Privacy Policy

Who we are

Ruava is a route generation app for cyclists, runners, and walkers, operated by a sole developer based in Belgium. For data controller identity or any privacy enquiry, email privacy@ruava.app.

What we collect

When you request a TestFlight invite, we collect your email address and any details you include in the request. We don't track you across the web, we don't sell your data, and we don't use third-party advertising cookies.

Why we collect it

We use your email address to send the TestFlight invite link, help with beta access, and send occasional updates about the app's development. We will never send spam or share your email with third parties.

Where your data is stored

Invite-request emails are handled in Ruava's email inbox. App beta data is stored in Supabase, a cloud database provider with servers in the European Union, and crash reports are processed by Sentry in Frankfurt, Germany. Address searches and approximate location are sent to Mapbox, a US-based mapping provider (see mapbox.com/legal/privacy), to look up places you search for. Route coordinates are sent to Open-Meteo, a weather and elevation data provider, without any identifier attached (see open-meteo.com).

How long we keep it

We keep your email until you ask us to remove it, or until you unsubscribe. Navigation telemetry (including GPS traces recorded during a ride) is kept for at most 30 days. Product interaction events and submitted route feedback are kept for the duration of the beta programme. Waitlist emails are kept until launch or until you request deletion. If Ruava is discontinued, all collected data will be permanently deleted.

Website analytics

We do not run third-party website analytics on these pages. Server and hosting logs may still record basic technical request data needed to deliver and protect the site.

When you use the app

Ruava is currently in private beta on TestFlight. When you use the app, we collect six categories of data, all linked to a device identifier we generate locally on first launch. None of this data is used for advertising or sold to third parties.

• Precise location — used in real time to generate loop routes from your starting point and provide turn-by-turn navigation. During a ride, navigation telemetry — including your GPS trace — is sent to our EU servers to improve routing, kept for at most 30 days, and deleted server-side when you discard the ride. If you submit route feedback, your GPS trail and planned route are kept for the duration of the beta; discarding the ride in the app also deletes that submission from our servers, and you can always request deletion by emailing privacy@ruava.app. If you rate a route positively, we also keep an anonymised copy of the route shape — with the area around its start and end removed and no device or ride identifier attached — to learn, in aggregate, where people enjoy their routes; because it contains no identifiers, this anonymised copy cannot be linked back to you or individually deleted.
• Approximate location — used to choose sensible defaults (e.g. units, language hints).
• Device identifier — a random ID generated on your device on first launch. It lets us link your ride feedback to your earlier rides without you needing an account.
• Product interaction — which screens you visit, which buttons you press, whether you finish a ride. Used only to improve the app.
• Crash data — when the app crashes, we receive a crash report so we can fix bugs. Crash reports are processed by Sentry, hosted in Frankfurt, Germany.
• Performance data — how long screens take to load and how the app behaves under load. Also processed by Sentry.

Ride history lives on your device. During rides, navigation telemetry — including GPS traces — is sent to our EU servers to improve routing, kept for at most 30 days, and deleted server-side when you discard the ride from the History screen. Any route feedback you submitted for a ride is deleted along with it when you discard the ride; older submissions that cannot be matched automatically are deleted on request via privacy@ruava.app.

Your rights

Under the GDPR, you have the right to access, correct, or delete your personal data at any time. You can also object to processing or request that we export your data. To exercise any of these rights, email us at the address below. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).

Contact

Questions about your privacy or your data? Email us at privacy@ruava.app — or simply reply to any email you receive from us.