GeoSpedition mobile application and website
Effective date: 15 July 2026
Last updated: 15 July 2026
1. Who we are (data controller)
The controller of your personal data is:
Websco Łukasz Kupiński
Trading as / operating under the brand: GeoSpedition
ul. Milczańska 16F/3 61-131 Poznań
Poland
NIP: 6652931383
Contact for privacy matters: privacy@geospedition.com
General contact: info@geospedition.com
This Privacy Policy explains how we process personal data when you use:
- the GeoSpedition mobile application (iOS / Android), and
- the website at geospedition.com (including contact forms and hosted legal documents).
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law of the country where the controller is established.
2. What GeoSpedition does
GeoSpedition is a navigation and gamification app. You can plan and complete driving routes, track trip progress, earn in-app virtual currency (₲) and experience points, view route history, compete on a leaderboard, and browse a virtual “cargo” market.
Important: In-app balance (₲) is virtual game currency. It is not real money, and the app does not provide cash-out, bank transfers, or payment withdrawal features.
3. Personal data we collect
3.1 Account and identity
| Data | When / why |
|---|---|
| Email address | Account registration and login (email/password or Google Sign-In) |
| Password | Email registration — stored by our authentication provider (Firebase Authentication), not in our own databases as plaintext |
| Username / display name | Profile and leaderboard |
| Firebase user ID | Linking your auth account to your GeoSpedition profile |
| Profile photo URL | If provided by Google Sign-In |
| Email verification status | To confirm account ownership |
3.2 Location and trip data (core feature)
While you are using active guided navigation, we collect precise location data, including:
- GPS coordinates and timestamps sampled during the trip (typically when you move ~10 m or ~5 seconds elapse),
- start and end place names, formatted addresses, and country,
- trip distance, start/end times,
- the selected virtual cargo / product for that trip.
After you complete a route, this trail and trip metadata are sent to our servers to:
- calculate rewards (virtual ₲ and experience),
- store route history (including a map polyline you can review later),
- operate game features (achievements, stats, leaderboard).
Background location: On Android and iOS the app may keep location active while navigation is running (including when the screen is locked or the app is in the background), so turn-by-turn guidance and trip recording can continue. We do not intend to track your location when you are not navigating.
3.3 Saved places and search
- Favourite destinations (coordinates, address, country) stored on our servers and cached on your device.
- Recent destination searches stored locally on your device only.
3.4 Voice search
If you use microphone / speech recognition to search for a destination, audio is processed by the device operating system / speech engine to produce text. We use the resulting text as a search query. We do not operate a separate “upload raw audio to GeoSpedition servers” feature in the app.
3.5 Game and public profile data
- Balance (₲), experience, level, rank, achievements, total distance.
- Leaderboard entries visible to other users: username, total distance, and rank.
3.6 Device, diagnostics, and errors
We use Sentry for crash reporting and performance diagnostics. This may include device/OS information, app version, error stack traces, and related technical context. We aim not to send unnecessary personal data; configure your Sentry project to scrub sensitive fields where possible.
3.7 Analytics (Google Analytics)
With your consent, we use Google Analytics (GA4) in the mobile app and on the website to understand how the Service is used and to improve it. This may include:
- app/website usage events (e.g. screen or page views, taps, session duration, feature engagement),
- device and technical information (device type, operating system, app or browser version, language, screen size),
- approximate location derived from IP address (country/region level — not your GPS trip trail),
- online identifiers generated for analytics (e.g. app instance ID; on the website, cookie-based client IDs such as
_ga/_ga_*), - if enabled by us: a pseudonymous user ID linked to your logged-in account for cross-session analytics (we will not send your email address as a GA user ID).
Google Analytics is not loaded or collected until you accept analytics (website cookie banner or in-app analytics consent). You can withdraw consent at any time (see Sections 9 and 11).
We do not use Google Analytics advertising features (e.g. Google signals / ads personalization) unless we update this policy and obtain any additional consent required.
3.8 Website contact form
If you contact us via the website, we process the name, email, and message content you submit, and use email delivery infrastructure to receive it.
3.9 Data we do not collect (current product)
- Payment card / banking details
- Government ID / KYC documents
- Continuous location tracking when idle (outside active navigation)
- Advertising identifiers for third-party ads (no ad SDK in the current app)
- Camera / photo library content (beyond optional Google profile photo URL)
4. Purposes and legal bases (GDPR)
| Purpose | Typical data | Legal basis |
|---|---|---|
| Create and manage your account | Email, username, auth IDs | Contract (Art. 6(1)(b)) — providing the service you request |
| Navigation, trip recording, rewards, history | Precise location, route points, trip metadata | Contract (Art. 6(1)(b)) — core drive-to-earn / navigation features |
| Favourites and destination search | Places, local recent searches | Contract / legitimate interests (Art. 6(1)(b)/(f)) — usability |
| Voice destination search | Speech → text query | Consent via OS permission (Art. 6(1)(a)) and/or contract |
| Leaderboard and social features | Username, distance, rank | Contract / legitimate interests |
| Product and website analytics (Google Analytics) | Usage events, device/tech data, analytics IDs, cookies | Consent (Art. 6(1)(a)) |
| Security, fraud prevention, abuse detection | Account and technical logs | Legitimate interests (Art. 6(1)(f)) |
| Crash diagnostics (Sentry) | Device/error telemetry | Legitimate interests (Art. 6(1)(f)) — product reliability |
| Respond to contact form / support | Contact details, message | Legitimate interests or contract / pre-contractual steps |
| Legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
You can withdraw OS-level permissions (location, microphone) at any time in device settings. Withdrawing location permission will prevent navigation and reward features from working.
5. Who we share data with (processors / recipients)
We use trusted service providers who process data on our instructions:
| Provider | Role | Typical location / notes |
|---|---|---|
| Google Firebase Authentication | Account sign-in, email verification, ID tokens | Google Cloud (see Google’s terms / DPA) |
| Google Maps Platform (Maps, Places, Navigation, Routes) | Maps, geocoding, turn-by-turn navigation, place search | Google — subject to Google’s terms and privacy notices |
| Google Analytics | App and website usage analytics | Google Ireland Limited / Google LLC — see Google Privacy Policy and Google’s measurement/analytics terms |
| Sentry | Error and performance monitoring | Sentry’s infrastructure (configure EU data residency if available) |
| Hosting / API providers for our backend and website | Store profiles, routes, GPS trails, favourites; serve the site | [HOSTING REGION — EU] |
| Email/SMTP provider | Deliver website contact messages | As configured for geospedition.com |
We do not sell your personal data.
Public leaderboard information is visible to other users of the app.
6. International transfers
Some providers (notably Google and Sentry) may process data outside the European Economic Area. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses and provider terms. If your hosting is outside the EEA, the same principles apply — document your hosting region in Section 5.
7. Retention
| Data | Retention (default approach) |
|---|---|
| Account profile | Until you delete your account, or longer if legally required |
| Completed routes & GPS trails | Kept while your account exists so you can view history and we can operate the game; you may request erasure (see Section 9) |
| Favourites | Until you delete them or your account |
| Local recent searches | Until cleared / app data removed on device |
| Contact form messages | For as long as needed to handle your request, then deleted or archived as appropriate |
| Error logs (Sentry) | According to our Sentry retention settings (keep as short as practical) |
| Google Analytics data | According to our GA4 property retention setting ([e.g. 2 or 14 months]); analytics cookies last up to 2 years unless cleared earlier |
8. Security
We use industry-standard measures appropriate to the risk, including:
- authentication via Firebase (tokens; no plaintext passwords in our API),
- HTTPS for API and website traffic,
- access controls on production systems.
No method of transmission or storage is 100% secure. Please use a strong unique password and protect your device.
9. Your rights (EEA / UK users)
Under the GDPR you may have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
- Lodge a complaint with your supervisory authority (in Poland: UODO — uodo.gov.pl; elsewhere, your local DPA)
How to exercise rights: email privacy@geospedition.com from the email linked to your account (or include enough information for us to verify you). We will respond within the timeframes required by law (generally one month).
Account / data deletion: You can request deletion of your account and associated personal data by contacting us at the address above. We will delete or anonymise data that is no longer needed, except where we must retain information for legal claims, security, or legal obligations.
10. Children
GeoSpedition is intended for users aged 16+ (or the higher digital-consent age in your country, if applicable). We do not knowingly collect personal data from children below that age. If you believe a child has created an account, contact us and we will take appropriate steps.
11. Cookies and website
The marketing website may use:
- Essential cookies / similar technologies — required for basic site operation and security. These do not require consent.
- Analytics cookies (Google Analytics) — used only with your consent via our cookie banner / preferences. Until you accept, Google Analytics scripts and cookies are not activated.
Typical Google Analytics cookies (names and durations may vary with GA4 configuration):
| Cookie / storage | Provider | Purpose | Typical duration |
|---|---|---|---|
_ga |
Distinguish users | up to 2 years | |
_ga_* |
Persist GA4 session/campaign state | up to 2 years | |
_gid |
Distinguish users (if present) | 24 hours |
You can change or withdraw cookie choices at any time through the cookie preferences control on the website, and/or clear cookies in your browser.
Legal documents (including this Privacy Policy) are published as web pages on our website for App Store / Play Store and user reference. Downloadable PDF copies of the same documents are also available.
12. App Store and Google Play disclosures
In addition to this policy, Apple App Store Privacy Labels and Google Play Data safety forms describe categories of data collected (notably precise location, account info, and app activity / diagnostics). Those console forms must stay consistent with this document.
13. Changes
We may update this Privacy Policy from time to time. The “Last updated” date will change, and the current version will be published at:
https://geospedition.com/privacy-policy
Material changes will be communicated in a reasonable manner (for example in-app notice or email) where appropriate.
14. Contact
info@geospedition.com
privacy@geospedition.com
Websco Łukasz Kupiński
ul. Milczańska 16F/3 61-131 Poznań
Poland
NIP: 6652931383