Mapbreak

Draft for review. Not yet reviewed by a lawyer.

Mapbreak Privacy Policy

Effective date: Effective date

Mapbreak ("Mapbreak", "we", "us") is an iPhone app by ScaleOn Limited that suggests food, coffee and scenic stops along a driving route and opens the route in Google Maps. This policy explains what we collect, why, who helps us, how long we keep it and what choices you have.

The short version

1. What we collect and why

What Why Details
Your starting point (device location, or a place you type) To calculate your route and find stops along it Sent with each planning request, used right away with Google Maps Platform, then discarded. We don't save or log it. To avoid recalculating identical requests, we keep a one-way fingerprint (hash) of the request — including your starting area rounded to about 1 km — for up to 1 hour, with no link to your app ID. Your phone keeps it in your route history (see section 4).
Your destination and trip plans — destination, the suggestions we showed, the stops you chose, your trip preferences (extra time, number and type of stops, interests) To create and show your plans, keep track of your free route and build the Google Maps link Stored on our servers with your anonymous ID. From Google's place data we keep only place IDs; names, ratings, hours, prices, categories and photos are not saved but fetched again from Google when you open a plan. A stop's location is deleted after 30 days. Our own route summary (extra time and miles, position along the route, stop group, badges, the one-line reason) stays with the plan. Photos are not cached.
Links you share or paste To read the destination Read in real time and not kept. If a link can't be read, we keep only its anonymized pattern (no place names or coordinates) to improve the app.
Anonymous app ID (Firebase Anonymous Authentication) To secure requests to our servers and remember your free-route and Mapbreak Pro status A random ID, not tied to your name or Apple Account. It is stored in your device's keychain, which iOS may keep even after you delete the app; that is how your status carries over.
Purchase information from Apple, handled for us by RevenueCat — product, price and currency, App Store country, purchase and expiry dates, transaction IDs, trial and subscription status (renewed, refunded, billing problem) To turn Mapbreak Pro on or off, restore purchases and show subscription notices Apple handles payment. The app sends Apple's signed purchase records to RevenueCat with your anonymous app ID; RevenueCat checks them, and our servers ask RevenueCat whether Mapbreak Pro is active. We never receive your card details or Apple Account credentials.
Device information for subscriptions (RevenueCat) — your device's vendor identifier (IDFV, an ID Apple gives each app maker on your device; not the advertising identifier), IP address, device model, OS and app version, language and App Store country Sent automatically by RevenueCat's software with every subscription request, together with your anonymous app ID Used only to provide purchases and restores, not for ads or tracking. The app has no setting to turn it off.
App usage events (Amplitude) — which features are used (for example onboarding steps, subscription screen shown, route opened in Google Maps), session start/end, a random device ID created by the analytics software, device model, OS and app version, language, and country from your device's region setting To understand and improve the app Not sent: IP address (turned off), advertising identifier, vendor identifier, your app ID, location, links. Some events include a Google place ID (for example when a suggested stop closes before you'd arrive).
Crash reports (Firebase Crashlytics) — what went wrong, device model, OS and app version, memory and storage state, an installation ID To find and fix crashes Not tied to your app ID.
Server logs — IP address, time, which service was called, response code and duration To keep the service secure and running Kept by our cloud provider for up to 30 days. Request contents (your location, links) are not logged.
Support emails To answer you Only if you write to us; we receive your email address and message.

We do not collect contacts, photos, health data, browsing history or precise location in the background. Location is only requested while you use the app ("When In Use").

2. Who helps us (service providers)

We share data only with companies that run parts of Mapbreak for us, and only what they need:

Provider Role Data it receives
Google — Firebase (Authentication, Cloud Firestore, Cloud Functions, Crashlytics, Hosting), US Servers, database, anonymous sign-in, crash reports Anonymous ID, trip plans, purchase status, crash reports, server logs
Google — Google Maps Platform (Routes API, Places API) Route calculation (including the drive-time estimate shown before you plan) and place data Your starting point, destination and route, from our servers; no app ID. Google's processing is covered by the Google Privacy Policy.
Google — Google Maps SDK for iOS Draws the map on the suggestions and route screens Directly from the app when a map is shown: your IP address and the map area shown (which includes your route). Not your device location — the map's own location feature is turned off. The SDK also sends Google its own crash, performance and usage diagnostics with a device identifier, under the Google Privacy Policy.
Amplitude, US data center Product analytics Usage events and a random device ID, as described above
RevenueCat, Inc., US Subscriptions: checks App Store purchases, keeps your Mapbreak Pro status, restores purchases Anonymous app ID; purchase and transaction information (product, price, currency, dates, transaction IDs, status); your device's vendor identifier (IDFV), IP address, device model, OS and app version, language and App Store country
Anthropic, PBC (Claude), US AI model that ranks candidate stops and writes the one-line reason shown with each suggestion Anonymous candidate numbers, each candidate's stop group, a rough detour size and position along the route, and your stop preferences (extra time, number and type of stops, interests). No place names, ratings or other Google data, no location coordinates, app ID or links.
Apple App Store purchases; place search when you type a starting point (MapKit) Purchase data; the text you type to search for a starting point, under Apple's Privacy Policy

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (this policy would continue to apply).

3. What we don't do

4. Data kept on your phone

Your route history (including your starting point) is stored only on your device and excluded from device backups. It keeps place IDs and our own route summary, not Google place details such as names, ratings or photos; those are fetched again from Google when you open a plan. Stop locations and the route line are removed after 30 days. Deleting the app deletes this history.

5. How long we keep data

Data Kept
Starting point Not saved; the 1-hour request fingerprint expires automatically
Trip plans on our servers Place IDs, destination, preferences and our route summary: 12 months after the plan was created, then deleted automatically, or earlier if you ask us to delete it. Stop locations: 30 days. Other Google place details: not saved
Anonymous ID, free-route and Pro status While you use Mapbreak, or until you ask us to delete it
Purchase records As long as needed for your subscription and our legal and tax obligations
Usage events Up to 12 months
Crash reports 90 days
Server logs Up to 30 days
Support emails As long as needed to help you

6. Your choices and rights

California notice (CCPA/CPRA). In the last 12 months we collected: identifiers (anonymous app ID, analytics device ID, device vendor identifier, IP address); commercial information (subscription status and purchase history); internet or other electronic activity (in-app usage events); geolocation data (your starting point, used only for the request). Sources: you, your device, Apple and RevenueCat. Purposes and recipients: sections 1–2. Precise geolocation is sensitive personal information; we use it only to provide the route you ask for, which the law permits without a right to limit. We do not sell or share personal information, including that of consumers under 16.

7. Children

Mapbreak is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

8. Security

Data travels over encrypted connections (HTTPS). Server data is protected by access rules that let each app ID read only its own records; API keys stay on our servers. No method is perfectly secure, but we work to protect your data.

9. Where data is processed and UK data protection

Mapbreak is offered in the United States, and data is stored and processed in the United States. Mapbreak is run by ScaleOn Limited, a company registered in England and Wales, so UK data protection law (the UK GDPR and the Data Protection Act 2018) also applies to how we handle your information.

10. Changes

We will update this page and its effective date when this policy changes, and tell you in the app before material changes take effect.

11. Contact

ScaleOn Limited · 8 Stable Path, Princess Marina Drive, Reading RG2 9RZ, United Kingdom · support@mapbreak.com

Terms of Use: /terms