Privacy policy

Draft – under legal review

1. Controller

[name], [address], e-mail: hello@tempomate.app

2. What we process

Location (GPS): processed on the device to detect sections, measure the average and navigate. Trips (1 Hz samples), saved places and privacy zones are stored only on the device (iPhone: local database; web: IndexedDB) unless the user turns on cloud backup with an account.
Anonymous identifier: on first use the app creates a random anonymous user ID (Supabase Auth anonymous sign-in). It is used to attribute community reports, votes and traffic samples; it contains no name, e-mail or device ID.
Community reports and votes: report type, position, heading and time; shown to others for 2 hours (+2 hours per confirmation). retention of the stored rows after expiry
Traffic samples: position, heading and speed when a jam is detected or reported; used by others for 15 minutes. retention
Anonymous driving data (heatmap), on by default, can be turned off in Settings: per hexagon cell (~66 m) the number of passes, average speed, hour of day and day of week; never the route, exact time, any identifier, the area around saved places, or the first and last 300 m of a trip. Only aggregated views (cells with ≥ 3 submissions) are readable. legal basis for a default-on setting
Optional account (Apple, Google or e-mail magic link, no password): e-mail or provider ID, the chosen display name, synced settings, saved places and zones; trips and personal heatmap only if “cloud backup” is turned on (off by default). No date of birth, age or phone number.

3. Processors

Supabase (database and auth, EU – Ireland, eu-west-1); Mapbox (map tiles, search, directions, lock-screen map image – receives map positions and search text; transfer outside the EU); Resend (sign-in e-mails, EU – eu-west-1); Vercel (hosting of the web app); Apple / Google (only if you sign in with them).

4. Legal basis

Service (GDPR 6(1)(b)), community features (6(1)(f)), anonymous driving data (to be decided), account (6(1)(b)).

5. Retention

On-device data until the user deletes it (Settings › “Delete all”, with an optional 30-day restore) or uninstalls; account data until account deletion; server rows: to be specified.

6. Deletion and your rights

In-app account deletion removes all account rows; anonymous community cells cannot be linked to anyone and remain. Access, rectification, erasure, objection, complaint to the NAIH (Hungarian DPA). Contact: hello@tempomate.app.

7. Cookies

This website uses no cookies and no analytics.

8. Effective date

[date]