Privacy Policy

This Privacy Policy explains how Reinlav AS (organisation number 930565954, Norway), as the data controller, processes your personal data in the Villspor app for iPhone and Android and on the website villspor.eu. If you have any questions, contact us at gard@villspor.eu.

Information we collect and why

We collect the information you provide when you create an account:

• Email address
• Name

We also store the content you create in the app, such as routes, folders, and waypoints, so that you can access it again later.

Beyond the content you create yourself, we do not track your location or collect analytics, advertising identifiers, or any other data from your device.

We use this information to create and operate your account and to provide the features of the app. The legal basis is the performance of our agreement with you to provide the service (GDPR Article 6(1)(b)). Providing your email address and name is necessary to have an account; without them we cannot create one.

Connecting Strava (optional)

If you choose to connect Strava to import routes, we process the route data you import on the basis of your consent (GDPR Article 6(1)(a)). You can withdraw this consent at any time by disconnecting Strava. If you do not connect Strava, none of this applies.

Third parties and data processors

We use the following providers to process data on our behalf:

• Supabase: account, authentication, and data storage
• Mapbox: map display
• Apple App Store and Google Play: app distribution
• Strava: only if you choose to connect it (see above)

Your account and the content you create are stored on servers in Europe (the EEA) through Supabase. Some of the other providers listed above may process limited data outside the EEA; where that happens, we rely on the European Commission's Standard Contractual Clauses and/or an adequacy decision (such as the EU–US Data Privacy Framework). Each provider has its own privacy policy describing how it handles data.

Data retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except for anything we are legally required to keep.

Your rights

Under the GDPR and the Norwegian Personal Data Act (personopplysningsloven) you have the right to access your data, correct it, have it deleted, restrict or object to processing, and receive your data in a portable format. To exercise any of these rights, contact us at gard@villspor.eu.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).

Deleting your account

You can delete your account and its data at any time by emailing gard@villspor.eu. It is currently not possible to delete your account from within the app. Uninstalling the app does not delete your account data.

Automated decisions

We do not use your data for automated decision-making or profiling.

Children

Villspor is not directed at children. Under Norwegian law, children under 13 cannot consent to online services on their own. If we learn that we hold personal data from a child under 13 without the required consent, we will delete it.

Security

Authentication is encrypted and data is transferred over encrypted connections. We limit access to your data and use a reputable hosting provider (Supabase).

Website

The villspor.eu website is informational and does not use analytics or advertising tracking.

Changes

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect, and we will update the date at the top of this page.

Contact

For any questions about this Privacy Policy or how we handle your data, contact us at gard@villspor.eu.