GeoSpedition mobile application and website
Effective date: 15 July 2026
Last updated: 1 October 2026
1. Who we are (data controller)
The controller of your personal data is:
Websco Łukasz Kupiński
Trading as / operating under the brand: GeoSpedition
Poland
NIP: 6652931383
Contact for privacy matters: privacy@geospedition.com
General contact: info@geospedition.com
This Privacy Policy explains how we process personal data when you use:
- the GeoSpedition mobile application (iOS / Android), and
- the website at geospedition.com (including contact forms and hosted legal documents).
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law of the country where the controller is established.
2. What GeoSpedition does
GeoSpedition is a navigation and gamification app. You can plan and complete driving routes, track trip progress, earn in-app virtual currency (₲) and experience points, view route history, compete on a leaderboard, and browse a virtual “cargo” market.
Important: In-app balance (₲) is virtual game currency. It is not real money, and the app does not provide cash-out, bank transfers, or payment withdrawal features.
3. Personal data we collect
3.1 Account and identity
| Data | When / why |
|---|---|
| Email address | Account registration and login (email/password or Google Sign-In) |
| Password | Email registration — stored by our authentication provider (Firebase Authentication), not in our own databases as plaintext |
| Username / display name | Profile and leaderboard |
| Firebase user ID | Linking your auth account to your GeoSpedition profile |
| Profile photo URL | If provided by Google Sign-In |
| Email verification status | To confirm account ownership |
3.2 Location and trip data (core feature)
While you are using active guided navigation, we collect precise location data, including:
- GPS coordinates and timestamps sampled during the trip (typically when you move ~10 m or ~5 seconds elapse),
- start and end place names, formatted addresses, and country,
- trip distance, start/end times,
- the selected virtual cargo / product for that trip.
After you complete a route, this trail and trip metadata are sent to our servers to:
- calculate rewards (virtual ₲ and experience),
- store route history (including a map polyline you can review later),
- operate game features (achievements, stats, leaderboard).
Background location: On Android and iOS the app may keep location active while navigation is running (including when the screen is locked or the app is in the background), so turn-by-turn guidance and trip recording can continue. We do not intend to track your location when you are not navigating.
Company location sharing (optional): If you turn on “Share my location with my company” in settings, we store your latest position while turn-by-turn guidance is running and show it to the other members of your current company. We stop updating when guidance ends. That last position stays visible to those members for as long as you remain in the company with sharing on. Turning the setting off, or leaving the company, removes it immediately. It is not shown on your public profile or to drivers outside your company.
3.3 Saved places and search
- Favourite destinations (coordinates, address, country) stored on our servers and cached on your device.
- Recent destination searches stored locally on your device only.
3.4 Voice search
If you use microphone / speech recognition to search for a destination, audio is processed by the device operating system / speech engine to produce text. We use the resulting text as a search query. We do not operate a separate “upload raw audio to GeoSpedition servers” feature in the app.
3.5 Game and public profile data
- Balance (₲), experience, level, rank, achievements, total distance.
- Leaderboard entries visible to other users: username, total distance, and rank.
3.6 Device, diagnostics, and errors
We use Sentry for crash reporting and performance diagnostics. This may include device/OS information, app version, error stack traces, and related technical context. We aim not to send unnecessary personal data; configure your Sentry project to scrub sensitive fields where possible.
3.7 Analytics (Google Analytics)
With your consent, we use Google Analytics (GA4) in the mobile app and on the website to understand how the Service is used and to improve it. This may include:
- app/website usage events (e.g. screen or page views, taps, session duration, feature engagement),
- device and technical information (device type, operating system, app or browser version, language, screen size),
- approximate location derived from IP address (country/region level — not your GPS trip trail),
- online identifiers generated for analytics (e.g. app instance ID; on the website, cookie-based client IDs such as
_ga/_ga_*), - if enabled by us: a pseudonymous user ID linked to your logged-in account for cross-session analytics (we will not send your email address as a GA user ID).
Google Analytics is not loaded or collected until you accept analytics (website cookie banner or in-app analytics consent). You can withdraw consent at any time (see Sections 9 and 11).
We do not use Google Analytics advertising features (e.g. Google signals / ads personalization) unless we update this policy and obtain any additional consent required.
3.8 Website contact form
If you contact us via the website, we process the name, email, and message content you submit, and use email delivery infrastructure to receive it.
3.9 In-app feedback
We sometimes show a short optional survey in the app, for example after you have completed a delivery. You can skip it or close it. If you send answers or skip, we store that with your account so we do not show the same survey again. A completed response can include the features you pick, free-text comments, your app version, and the language of the app. We use this to improve the product. Closing the sheet without answering does not send anything.
3.10 Data we do not collect (current product)
- Payment card / banking details
- Government ID / KYC documents
- Continuous location tracking when idle (outside active navigation)
- Advertising identifiers for third-party ads (no ad SDK in the current app)
- Camera / photo library content (beyond optional Google profile photo URL)
4. Purposes and legal bases (GDPR)
| Purpose | Typical data | Legal basis |
|---|---|---|
| Create and manage your account | Email, username, auth IDs | Contract (Art. 6(1)(b)) — providing the service you request |
| Navigation, trip recording, rewards, history | Precise location, route points, trip metadata | Contract (Art. 6(1)(b)) — core drive-to-earn / navigation features |
| Show your position to your company | Latest position during navigation, company membership | Consent (the in-app share switch, Art. 6(1)(a)) |
| Favourites and destination search | Places, local recent searches | Contract / legitimate interests (Art. 6(1)(b)/(f)) — usability |
| Voice destination search | Speech → text query | Consent via OS permission (Art. 6(1)(a)) and/or contract |
| Leaderboard and social features | Username, distance, rank | Contract / legitimate interests |
| Product and website analytics (Google Analytics) | Usage events, device/tech data, analytics IDs, cookies | Consent (Art. 6(1)(a)) |
| In-app product feedback | Survey answers, app version, app language, account id | Consent (Art. 6(1)(a)) — the survey is optional and can be skipped |
| Security, fraud prevention, abuse detection | Account and technical logs | Legitimate interests (Art. 6(1)(f)) |
| Crash diagnostics (Sentry) | Device/error telemetry | Legitimate interests (Art. 6(1)(f)) — product reliability |
| Respond to contact form / support | Contact details, message | Legitimate interests or contract / pre-contractual steps |
| Legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
You can withdraw OS-level permissions (location, microphone) at any time in device settings. Withdrawing location permission will prevent navigation and reward features from working.
5. Who we share data with (processors / recipients)
We use trusted service providers who process data on our instructions:
| Provider | Role | Typical location / notes |
|---|---|---|
| Google Firebase Authentication | Account sign-in, email verification, ID tokens | Google Cloud (see Google’s terms / DPA) |
| Google Maps Platform (Maps, Places, Navigation, Routes) | Maps, geocoding, turn-by-turn navigation, place search | Google — subject to Google’s terms and privacy notices |
| Google Analytics | App and website usage analytics | Google Ireland Limited / Google LLC — see Google Privacy Policy and Google’s measurement/analytics terms |
| Sentry | Error and performance monitoring | Sentry’s infrastructure (configure EU data residency if available) |
| Hosting / API providers for our backend and website | Store profiles, routes, GPS trails, favourites, survey responses; serve the site | [HOSTING REGION — EU] |
| Email/SMTP provider | Deliver website contact messages | As configured for geospedition.com |
We do not sell your personal data.
Public leaderboard information is visible to other users of the app.
6. International transfers
Some providers (notably Google and Sentry) may process data outside the European Economic Area. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses and provider terms. If your hosting is outside the EEA, the same principles apply — document your hosting region in Section 5.
7. Retention
| Data | Retention (default approach) |
|---|---|
| Account profile | Until you delete your account, or longer if legally required |
| Completed routes & GPS trails | Kept while your account exists so you can view history and we can operate the game; you may request erasure (see Section 9) |
| Company location share | Latest position only, while the setting is on and you belong to a company. Removed when you turn sharing off or leave the company |
| Favourites | Until you delete them or your account |
| Local recent searches | Until cleared / app data removed on device |
| Contact form messages | For as long as needed to handle your request, then deleted or archived as appropriate |
| In-app survey responses | Kept while your account exists, together with the rest of your product data; you may request erasure (see Section 9) |
| Error logs (Sentry) | According to our Sentry retention settings (keep as short as practical) |
| Google Analytics data | According to our GA4 property retention setting ([e.g. 2 or 14 months]); analytics cookies last up to 2 years unless cleared earlier |
8. Security
We use industry-standard measures appropriate to the risk, including:
- authentication via Firebase (tokens; no plaintext passwords in our API),
- HTTPS for API and website traffic,
- access controls on production systems.
No method of transmission or storage is 100% secure. Please use a strong unique password and protect your device.
9. Your rights (EEA / UK users)
Under the GDPR you may have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
- Lodge a complaint with your supervisory authority (in Poland: UODO — uodo.gov.pl; elsewhere, your local DPA)
How to exercise rights: email privacy@geospedition.com from the email linked to your account (or include enough information for us to verify you). We will respond within the timeframes required by law (generally one month).
Account / data deletion: You can request deletion of your account and associated personal data by contacting us at the address above. We will delete or anonymise data that is no longer needed, except where we must retain information for legal claims, security, or legal obligations.
10. Children
GeoSpedition is intended for users aged 16+ (or the higher digital-consent age in your country, if applicable). We do not knowingly collect personal data from children below that age. If you believe a child has created an account, contact us and we will take appropriate steps.
11. Cookies and website
The marketing website may use:
- Essential cookies / similar technologies — required for basic site operation and security. These do not require consent.
- Analytics cookies (Google Analytics) — used only with your consent via our cookie banner / preferences. Until you accept, Google Analytics scripts and cookies are not activated.
Typical Google Analytics cookies (names and durations may vary with GA4 configuration):
| Cookie / storage | Provider | Purpose | Typical duration |
|---|---|---|---|
_ga |
Distinguish users | up to 2 years | |
_ga_* |
Persist GA4 session/campaign state | up to 2 years | |
_gid |
Distinguish users (if present) | 24 hours |
You can change or withdraw cookie choices at any time through the cookie preferences control on the website, and/or clear cookies in your browser.
Legal documents (including this Privacy Policy) are published as web pages on our website for App Store / Play Store and user reference. Downloadable PDF copies of the same documents are also available.
12. App Store and Google Play disclosures
In addition to this policy, Apple App Store Privacy Labels and Google Play Data safety forms describe categories of data collected (notably precise location, account info, app activity / diagnostics, and optional in-app survey answers). Those console forms must stay consistent with this document.
13. Changes
We may update this Privacy Policy from time to time. The “Last updated” date will change, and the current version will be published at:
https://geospedition.com/privacy-policy
Material changes will be communicated in a reasonable manner (for example in-app notice or email) where appropriate.
14. Contact
info@geospedition.com
privacy@geospedition.com
Websco Łukasz Kupiński
Poland
NIP: 6652931383