Privacy Policy for GoneCycling

Last updated: 10 June 2026

This privacy policy explains which personal data the iPhone app GoneCycling processes when you use it, what we use that data for, and which rights you have.

1. Data Controller

Responsible for the data processing related to the app is:

> Mario J. Gaida
> Dornbuschweg 17, 33649 Bielefeld, Germany
> Email: mario.j.gaida@gmail.com

2. Overview

GoneCycling does not process any personal data on our servers by default. There is no account, no sign‑in, no cloud sync. All recorded rides, planned routes and settings live exclusively on your device.

The sections below describe which data we process locally and in which cases data is transmitted to third parties such as routing providers.

3. Location data

### 3.1 What we process

When you start a recording or a route plan, the app accesses the precise location of your device. Position fixes are delivered by iOS at regular intervals and processed in‑app.

### 3.2 Purpose

• Showing your current position on the map
• Recording rides (distance, duration, speed, elevation profile)
• Computing routes from your current location to a destination
• Live navigation along a planned route

### 3.3 Where the data goes

• Recorded rides are stored only as a JSON file in the app's sandbox (Documents/rides.json). They are not transmitted to us or to third parties.
• Routing requests include start and destination coordinates and are sent — depending on your settings — to the routing provider you chose (see section 6).
• Reverse geocoding (turning coordinates into "City, Region") is performed via Apple's iOS‑integrated geocoding service after a ride ends.

### 3.4 Legal basis

Article 6(1)(b) GDPR (contract — the app's core function cannot be delivered without location) and Article 6(1)(a) GDPR (consent given through the iOS permission dialog).

4. Contacts access (optional)

When you use the "Pick from Contacts" feature, iOS asks once for permission to access your contacts. We then process only the postal address of the contact you actively pick. That address is converted to coordinates via Apple's geocoding service and used as a route destination. There is no reading, storing or transmitting of your whole address book.

Legal basis: Article 6(1)(a) GDPR (consent).

5. Background location access (optional)

If you grant the "Always" location permission, recordings can continue while the screen is locked or while you switch to other apps. We recommend this option only for longer rides where active screen interaction isn't possible.

Legal basis: Article 6(1)(a) GDPR (consent given through the iOS permission dialog).

6. Third‑party services (routing, maps, search)

Which data is sent where depends on your settings.

### 6.1 Routing providers

For route computation you can choose between several providers:

• Apple MapKit (default): Route computation uses Apple's MapKit interface. Start, intermediate and destination coordinates are transmitted to Apple. See Apple's Privacy Policy.
• OpenRouteService (HeiGIT / Heidelberg University, or self‑hosted): If you select this provider and enter an API key, the route coordinates are sent to the HeiGIT endpoint at api.heigit.org (or the URL you configured). See the HeiGIT privacy statement.
• BRouter (public or self‑hosted endpoint): If you select this provider, the route coordinates are sent to the BRouter endpoint you configured. The operator's privacy terms apply.
• OSRM (Open Source Routing Machine, optional): If you configure this provider, the coordinates are sent to the OSRM endpoint you set. The operator's privacy terms apply.

In all cases only the coordinates for the routing request are transmitted. No identifiers, device IDs, user accounts or tracking data are sent.

### 6.2 Map display (map tiles)

By default the app shows Apple Maps. Optionally you can select alternative, OpenStreetMap‑based map styles in the settings (e.g. CyclOSM, OpenTopoMap, OpenStreetMap.de). In that case the app loads the displayed map tiles directly from the respective providers' servers. For technical reasons this transmits your IP address and the map area you are currently viewing to the tile provider. The respective provider's privacy terms apply. With the default Apple map, tiles are served by Apple.

### 6.3 Location search and address resolution

When you search for a destination (text search or the configurable quick destinations such as "Café", "Supermarket") or auto‑plan a stage, the search query and the viewed map region are sent to Apple's MapKit search service. When you finish a ride and to name stages, coordinates are resolved into place names via Apple's geocoding service (reverse geocoding). See Apple's Privacy Policy.

7. Locally stored data

The following data is stored exclusively on your device and removed completely when you uninstall the app:

• Recorded and imported rides (GPX, JSON)
• App settings (language, routing provider, API key, voice guidance)
• Recently used destinations and template rides

None of this data leaves your device without your explicit action (e.g. by exporting a GPX file).

8. Tracking, analytics, advertising

The app contains:

• No tracking across apps or websites
• No analytics frameworks (no Firebase, no Google Analytics, no Crashlytics or similar)
• No advertising
• No third‑party SDKs that link to identity

9. Retention

Rides and settings remain on the device until you delete them via the app or uninstall the app. There is no automated deletion.

10. Your rights

Under GDPR you have the right to

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Withdrawal of consent at any time (e.g. revoking the location permission via iOS Settings)

Because personal data is processed only on your device, you can exercise these rights by operating the app itself (deleting rides, resetting the app) or via iOS Settings.

For any questions reach us at mario.j.gaida@gmail.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection authority if you consider that the processing of your data infringes GDPR.

12. Changes to this policy

We may adapt this privacy policy if the app's features or legal requirements change. The current version is available from the App Store listing and at [URL OF PRIVACY POLICY].