Privacy policy.
Rospuutto is designed so that as little data as possible leaves your phone. Routes, rides and settings stay on your device. This page explains what data is processed, where and why.
Updated 24 Sept 2026 | applies to the Rospuutto test version (iOS, web)
1. Controller
Risto Vauras (private individual, Iitti, Finland). Contact: risto.vauras@gmail.com. If a company is later founded for the service, the controller will be updated here.
2. What data is processed and where
| Data | Where it is | Why |
|---|---|---|
| Location (GPS) while riding and navigating, also in the background | On the phone only. Recorded tracks are stored in the app's own storage on the device. | Showing your position on the map, navigation, trip and speed cards, ride recording. |
| Route points when you calculate a route | Sent to Rospuutto's own routing server (GraphHopper) to calculate the route. Not stored permanently; the request is processed and forgotten. Technical server logs are kept for at most 30 days. | Route calculation. |
| Saved routes and rides, settings, vehicle details | On the phone only. No account, no cloud storage in the test version. | App functionality. |
| Community reports (obstacle, gate, place): position, type, optional comment, a random device identifier | On Rospuutto's server, visible to other users on the map. The device identifier is a random string not linked to a person; it lets you delete your own report. Reports expire after 12 months. | Warning other riders about gates and obstacles. |
| "My bike" image: make, model, year, colour, notes | Sent through Rospuutto's server to OpenAI's image service, which generates the picture. OpenAI processes the data under its own privacy policy; Rospuutto does not store the request. | Generating an illustrative bike picture for the app. |
| Feedback: your message plus app version, phone model, settings and recent error messages | Sent as an email to the controller only when you press Send. You see the full content before sending. | Fixing bugs during the test phase. |
| TestFlight (iOS test version) | Apple collects crash reports and feedback from testers under TestFlight's own terms and forwards them to the developer. | Distribution and stability of the test version. |
| Map tiles (National Land Survey, OpenStreetMap) | The phone fetches map images directly from the map service or through Rospuutto's server. The map service sees ordinary technical data (IP address, requested area). | Displaying the map. |
3. What is not collected
- No user account, name, email or phone number (no sign-in in the test version).
- No location history on the server: recorded tracks never leave the phone unless you export them as a GPX file yourself.
- No advertising or analytics tracking, no third-party tracking cookies.
4. Legal basis
Providing the app's functionality (contract / the user's request) and a legitimate interest in fixing faults and preventing misuse. Location access is requested separately by the phone's operating system and can be revoked in the phone settings at any time.
5. Retention
Data on the device stays until you delete it in the app or remove the app. Community reports are deleted after 12 months or as soon as you delete your own report. Technical server logs at most 30 days. Feedback emails are kept for the duration of the test phase and deleted afterwards.
6. Transfers and processors
The routing and report server is located in the EU. The image service is provided by OpenAI (United States); data is transferred outside the EU only when a "My bike" picture is generated, and only the vehicle details it contains. Apple (TestFlight) processes tester data under its own terms.
7. Your rights
You have the right to know what data about you is processed and to request its correction or deletion. Because the app does not identify you as a person, most data is deleted by you in the app or on the phone. A community report can be deleted in the app (your own report) or by emailing us the place and time of the report. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
8. Changes
This policy will be updated when accounts, sync or other new features arrive. Changes are announced in the app and on this page.