Privacy policy

1. Data we collect

Account and contact data: email address, (hashed) password or your Google account ID when signing in with Google, display name, chosen language and contribution points.

Location data: your current GPS position (only if you allow it on your device) and the origins and destinations you enter. Your last known position is stored only on your device. Saved routes (origin, destination, name) are stored in your account.

Vehicle data: vehicle type, dimensions, weight, axles and trailer, so we can show suitable parkings.

Content you create: saved parkings, occupancy reports, safety and facility reports and reviews, with time and (for reports) the location you report from.

Usage data: technical data such as app events, error reports, device type and IP address in server logs.

Purchase data: subscription status, product, start and expiry date and an anonymous purchase ID. We never see payment details such as your card; Apple or Google process those.

Driving-time counter data is stored only on your device.

2. Purposes and legal bases

Performance of a contract (Art. 6(1)(b) GDPR): creating your account, finding parkings along your route, storing favourites, routes and vehicles, and providing your subscription.

Consent (Art. 6(1)(a)): use of your GPS location. You can withdraw it at any time in your device settings.

Legitimate interest (Art. 6(1)(f)): reliable occupancy and safety information for all drivers, preventing abuse and fraud, security and improvement of the app.

Legal obligation (Art. 6(1)(c)): keeping accounting and tax records.

3. Retention

Account, vehicle, route and favourite data: as long as your account exists; deleted within 30 days after account deletion.

Reports and reviews: as long as your account exists. After deletion they are removed; already computed anonymised statistics (e.g. average occupancy) may remain.

Usage data and server logs: up to 12 months.

Purchase data: while the subscription is active; billing and accounting records up to 7 years under Belgian law.

4. Third parties (processors)

Lovable Cloud / Supabase: hosting of our database, authentication and servers (stored in the EU where possible).

RevenueCat Inc. (USA): managing and verifying subscriptions; receives your account ID and purchase data.

Apple (App Store) and Google (Google Play): process payments, renewals and refunds as independent controllers.

Google: sign-in with Google, if you choose it.

HERE Technologies: truck route calculation and address search; receives origin, destination and vehicle dimensions, without your name or email.

OpenStreetMap tile servers: displaying map tiles; receive your IP address and the map area shown.

For transfers outside the EEA we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

We never sell your data.

5. Your rights

You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. You can withdraw consent at any time.

Send your request to privacy@saferoutestop.com. We reply within one month and may ask you to confirm your identity.

You can also delete your account yourself in the app via Profile → Delete account.

You have the right to lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, contact@apd-gba.be.

6. Security

Data is sent encrypted (HTTPS). Database access is restricted per user so you can only see and change your own data.

7. Changes

We may update this policy. We will notify you in the app of significant changes. The date at the top shows the latest version.