NAVFORGE — PRIVACY POLICY

Last updated: October 2026

NavForge (“the App”) is a motorcycle navigation application developed by Nikolaos Chatzivasileiadis (“we”, “us”, “our”). We take your privacy seriously. This policy explains what data the App collects, how it is used, and your rights.

1. DATA WE COLLECT

1.1 Data stored on your device only (never sent to us):
– Downloaded map files (.pmtiles, routing tiles, places database, speed camera database)
– Ride recordings (GPS tracks stored locally)
– Custom map markers you create
– Route preferences and settings
– Lean angle and ride statistics
– Installed region list and app preferences

This data never leaves your phone unless you explicitly share it (e.g. exporting a GPX file via the Android share sheet).

1.2 Data transmitted temporarily during Group Ride sessions:
– Your GPS position (latitude, longitude)
– A randomly generated rider ID (UUID, not linked to your identity)
– A rider name you choose (can be any name or nickname)
– A session code

This data is sent to our server (ride.navforge.app) only while you are actively participating in a Group Ride session. It is stored temporarily and automatically deleted within 24 hours of the session ending. We do not retain historical location data.

1.3 Data transmitted when requesting a region:
– The region name you tapped
– Your randomly generated rider ID (UUID)

This is used solely to prioritise which map regions to build next. No personal information is transmitted.
1.4 Diagnostic reports sent when something goes wrong:
– A random rider ID (UUID, not linked to your identity)
– The app version and your Android version
– Which map regions you have installed
– The error itself: an error type, a message, and a technical stack trace

These are sent to our server (ride.navforge.app) automatically when the App hits an error, so that we can fix it. They contain NO location data, no ride recording and no route. The random rider ID lets us tell two reports from the same phone apart; it is not tied to your name, email or any account, and you can clear it by reinstalling the App.

1.5 Data we do NOT collect:
– Your real name, email address, or phone number
– Your identity or any account information (the App has no user accounts)
– Your location outside of active Group Ride sessions
– Your ride recordings, routes, or navigation history
– Any advertising ID, and no analytics or tracking of how you use the App
– Any hardware or device identifier (IMEI, serial number, MAC address, Android ID)
The random rider ID in sections 1.2, 1.3 and 1.4 is generated by the App itself and is not a device identifier.

2. SUBSCRIPTION AND PAYMENT DATA

Subscription payments are processed by Google Play (Android) or Apple App Store (iOS). Payment information is handled entirely by Google or Apple. We do not receive, process, or store your payment card details. When paid subscriptions go live we will receive only a confirmation of your subscription status, via RevenueCat, our subscription management provider (revenuecat.com). While the App is in testing there are no paid subscriptions and no subscription data is exchanged with anyone.

3. THIRD-PARTY SERVICES

3.1 Geoapify: When you search for a place or a kind of place while online, your search text and an approximate location (used to rank nearby results first) are sent to Geoapify, a geocoding and places provider. See their privacy policy at: https://www.geoapify.com/privacy-policy/

3.2 Nominatim (OpenStreetMap): When the App needs to name the road or suburb you are on, the coordinates are sent to the Nominatim service operated by the OpenStreetMap Foundation. This is a reverse lookup only; your typed searches do not go to Nominatim. See their privacy policy at: https://osmfoundation.org/wiki/Privacy_Policy

3.3 RevenueCat: Manages subscription status. See their privacy policy at: https://www.revenuecat.com/privacy

3.4 Geofabrik: Map data is sourced from OpenStreetMap via Geofabrik. No user data is shared with Geofabrik.

4. DATA STORAGE AND SECURITY

All personal data (ride recordings, markers, settings) is stored locally on your device. The only server-side storage is the temporary Group Ride position data described in section 1.2, stored in an SQLite database on our server with HTTPS encryption in transit. Access to the API endpoint is rate-limited and protected against common attack vectors.

5. DATA RETENTION

– Group Ride position data: automatically deleted within 24 hours
– Region request logs: retained until the region is built, then marked as completed
– Local device data: retained until you delete it or uninstall the App

6. YOUR RIGHTS

You can:
– Delete any ride recording, marker, or imported GPX from within the App
– Delete downloaded regions to remove all associated local data
– Uninstall the App to remove all local data completely
– Request deletion of any Group Ride data by contacting us (though it auto-deletes within 24 hours)

7. CHILDREN

The App is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

8. CHANGES TO THIS POLICY

We may update this policy from time to time. The updated version will be indicated by the “Last updated” date at the top. We encourage you to review this policy periodically.

9. CONTACT

For any privacy-related questions or concerns:
Email: info@navforge.app

10. OPEN SOURCE ATTRIBUTION

Map data: © OpenStreetMap contributors, available under the Open Database License (ODbL).
Routing engine: Based on Valhalla, licensed under MIT License.
Map rendering: Planetiler and MapLibre, licensed under their respective open source licenses.