Privacy Policy

This Privacy Policy explains how Remap Earth Pty Ltd (ACN 699 334 793) ("Remap", "we", "us", "our") collects, uses, discloses, and protects your personal information when you use the Remap apps and website (the "Service"). We are based in Sydney, Australia, and we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in the European Economic Area or the United Kingdom, the "Your rights" and "Legal bases" sections below also describe how the EU and UK General Data Protection Regulation (GDPR) applies to you. By using the Service you agree to this policy.

Information we collect

Account information. Remap accounts are created by signing in with Google or Apple. From your chosen provider we receive your name, email address, and profile image, which we use to create and identify your account.
Location and ride data. To build routes, navigate, and record your rides, the app uses your device location, including in the background while you are recording a ride. Rides you record are stored as GPS tracks (the full sequence of coordinates you travelled). Ride files you upload or export (GPX/FIT) are stored and processed, and we retain the original uploaded file so we can reprocess it if needed.
Health and fitness data. If you connect Bluetooth sensors (such as a heart rate monitor, power meter, or cadence sensor), the readings they produce during a ride, including heart rate, power, cadence, speed, and elevation, are recorded and stored with that ride. We use this information only to record and display your rides and to compute your ride statistics.
Game and activity data. We derive territory, lines (the road segments you have ridden), and progression stats (distance, level, experience, discovery counts, and attack and damage events) from the rides you record or upload.
Shared rides. If you create a share link for a ride, we store the shared copy so the link can be opened by anyone you send it to. See "How information is shared" below.
Device and technical information. Device model, operating system, app version, and an approximate location derived from your IP address (used to choose regional map data). We do not use third-party advertising trackers, and we do not track you across other websites or apps.
Usage analytics. We use our own self-hosted analytics to understand how Remap is used in aggregate. It runs on our website, in the web app, and in the mobile app. It records which pages or screens are opened, which site referred you, your device type, and an approximate location (country and city) derived from your IP address. It runs on our own infrastructure, sets no cookies, does not follow you across other websites or apps, and is never used for advertising. Your IP address is not stored: it is combined with your device's user agent and a secret that we rotate daily to produce a temporary identifier that groups a single visit together, and because that identifier changes daily it cannot be used to recognise you over time or to build a profile of you. Inside the app and the web app we deliberately keep the record coarse. We send the name of the screen or page only. We never send your coordinates, a ride, a route, a share link, or your handle, and where a web address contains a share token we replace that token before the page is recorded. In the mobile app you can turn this off entirely under Settings, Privacy, "Share Usage Data".
Support and bug reports. If you submit a bug report, it may include a screenshot, your note, the app version and platform, and the current map context (such as your approximate coordinates, distance, and route preferences at that moment) so we can reproduce the issue.
Cookies and sessions. On the web we use a strictly necessary session cookie to keep you signed in. In the app your session token is stored securely on your device.

How we use information

Provide the Service: generate routes, record and credit rides, run the territory game, and sync your data across your devices.
Maintain, secure, debug, and improve the Service.
Understand how our website is used, in aggregate, so we can improve it.
Respond to your support requests and bug reports.
Produce anonymous, aggregated insights that help us recommend and improve routes (see below).
Comply with our legal obligations and enforce our Terms of Service.

How information is shared

We do not sell your personal information. We share information in the following ways.

With other users of the Service. Remap is a social and competitive game, so some information is visible to other signed-in users. Territory you hold or discover is attributed to your account and visible to others in that area.
Through share links you create. When you share a ride, the link is public and can be opened by anyone who has it, without signing in. A shared ride reveals the ride's full route, including the GPS track of a recorded ride, along with its title, distance, duration, and elevation, and generates a social preview image. Because a recorded track can reveal places you frequent, such as your home, only share rides you are comfortable making public. You can revoke a share link at any time.
With service providers. We use trusted providers that help us operate the Service under agreements that limit their use of your information: hosting and database and file storage (currently Hetzner, in Germany), content delivery and map tiles (Bunny), and identity providers for sign-in (Google and Apple). Map rendering, geocoding, and approximate IP location are handled by us or on our own infrastructure.
For legal reasons. We may disclose information to comply with the law, respond to lawful requests, or protect the rights, safety, and property of Remap, our users, or the public.
Anonymous aggregates. We maintain aggregate statistics about roads and route segments (such as how often a segment is ridden and which segments tend to be ridden together). These are stored without any link to your account or identity and with a minimum-rider threshold so an individual cannot reasonably be re-identified. They are used to improve routing and recommendations, and they intentionally survive account deletion because they are anonymous.

Where your information is stored

Remap is operated from Australia, and our servers, databases, and file storage are currently located in Germany. This means your personal information is stored and processed overseas. Where we transfer personal information outside Australia, we take reasonable steps to ensure it is handled consistently with the APPs. Where the GDPR applies, such transfers are made under appropriate safeguards, such as Standard Contractual Clauses.

Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from Settings in the app or on the web. Deleting your account permanently removes your profile, ride history, saved and generated rides, uploaded ride files, territory you hold, and game stats. Anonymous aggregates that cannot identify you (described above) are retained. We may also retain limited information where required by law or for legitimate purposes such as fraud prevention, and residual copies may persist in backups for a limited period before being overwritten.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, request a copy in a portable form, delete it, and object to or restrict certain processing. You can delete your account and its data directly in the app or on the web. For any other request, contact us at support@remap.earth and we will respond within the time required by applicable law.

If you are in the EEA or the UK, you also have the right to withdraw consent at any time (where we rely on consent) and to lodge a complaint with your local data protection authority. If you are in Australia and are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Legal bases (EEA and UK users)

Where the GDPR applies, we process your personal information on these legal bases: to perform our contract with you (providing the Service, including recording rides and running the game); with your consent (for example, device location and connected health sensors, which you can turn off at any time in your device settings); for our legitimate interests in operating, securing, and improving the Service and preventing abuse; and to comply with our legal obligations.

Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. If the changes are significant, we will take reasonable steps to notify you.

Contact

Questions about this policy, or want to exercise your privacy rights? Contact our privacy officer:

Remap Earth Pty Ltd (ACN 699 334 793)
202, 255 Castlereagh Street, Sydney, NSW 2000, Australia
support@remap.earth