RoadTripPark is committed to protecting your privacy. This policy describes the data we collect, how we use it, and your rights.

1. Data Controller

The data controller is:
ARQDEV
SIRET: 103 552 063 00010
Registered office: Marseille, France
Publication director: ARQDEV
Email: contact@roadtrippark.com

2. Data Collected

We collect the following data:

• Account information: email address, display name, profile photo
• User content: photos, journal entries, road trip itineraries. Published photos are automatically analysed by AWS Rekognition to detect inappropriate content (moderation).
• Photo geolocation: photos you add to the gallery may carry the precise GPS coordinates of where they were taken. These precise coordinates are stored but remain strictly private: only the photo's owner can view them. For other users allowed to see the photo, only the city and country (derived from those coordinates) are shown — never the exact position.
• Badges and progress: the badges and trophies you unlock, along with your progress in challenges (validated stages, completed road trips), are recorded and linked to your account.
• Technical data: device type, app version, language, crash reports (Firebase Crashlytics)
• Usage data: app interactions, screens viewed, session duration — collected via Firebase Analytics to improve the service, linked to your account identifier. Disabled by default for new installations and can be turned off at any time from Settings → Advanced → "Usage analytics"
• Device identifiers: Firebase Analytics collects the Android advertising ID (AD_ID) and an app identifier, solely for usage statistics — RoadTripPark displays no advertising and never shares these identifiers with advertisers
• Push notifications: device token (if you enable notifications)
• Geolocation data: collected only when a road trip is active. If you grant the (optional) background location permission, trace recording continues with the screen off or the app in the background, with a permanently visible notification. Two distinct processes:
  • Stage validation (one-shot): when you tap "Complete this stage", your current GPS position (latitude, longitude) is sent to the server to verify you are within 20 km of the expected point (anti-cheat). This point is not stored after verification.
  • Road trip trace (breadcrumb): while a road trip is active, your position is recorded every 30 seconds as points (latitude, longitude, timestamp, heading, speed), up to 50,000 points maximum per road trip. These points form the yellow trace displayed on your map.
• Social data: friends list, friend requests, published comments, likes. This data is visible to other users according to the app's social features.
• Published travel journal: you may choose to publish the journal of a completed road trip. A published journal (photos, texts, stage names, trip statistics, along with your display name and profile picture) becomes visible to all signed-in users of the app — not only your friends. The exact GPS coordinates of your photos and your GPS trace are never exposed (see "Photo geolocation" above). Publishing is optional and reversible: you can unpublish your journal at any time from the app, and it immediately becomes private again.
• Reports and moderation: when you report a piece of content (photo, journal, comment) or a user, we record the reference of the reported content, the report category, and your account identifier. This information is never visible to other users — the author of the reported content is not told who reported it — and is used exclusively for moderation. Content reported by several users is automatically hidden as a precaution pending review; any final decision (removal, reinstatement, account suspension — see our Terms) is made after human review.
• Purchase data: type of access purchased (Roadtrip Pass or annual subscription). Payments are handled entirely by Google Play — we never have access to your payment details
• Biometric authentication: if you enable Face ID, Touch ID, or fingerprint, this verification is performed locally on your device. No biometric data is collected or transmitted to our servers

2bis. Roadtrip Catalogue Data Sources

RoadTripPark includes an editorial catalogue of 27 road trips covering France, Spain, Portugal, Italy and Germany. This catalogue contains approximately 140 stages, 178 parking spots (motorhome areas, campsites, car parks) and over 400 points of interest. All data in this catalogue is compiled from public and lawful sources, verified by our editorial team:

• OpenStreetMap — community mapping database under the ODbL licence (commercial use permitted with attribution "© OpenStreetMap contributors")
• Official websites of local authorities, tourist offices, campsite operators and motorhome areas (publicly accessible information)
• Open government data published on data.gouv.fr and opendatasoft.com (Etalab 2.0 licence)
• On-site verification carried out by the ARQDEV editorial team (in-person visits and checks)
• Google Maps consulted on an ad hoc basis to verify public postal addresses and GPS coordinates (manual reading only, no automated extraction)

Our catalogue contains no personal data about third parties: no individual's name (operator, manager, owner), no personal email address, no private phone number. Any names in the catalogue refer exclusively to company names or trading names (e.g. "Camping Municipal de Quimper"). GPS coordinates are rounded to 4 decimal places (approximately 11 metres accuracy), which does not allow identification of a private address.

This data is provided for information purposes only and is continuously updated. ARQDEV cannot be held liable for information that has become outdated between updates. To report a location error or a closed spot: contact@roadtrippark.com.

3. Legal Basis for Processing

In accordance with Article 6 of the GDPR, your data is processed on the following bases:

• Performance of contract: providing the RoadTripPark service (account, road trips, gallery, social sharing, geolocation required for road trip functionality)
• Consent: sending push notifications
• Legitimate interest: service security, content moderation, app improvement

3bis. Purposes and Legal Basis for Geolocation

GPS data collected is used exclusively for the following purposes, all based on the performance of contract (Article 6.1.b of the GDPR) — these processes are necessary for the app to fulfil its road-trip function:

• Road trip trace: building the visual journal of your trip (yellow breadcrumb on the map).
• Stage validation: checking that you are actually on site before validating a stage (anti-cheat for badges and progression).
• Multi-device sync: retrieving your trace on another device signed into the same account.

4. Use of Data

Your data is used to:

• Provide and improve the RoadTripPark service
• Display your road trips and shared content
• Send push notifications (if enabled)
• Ensure the security of your account
• Moderate published content (automatic detection of inappropriate content)

5. Storage and Security

• Authentication: managed by Firebase Authentication (Google)
• Database: MongoDB Atlas hosted on AWS Paris (eu-west-3), European Union, with encryption at rest
• GPS traces (breadcrumbs): stored in MongoDB Atlas AWS Paris (eu-west-3), European Union, encrypted at rest
• Photos: stored on Amazon S3, distributed via CloudFront (CDN)
• Password: never stored in plain text, managed by Firebase

6. Data Sharing and Processors

We never sell your personal data. Your data is only shared with the technical services necessary for the app to function:

• Firebase (Google): authentication, push notifications, crash reports (Crashlytics), usage analytics (Analytics), device integrity attestation (App Check / Play Integrity)
• Apple ("Sign in with Apple"): optional authentication provider, offered primarily on iOS. When you choose "Sign in with Apple", Apple sends us your email address (real or a private "…@privaterelay.appleid.com" relay) and, on first sign-in, your name, in order to create or retrieve your account. Apple, Inc. is based in the United States.
• Amazon Web Services: photo storage (S3), distribution (CloudFront), MongoDB Atlas database (eu-west-3, Paris)
• AWS Rekognition: automatic photo content moderation
• Railway: backend server hosting (EU region)
• Mapbox: map display and routing (the SDK may transmit technical telemetry data to Mapbox), and geocoding service: when a geotagged photo is added or a place is searched, the corresponding GPS coordinates are sent to the Mapbox API (api.mapbox.com) to derive the city and country. Mapbox, Inc. is based in the United States.
• Google Maps: complementary mapping services
• RevenueCat: in-app purchase and subscription management (receives your email address and display name to link your purchases to your account)
• Sentry: error tracking and performance monitoring (backend)
• Resend: transactional email service (Resend, Inc., United States) used to send our moderation team the internal alerts triggered when content is reported by several users. These emails are sent to our own administration address; they contain the reference of the reported content and the technical (pseudonymous) identifiers of the reporting users — never their email address.

7. Transfers Outside the European Union

Some of our processors (Firebase/Google, Amazon Web Services, Mapbox, Resend, RevenueCat, Sentry, Apple) are based in the United States. These transfers are governed by:

• The EU-U.S. Data Privacy Framework
• Standard contractual clauses approved by the European Commission

8. Data Retention

• Account data: retained as long as your account is active
• User content: retained as long as your account is active, deleted upon account deletion
• GPS traces (breadcrumbs): retained as long as the corresponding road trip exists in your account. Permanently deleted when you delete the road trip or your account.
• Technical data and crash reports: 12 months maximum
• Subscription data: retained while the subscription is active, deleted with the account
• Transaction data (Roadtrip Pass and annual subscription): retained for 10 years in accordance with legal accounting obligations
• Notification tokens: deleted when notifications are disabled or the account is deleted
• Notification history: retained for 90 days, then automatically deleted
• Reports: retained as long as your account is active (needed for moderation and abuse prevention). When your account is deleted, the reports you filed and those concerning you are deleted, along with the related internal moderation alerts.

After account deletion, all your personal data is deleted immediately from our active servers, except for transaction data retained in dissociated form under our accounting obligations (see above). Encrypted backups are purged within 90 days maximum.

9. Your Rights

Under the GDPR, you have the following rights:

• Access: view your data from your profile
• Rectification: modify your information at any time
• Deletion: delete your account and all your data from the Settings screen ("Delete account" button at the bottom of the screen). Deletion is irreversible: your personal data is deleted immediately from our active servers and encrypted backups are purged within 90 days maximum (see section 8). Two exceptions apply, required by law or by our providers: (a) purchase transaction data is retained for 10 years, dissociated from your profile, under our accounting obligations (see section 8); (b) our purchase-management provider (RevenueCat) may retain the technical identifier linked to your purchases according to its own retention policy.
• Portability: download a complete copy of your data in JSON format directly from the app (Settings → Privacy → Export my data) — see section 11ter below
• Objection: object to the processing of your data
• Restriction: request restriction of processing
• Withdrawal of consent: withdraw your consent at any time for push notifications. For geolocation (processed on the basis of performance of contract), you can revoke the Android permission at any time: road-trip features will be disabled, but the rest of the app remains usable.

To exercise these rights, contact us at contact@roadtrippark.com. You may also file a complaint with the CNIL (French Data Protection Authority) or your local supervisory authority.

10. Cookies

The mobile app does not use cookies. The website roadtrippark.com only uses technical cookies necessary for its operation (Firebase).

11. Children

RoadTripPark is not intended for children under 16. We do not knowingly collect personal data from minors under 16. If you are a parent and believe your child has provided us with data, contact us so we can delete it.

11bis. Crash Reports (Crashlytics)

The app uses Firebase Crashlytics (Google) to collect anonymised crash reports. These reports contain technical information such as device model, Android version, app version, and the error stack trace. Your Firebase identifier (anonymous) is attached to each report to enable per-user aggregation — no personally identifiable data (name, email, GPS) is included.

Opt-out: you can disable crash reporting at any time from Settings → Privacy → Crash reporting. This setting takes effect immediately and is persisted across sessions.

11ter. Data Portability (GDPR Art. 20)

Under Article 20 of the GDPR, you can at any time export all your personal data in a structured, machine-readable format (JSON).

How to exercise this right: open the app, go to Settings → Privacy → Export my data. A JSON file is generated and can be shared directly from your device (email, cloud storage, etc.).

The export includes: profile, road trips, photos, albums, comments, likes, friends, blocked users, reports, notifications, subscription, purchases, and GPS traces (capped at 50,000 points for the most recent data).

This operation is limited to 5 exports per 24 hours. If you encounter any difficulty, you may also submit a request by email to contact@roadtrippark.com.

12. Changes

This policy may be updated. In case of significant changes, we will notify you through the app. The last update date is shown at the top of this page.