Privacy policy

1. Data controller

The data controller is Benoit Ferretti EI, 2 impasse des Saules, 85750 Angles, France (“CapTrail”, “we”).

For any question about your data: contact@captrailapp.com. We have not appointed a data protection officer.

2. Scope

This policy covers the CapTrail mobile app (iPhone, iPad and Android), the web version (app.captrailapp.com) and this website.

3. Data we process

Depending on how you use the service, we process:

• Account: email address, password (managed by Google Firebase Authentication; we never have access to it), display name and, if you provide them, bio and photo; technical identifier, creation and update dates.
• Routes and places: waypoints, tracks, names, distance and elevation gain, whether each route is public or private, places and place folders, imported GPX files (converted into routes or places), share links you create.
• Preferences: use (motorcycle or on foot), Comfort or Engaged style, zone setting, motorways, units, language, your choice about sending diagnostic logs.
• Device location: see section 4.
• Subscription: status, plan, store used (App Store, Google Play or web), trial, renewal and expiry dates. We never receive your bank details.
• Diagnostic logs: at the end of a navigation session, unless you have turned this off, the app sends a technical log: time-stamped guidance events, progress along the route followed, speed, reroutes, errors, app version, a random identifier renewed at each launch, the route identifier and, if you are signed in, your account identifier. It may contain precise positions linked to an event, for example the location of a road reported as blocked. It does not contain your email address.
• Reports: if you report a public route, we record your account identifier, the route concerned with its name and the technical identifier of its author’s account, the reason chosen, your comment if any, the date and the action taken on the report.
• Blocks: if you block a user, we record the block so that we no longer show you their routes. You can lift it at any time from the Account tab in the app.
• Server logs: IP address, date, request and response, as with any online service.
• Correspondence with support: your email address and the content of your messages.

4. Your location

With your permission, the app uses your device’s GPS location to:

• centre the map and show your position;
• guide you during navigation, including when the screen is locked or the app is in the background, for as long as navigation is running;
• calculate and recalculate a route, and determine which zone you are in for the zone entry alert: your location is then sent to our server;
• show public routes near you on the map, including those of other users: your location is then sent to our server.

Your location is not stored in your profile and we do not build a history of your journeys, with one exception: if sending diagnostic logs is turned on, the log sent at the end of a navigation session contains your time-stamped progress along the route followed and sometimes a precise position; it is linked to your account and erased after 12 months. You can turn this off in the app (Account › Data and privacy). Apart from these logs, only the routes you save are kept.

You can withdraw permission at any time in your phone’s settings; guidance then stops working.

5. Purposes and lawful bases

• Providing the service (account, route calculation, zone display, navigation, sync between the app and the web version, GPX import and export): performance of the contract between us, defined by the terms of use (in French).
• Using your location: performance of the contract, with the permission you give in your phone’s settings.
• Managing the subscription and access to features: performance of the contract. Keeping accounting records: obligation under the French Commercial Code.
• Diagnosing and fixing problems, securing the service: our legitimate interest in providing a reliable service. You can object to the sending of diagnostic logs at any time in the app (Account › Data and privacy).
• Handling reports about content published by users and hiding content that breaches the terms of use: our legitimate interest in keeping the service safe, enforcing its terms of use and applying the App Store and Google Play rules on content published by users. A public route may be hidden automatically after several reports, pending review.
• Applying the blocks you decide on: performance of the contract.
• Answering your messages: performance of the contract or our legitimate interest.

We do no advertising or advertising profiling, and we do not sell data. The app contains no audience measurement tool.

6. Recipients and processors

Your data is accessible only to authorised CapTrail personnel, in particular through our administration tool (reviewing reports, handling deletion requests), and to the providers who help us deliver the service, each for its own part:

• OVH SAS (France): hosting of our servers and database, in France.
• Google (Firebase Authentication): sign-in and emails related to your account (address verification, password).
• RevenueCat, Inc. (United States): management of subscriptions and purchases, for all three stores.
• Our card payment provider, for subscriptions taken out on the web version.
• Apple and Google, for purchases made in the App Store or Google Play: they handle payment, billing and refunds as controllers of their own processing.
• Basemap providers: to display the map, your device (or your browser, for the web version) requests the basemap tiles and fonts from OpenFreeMap, and the elevation data used for hillshading from Amazon Web Services (Terrain Tiles, AWS Open Data programme). These requests send them your IP address and the map area displayed.
• Google Fonts: the app downloads some display fonts from Google’s servers, which sends them your IP address.
• OVH, for our email: correspondence with support.
• The provider in charge of developing and maintaining the app and our servers, who accesses data only as far as these tasks require.
• Other users and, more broadly, anyone who consults the service, even without an account: a route you make public may be shown to them, in particular on the app’s map, with its name, description, track and waypoints, your display name and a technical identifier of your account; a route you share through a link can be viewed by anyone who has that link. The person whose route is reported is not told who made the report; a person you block is not told about it.
• The authorities, on a request based on an applicable statute or regulation.

7. Transfers outside the European Union

Some providers (Google, RevenueCat, Amazon Web Services) may process data in the United States. These transfers rely on the provider’s certification under the EU–US Data Privacy Framework where it exists, and otherwise on the standard contractual clauses adopted by the European Commission.

8. Retention periods

• Account, routes, places and preferences: for as long as your account is active. Once the deletion is recorded (immediately from the app, otherwise when we process your email), you can no longer sign in and your public routes stop being visible; your data is permanently erased after 30 days, including the diagnostic logs linked to your account, your blocks and the subscription information stored on our servers (details, in French). If your subscription has not been cancelled, the events the store sends us afterwards are erased automatically after 30 days.
• Inactive account: if you do not sign in for 3 years, we may delete the account after notifying you by email.
• Subscription: on our servers, for as long as your account exists; the history of subscription events sent by RevenueCat is erased after 3 years. Your purchase history remains stored with RevenueCat, linked to your account’s technical identifier and, for a purchase made on the web version, to the email address entered at payment, including after your account is deleted, as proof of the transactions. Payments and their receipts are kept by Apple, Google or our web payment provider; CapTrail’s accounting records are kept for 10 years.
• Diagnostic logs: 12 months, then automatic erasure; earlier for those linked to your account, if you delete it.
• Reports: 12 months after they are sent, whether or not they have been handled, even if the reported route or one of the accounts concerned is deleted in the meantime; if your account is permanently erased before then, the reports you sent and those about your routes are no longer linked to your account; the latter keep the route’s name.
• Blocks: until you unblock the person or either account is deleted.
• Server logs: erased by automatic rotation, after 12 months at most.
• Correspondence with support: 3 years after the last exchange.
• Data stored on your device (synced routes, preferences, map and zone cache): until the app is uninstalled.

9. Security

Exchanges between the app, the web version and our servers are encrypted (HTTPS). Passwords are managed by Firebase Authentication. Access to the servers and the database is restricted to authorised personnel.

10. Your rights

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, the right to withdraw your consent at any time, and the right to set instructions on what happens to your data after your death.

In the app, Account tab: “Export my data” gives you an archive of your data, “Edit profile” lets you correct it and “Delete my account” lets you erase it. “Data and privacy” lets you turn off the sending of diagnostic logs.

For any other request: contact@captrailapp.com. We reply within one month, which may be extended by two months for a complex request; we may ask you to prove your identity.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the data protection authority of your country of residence (AEPD in Spain, CNPD in Portugal).

11. Children

CapTrail is not intended for children. If you are under 15, you need the consent of a person with parental responsibility for you to create an account.

12. Website and cookies

This website does not ask for any personal data and does not display advertising. Cookies and any audience measurement are described on the Cookies page (in French). If you write to us, your email address is used only to reply to you.

13. Changes

We may update this policy, in particular if the service changes. The version date appears at the top of the page; if there is a significant change, we will let you know in the app or by email.