This is a translation. If there is any difference, the Portuguese version prevails.
Kernvox OÜ, established in Estonia, is responsible for the Vanwise app and for processing its users' personal data, under the General Data Protection Regulation (GDPR).
Contact for privacy matters: vanwise@kernvox.com
Vanwise applies the principle of data minimisation: it only collects what is necessary for each feature. We do not use third-party analytics, we do not show advertising and we do not sell data.
| Purpose | Data processed | Legal basis | Retention |
|---|---|---|---|
| Creating an account (Apple, Google or email) | Email (with Apple it may be the private relay), Apple or Google identifier (subject); with email, the password stored only as a hash (PBKDF2), never readable | Performance of the contract | For as long as the account exists |
| Device identification, the limit of 2 devices per account and aggregate usage statistics | Random device identifier (UUID), date of first use; device model, system and app version, and when it was last used (so you can see and manage your devices); device changes and change requests to support; the App Store country, the device region and language, and the days the app was opened (for aggregate statistics: how many people use the app, which versions and from which stores they come). This is not your location | Performance of the contract | For as long as the account exists; deleted if the account is deleted |
| Community contributions (comments, ratings, reports, places, shop opening hours) | Comment text, rating, coordinates of the report or place, category, suggested opening hours | Performance of the contract | Indefinitely, anonymised if the account is deleted |
| Community traffic (queue detection) | GPS position, speed, accuracy: sent during navigation | Legitimate interest (improving routes for everyone) | Positions are not stored. Each point is matched to a road section and discarded. Only the speed per section is kept, with a random trip code (new for each navigation, with no link to the account or the device), in memory, for 10 minutes |
| Calculating routes | Origin, destination, intermediate points, vehicle dimensions and weight | Performance of the contract | Not stored: used only to calculate the requested route |
| Submitted photos and places | The photos you choose to send and the place details (name, position, description) | Performance of the contract | For as long as the place exists in the app, anonymised if the account is deleted |
| Live trip sharing (Premium; off by default, turned on for each trip) | While you share: the latest position, the path driven (one point every 25 m or more), the planned route, the destination and the estimated arrival time, sent every ~30 s while navigating. Anyone with your account's link sees them (a random code; the page is not indexed) | Performance of the contract | Until you stop sharing, the trip ends or 12 h pass without a position: then everything that showed where you are is deleted. The link is deleted if you generate a new one or delete your account |
| Photos in live sharing | The photos you choose to send while sharing, reduced (1280 px) and without camera data (EXIF), with where and when they were taken, so they appear on the page's map | Performance of the contract | Until the trip ends, you share another trip, generate a new link or delete your account, or 7 days after the last activity. You remove each one with the ✕; the originals stay on your phone |
| Moderation (reports and blocks) | The reported content, the reason and who reported; the authors and nicknames you blocked (you see the list and unblock them in Settings → Blocked) | Legitimate interest (keeping the community safe) and legal obligation | For as long as necessary to handle the report; blocks, until you undo them or delete the account |
| Security and abuse prevention | Technical server logs: IP address, date and request made | Legitimate interest (security of the service) | 14 days, then deleted automatically |
| News by email (marketing) | Consent (opt-in, never pre-ticked) | Until the user withdraws consent or deletes the account | |
| Authentication session | Session token (only the hash is stored on the server) | Performance of the contract | Until signing out or deleting the account |
| Saved (private) places and favourites | Name, category, position, note and photo of the places you save; the map places you mark as favourites | Performance of the contract | Until you delete them; deleted if the account is deleted |
| Vehicle saved to the account | Make, model and year of first registration (for the Euro standard), engine, dimensions (height, length, width), weight, vehicle and fuel type, consumption, tank, and the icon and colour you appear with on the map. The number plate and chassis number stay only on the device | Performance of the contract (so routes take your vehicle into account on any device you sign in on) | Until you change them; deleted if the account is deleted |
| Place owners (claimed listings) | Whoever claims a place’s listing: name, role, phone, e-mail, message and a photo as proof — only the Vanwise team sees them. What the owner chooses to publish on the listing (phone, WhatsApp, website, opening hours, description) is visible to all users | Performance of the contract; what is published on the listing, by the owner’s decision | While the owner manages the listing; the request, the proof and the listing are deleted if the account is deleted |
| Premium subscription | Subscription status (plan, start and end dates, renewal) and the purchase identifier Apple sends us. Payment is made and handled by Apple: we never receive card details | Performance of the contract and legal obligation (tax) | While the account exists; billing records for the period required by law |
| Community: points, levels, badges, ranking and prizes | Points calculated from your contributions; nickname (optional); country where you contributed (from the nearest place); device language (for the prize e-mail); how many drivers your reports warned (for those who passed them, only an irreversible fingerprint is kept, so the same person isn't counted twice) | Performance of the contract. The public ranking only shows your nickname, and only if you choose to appear | While the account exists. The nickname, prizes and language are deleted with the account |
| Other drivers' map (on by default; you can turn it off) | Position rounded to ~10 m, sent every 15 s (the path of those 15 s) while navigating, only above 15 km/h and outside the first and last 500 m of the trip; level; nickname, if you choose to show it | Legitimate interest (the community feature), with a notice on your first navigation and a switch in Settings to turn it off at any time | In memory only, never on disk. Others see the path already driven, about 30 seconds behind (never the destination or the road ahead); the server forgets it after 5 minutes, or as soon as navigation ends. The identifier others see is random and changes on every trip |
The vanwise.app website does not use analytics, advertising or tracking cookies. The pages are static and do not set cookies in your browser. To count visits, the website uses Umami (servers in the EU), without cookies: it does not store your IP address or identify who visits — only aggregate numbers, such as pages viewed, country, device type and clicks on the App Store buttons.
The mobile app does not use cookies: authentication is done by a token in the device's Keychain.
If we introduce cookies in the future, this section will be updated and we will ask for your consent where required by law.
Vanwise uses the device's location to:
To calculate routes, the origin and destination go to our routing server. To show the map, the weather, wildfires and official traffic, the app requests the area around you from the services listed in section 6.
In the background, location is used to keep voice guidance going during navigation and to recognise the places where you stopped (so that you can comment on them and, on a trip in progress, record stops of 30 minutes or more in the diary). Those places and stops stay only on your device.
We do not sell, rent or share personal data with third parties for marketing purposes.
Data is processed by:
To show information about the area, the app directly queries public data services: wildfires (NASA FIRMS, Fogos.pt), open map (OpenStreetMap), official traffic and roads (traffic authorities of several countries), fuel prices and exchange rates (European Central Bank, to convert expenses made in another currency). These services receive the area queried (when there is one) and the device's IP address, but no data from your account.
The map weather, the sea conditions and tides at beaches, Sun & Shade, Wind & Awning and the wind along the route come from our server. The app sends only what the forecast needs: the position rounded (to about 2 km for the map weather and 10 km for Sun & Shade and Wind & Awning), the position of the beach, or points of the route with the expected passing time — none of this carries data from your account. The server gets the data by area from the German weather service (DWD), the Norwegian Meteorological Institute (MET Norway) and Copernicus Marine.
We may disclose data if we are required to by law or by court order.
Our servers are in the European Union. We do not transfer personal data outside the European Economic Area.
Sign in with Apple authentication involves communication with Apple's servers, which may be in the USA. This transfer is covered by Apple's standard contractual clauses.
Some of the public data services in section 6 (for example, NASA FIRMS) are outside the EU. They receive only the area queried and the IP address, with no account data.
Under the GDPR, you have the right to:
To exercise any of these rights, write to vanwise@kernvox.com. We reply within 30 days.
If you believe your rights have not been respected, you can lodge a complaint with the data protection authority of your country (in Portugal, the CNPD; in Estonia, the AKI).
You can delete your account in two ways:
When you delete your account:
This action is irreversible.
Vanwise is not intended for people under 16. We do not knowingly collect data from minors. If you become aware that a minor has created an account, contact us so that we can delete it.
We may update this policy to reflect changes in the app or in legislation. The version date is at the top. Significant changes will be announced in the app.