Privacy Policy
This Privacy Policy describes how RachApps (“we”, “us”) collects, uses, and protects personal data when you use the Peaks mobile application and related backend services.
1. Who we are
Peaks is operated by RachApps. If you have questions about this policy or your data, contact us at radek.chmielewski.78@gmail.com.
2. Data we collect
2.1 Account data (stored on our servers)
When you create an account, we collect and store:
- first name and last name
- email address
- password (stored only as a secure hash; we never store plain-text passwords)
We also store authentication data required to keep you signed in:
- hashed refresh tokens linked to your account
- access tokens issued to your device (JWT)
2.2 Usage of backend services
When you use map and geo features while signed in, our servers receive:
- identifiers of map tiles you request (for example
tile_12_34) - your account identifier as part of authenticated API calls
We do not receive your precise GPS coordinates from the app for storage on our servers. Location is processed on your device to determine which map tiles to download.
2.3 Data processed only on your device
The following is processed locally on your phone and is not uploaded to our servers unless you explicitly share it outside the app (for example via the system share sheet):
- GPS location and altitude
- device orientation (compass)
- camera images and AR photo drafts
- locally cached map and elevation data
2.4 Server logs
Our backend may temporarily record standard technical logs (such as IP address, request time, and API path) for security, troubleshooting, and abuse prevention. These logs are retained for a limited period.
3. Why we use your data
We process personal data to:
- create and manage your account
- authenticate you and provide secure access to the service
- deliver map tile and geo data you request
- maintain, secure, and improve the service
- comply with legal obligations
Legal bases under the GDPR (where applicable): performance of a contract (providing the app), legitimate interests (security and service operation), and consent where required by law.
4. Where data is stored
Account and authentication data are stored in MongoDB on infrastructure we operate.
Geo and elevation assets are served from Amazon Web Services (S3), primarily in the eu-north-1 (Stockholm) region.
5. Sharing with third parties
We do not sell your personal data.
We use infrastructure providers (hosting, database, cloud storage) strictly to operate the service. They process data on our instructions and under appropriate safeguards.
We may disclose data if required by law or to protect the rights, safety, and security of users and the service.
6. Retention
- Account data is kept while your account is active.
- Refresh tokens expire automatically and older tokens are removed.
- Server logs are kept only as long as needed for their purpose.
You may request account deletion by contacting radek.chmielewski.78@gmail.com.
7. Your rights
Depending on your location (including the EEA under GDPR), you may have the right to:
- access your personal data
- rectify inaccurate data
- erase your data
- restrict or object to processing
- data portability
- withdraw consent where processing is based on consent
- lodge a complaint with a supervisory authority
To exercise these rights, email radek.chmielewski.78@gmail.com.
8. Security
We use industry-standard measures including password hashing, token-based authentication, and encrypted connections (HTTPS) between the app and our servers.
No method of transmission or storage is completely secure; we work continuously to protect your data.
9. Children
Peaks is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
10. International transfers
If you use Peaks from outside the region where our servers are located, your data may be processed in the EU/EEA or other countries where our providers operate, with appropriate safeguards where required.
11. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Continued use of the app after an update means you accept the revised policy.
12. Contact
RachApps
Email: radek.chmielewski.78@gmail.com