# Privacy Policy **Last updated:** November 13, 2025 This Privacy Policy explains how **Routerra Anatolii Trubin** (“we”, “us”) collects, uses, discloses, and safeguards personal information when you use our web application and mobile applications (collectively, the “Services”). If you do not agree, please do not use the Services. Contact us at [info@routerra.io](mailto:info@routerra.io). ## Summary of key points - We collect the data you provide (e.g., email), **precise location while using the app** (mobile), microphone input (opt-in), camera/photos you choose, files you select, purchase/diagnostic data, and analytics/usage data. - Processors include Clerk (auth), RevenueCat (mobile subscriptions), Mapbox & Google Maps (maps), **Hotjar** (web analytics, heatmaps & session replay), **Tawk.to** (web live chat), **Sentry** (error monitoring), PostHog (analytics & optional session replay on web and mobile - hosted in US), and Bugsnag (crash reporting on mobile). - We collect device identifiers (Android ID, device fingerprints) via PostHog, Bugsnag, RevenueCat, and Clerk for analytics, crash reporting, purchase validation, and authentication. - **Website cookies:** Our website uses cookies only for analytics purposes. By continuing to browse after seeing our cookie notice, you consent to analytics cookies. - You control device permissions (mobile) and can disable optional analytics (PostHog) in Settings → Analytics. However, crash/error reporting (Bugsnag on mobile, Sentry on web/server) is always active to maintain app stability and cannot be disabled. We do not sell personal data. - Your data may be processed outside your country with appropriate safeguards (e.g., Standard Contractual Clauses for EEA/UK). PostHog data is stored in the United States. - **Data retention:** Session recordings (90 days), analytics events (12 months), active account data (while account is active), deleted account data (30 days to full deletion). ## Table of contents 01. [What information do we collect?](/content/pt/privacy-policy#section1/index.html) 02. [Platforms (Web vs Mobile)](/content/pt/privacy-policy#section1a/index.html) 03. [Mobile App Analytics and Session Recording](/content/pt/privacy-policy#section1b/index.html) 04. [How do we use your information?](/content/pt/privacy-policy#section2/index.html) 05. [Legal Basis for Data Processing](/content/pt/privacy-policy#section2a/index.html) 06. [When and with whom do we share data?](/content/pt/privacy-policy#section3/index.html) 07. [Third-Party Service Providers](/content/pt/privacy-policy#section3a/index.html) 08. [Cookies, SDKs, and tracking](/content/pt/privacy-policy#section4/index.html) 09. [International data transfers](/content/pt/privacy-policy#section5/index.html) 10. [Data retention](/content/pt/privacy-policy#section6/index.html) 11. [Your rights and controls](/content/pt/privacy-policy#section7/index.html) 12. [Children](/content/pt/privacy-policy#section8/index.html) 13. [Security](/content/pt/privacy-policy#section9/index.html) 14. [Contact & Data Controller](/content/pt/privacy-policy#section10/index.html) 15. [Updates to this Policy](/content/pt/privacy-policy#section11/index.html) ## 1\. What information do we collect? ### Information you provide - **Account & Contact:** email, password or OAuth identity (via Clerk), support messages (incl. via live chat). - **User content:** photos/files you select (e.g., attachments to route stops), route names/notes. ### Information collected automatically - **Usage & analytics:** screens, interactions, performance (web via cookies/SDKs; mobile via SDKs). - **Session replay:** on _web_ via Hotjar; on _mobile_ optionally via PostHog Session Replay. Sensitive fields are masked where supported. - **Diagnostics & errors:** crash reports, stack traces, device/OS, device identifiers, app version. These diagnostics are always active and cannot be disabled. ### Information from device permissions (mobile) - **Precise location (while using the app):** navigation, ETAs, route optimization (expo-location/Mapbox). - **Microphone:** speech-to-text to quickly add stops. - **Camera & Photos:** capture/select images for your routes. - **Files:** documents you select via Document Picker (e.g., CSV import). ## 2\. How do we use your information? - **Provide the Services** (routing, navigation, subscriptions) — _GDPR:_ Contract (Art. 6(1)(b)). - **Authenticate & secure accounts** — Contract; Legitimate interests (security, fraud prevention). - **Process purchases/subscriptions** (mobile) — Contract; Legal obligation (tax/records). - **Analytics & product improvement (PostHog, Hotjar)** — Legitimate interests; where required, Consent. You can disable PostHog analytics in mobile app Settings. - **Error/crash monitoring & debugging (Bugsnag, Sentry)** — Legitimate interests; Legal obligation. This is always active and cannot be disabled. - **Communications** (service/support messages) — Contract; Legitimate interests. - **Compliance** — Legal obligations. ## 3\. When and with whom do we share data? Processors acting on our behalf include: - **Clerk** — authentication & accounts. - **RevenueCat** — in-app purchases & subscription status. - **Mapbox/Google Maps** — maps/tiles, geocoding, navigation. - **Hotjar** — web analytics, heatmaps & session replay. - **Tawk.to** — live chat widget & chat transcripts. - **Sentry** — web/server error monitoring; PII is minimized/scrubbed. - **PostHog ( Session Replay)** — product analytics. - **Bugsnag** — crash reporting. We do not sell personal information and do not share it for cross-context behavioral advertising. ## 4\. Cookies, SDKs, and tracking ### Web Application Cookies Our web application uses cookies for analytics and essential functionality. When you first visit, we ask for your explicit consent before loading non-essential cookies. **What cookies we use:** - **Essential cookies** for website functionality (always active). - **Analytics cookies** (requires consent). - **Support cookies** (requires consent). ## 5\. International data transfers ### Data Location Your data may be transferred to and processed in countries outside your country of residence, including the **United States**. ### Safeguards When we transfer data internationally, we ensure appropriate safeguards are in place: - **Standard Contractual Clauses (SCCs):** for data transfers outside the EEA/UK. ## 6\. Data retention We retain your data only as long as necessary for the purposes outlined in this policy: - **Session recordings:** 90 days, **Analytics events:** 12 months. ## 7\. Your rights and controls Under GDPR and applicable data protection laws, you have the following rights: ### Right to Access You can request access to the personal data we hold about you. ### Right to Erasure You can request deletion of your personal data. ## 10\. Contact & Data Controller If you have questions about this privacy policy or our data practices: - **Email:** [info@routerra.io](mailto:info@routerra.io)