Privacy Policy

Information we collect

We collect the following categories of information:

• Precise location. Your live location is used on-device to show your position on the map and calculate ETAs, and is never sent to our servers. If you sign in and save a place or a starting location, its coordinates are stored in our database so they sync across your devices.
• Account information. If you create an account: your email address, and optionally your name and a profile photo URL (if you sign in with Google).
• User content. Saved place names, custom labels, and icon or color choices you set for your saved places.
• Website form submissions. If you contact us through this website, the information you submit (such as your email address and message).

What we don't collect

We do not use analytics, crash-reporting, or advertising SDKs. We do not collect advertising identifiers, and we do not track you across other companies' apps or websites.

How we use information

We use the information above to:

• Show your location on the map and calculate estimated arrival times
• Sync your saved places and settings across your devices if you have an account
• Respond to contact form messages
• Maintain the security and reliability of the service

How information is shared

We share information only with the service providers that help us run Mapcut, each limited to what they need to perform their function:

• Supabase — our database and authentication provider, hosted on AWS in Oregon, USA.
• Apple — Sign in with Apple, and on-device map routing and search (Apple MapKit).
• Google — Google Sign-In, and hosting for your profile photo if you sign in with Google.
• Resend — delivers account emails (sign-in codes, confirmations, password resets).
• OpenRouteService (operated by HeiGIT gGmbH, Heidelberg, Germany) — calculates bike-route ETAs. Only the two coordinates needed for that one request are sent; no account or device identifier is included.

Some of these providers are located outside Québec, including in the United States and Germany. When information is transferred internationally, we rely on providers' contractual and technical safeguards. We do not sell your information, and we do not share it with advertisers.

Data retention

We keep information only as long as needed:

• Account data (profile, saved places, settings) is kept until you delete your account, then erased within 30 days; backup copies are purged on their own separate cycle shortly after.
• The anonymous bike-ETA cache is refreshed continuously and never kept longer than about 30 days.
• Contact form submissions are kept for up to 24 months, then deleted.

Security

We use technical safeguards appropriate to the sensitivity of the information involved, including per-user database access controls and device Keychain storage for your session credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict our use of your information. You can delete your account at any time from Settings → Account → Delete Account, which removes your account and all associated saved places and settings, and (if applicable) revokes your Apple Sign-In access. For any other request, contact us at info@mapcut.app.

Data breach notification

If a security incident creates a real risk of serious harm to you, we will notify the affected individuals and the applicable regulator as required by law, without undue delay.

Children's privacy

Mapcut is not intended for children under 13, and we do not knowingly collect information from children under 13.

International transfers

Because our service providers are located in the United States and Germany, your information may be processed outside Québec and Canada. We take steps to ensure it receives a comparable level of protection wherever it is processed.

This website's forms

Separately from the app, this website (mapcut.app) collects the email address and any message you submit through the contact form, used only to respond to you or notify you about Mapcut. See Data retention above for how long we keep it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated date. This version supersedes all previous versions of our Privacy Policy, including the version previously in effect.

Contact

Mapcut is operated by José Acosta Aldrete, based in Montréal, Québec. Questions about this Privacy Policy or your information: info@mapcut.app.