data protection authority of your country.

17. Deleting your account

You can delete your account at any time: in the app (“Profile” tab › “Account” › “Delete my account”), on the website (your account menu › “My account” › “Delete My Account”), or without signing in, by following the steps on our account deletion request page.

Deletion is immediate: your routes and their tracks, your recorded activities, your places (POIs), your comments, your photos and your imported files are erased; your account is deactivated and you no longer receive our emails; your usage statistics are anonymised (the link to your account and your IP address are erased). A subscription taken out on the website is cancelled.

Your orders and invoices are kept for 10 years, under our accounting obligations. Some information remains attached to the deactivated account (profile information, friends list, collections, ratings given, Google, Facebook or Apple sign-in identifiers): to have it permanently erased, write to us at contact@map-planner.com; we then permanently delete the account, except for the data the law requires us to keep.

Deleting your account does not cancel a subscription taken out through Google Play or the App Store: cancel it from your store's subscription settings.

18. Minors

The Service is not intended for children under 15. Below that age, an account may only be created with the consent of a holder of parental responsibility. If you learn that a child has given us data without that consent, write to us: we will delete it.

19. Cookies and trackers

A “cookie” is a small file that a website places in your browser to record information about your browsing.

The website only uses cookies needed for it to work (sign-in session, preferences, security) and audience measurement cookies set by our own tools, which we host ourselves, for our sole use. No advertising or social network cookie is set, and the data from these cookies is not passed to any third party. On the payment page, Stripe and PayPal may set their own cookies, needed for payment security and fraud prevention.

Durations: a visit cookie expires after 12 hours; visitor cookies expire at most 13 months after they were created.

You can delete or block cookies in your browser settings; blocking the necessary cookies may prevent you from signing in to your account. In the mobile app, usage statistics rely on the installation identifier described in section 6.

20. Changes to this policy

We may update this policy to follow changes in the Service or in the regulations. In the event of a significant change, we will inform you by appropriate means (for example by email or in the Service). The date of the latest update is shown below.

Last updated: October 26, 2026