MapFlex Privacy Policy

Last Updated: November 4, 2025

Effective Date: November 4, 2025

Introduction

Welcome to MapFlex! We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the MapFlex mobile application and website.

MapFlex is a personal travel tracking application. All your data is private to you by default. We do not share your personal information with other users or third parties.

1. Information We Collect

1.1 Information You Provide

Account Information:

  • Email address (for account creation and login)
  • Username (public display name)
  • Password (encrypted and never stored in plain text)
  • Profile photo (optional)

Check-In Data:

  • GPS location coordinates (latitude/longitude) when you create a check-in
  • Province/state name and country
  • Date and time of check-in
  • Journal entries (text you write about your experiences)
  • Photos you upload
  • Mood and weather information (optional)

Payment Information:

  • If you subscribe to MapFlex Premium, payment is processed by Apple App Store or Google Play Store
  • We do NOT store your credit card information
  • We only receive a transaction confirmation from Apple/Google

1.2 Information We Collect Automatically

Usage Data:

  • App opens and feature usage
  • Check-ins created
  • Achievements unlocked
  • App crashes and errors (for debugging)

Device Information:

  • Device type (iPhone 15, Samsung Galaxy S23, etc.)
  • Operating system version (iOS 17, Android 14, etc.)
  • App version
  • Device language and region

Location Data:

  • Precise GPS location ONLY when you create a check-in
  • We do NOT track your location continuously in the background
  • Location permission is required only for the check-in feature

2. How We Use Your Information

We use your information ONLY for the following purposes:

2.1 Core App Functionality

  • Personal Travel Tracking: Store your check-ins, photos, and journal entries
  • Progress Visualization: Show you maps of provinces you've visited
  • Achievement System: Award points and unlock achievements based on your travels
  • Statistics: Calculate your personal stats (provinces visited, countries, points)

2.2 Account Management

  • Create and manage your account
  • Authenticate you when you log in
  • Send you important account notifications
  • Process your Premium subscription (if applicable)

2.3 External Sharing (User-Initiated Only)

  • Generate beautiful share cards when YOU choose to share
  • You control what gets shared and where (Instagram, TikTok, Facebook, etc.)
  • Sharing is ALWAYS optional and initiated by you

We do NOT:

  • ❌ Share your data with other users (no social feed)
  • ❌ Sell your data to third parties
  • ❌ Use your data for advertising
  • ❌ Track you across other apps or websites
  • ❌ Share your location with anyone

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored securely on servers provided by Supabase (a trusted cloud database provider):

  • All data encrypted in transit (HTTPS/TLS)
  • All data encrypted at rest (AES-256)

3.2 How We Protect Your Data

  • Encrypted Storage: All sensitive data is encrypted
  • Secure Authentication: Passwords hashed with bcrypt
  • Access Controls: Only authorized personnel can access systems
  • Regular Backups: Daily backups to prevent data loss
  • Security Monitoring: 24/7 monitoring for suspicious activity

3.3 Data Retention

  • Active Accounts: Your data is stored as long as your account is active
  • Deleted Accounts: When you delete your account, all data is permanently deleted after a 30-day grace period

4. Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

4.1 Right to Access

View all data we have about you. Available in Profile → Settings → "Download My Data"

4.2 Right to Deletion

Delete your account and all associated data. Available in Profile → Settings → "Delete Account"

30-day grace period before permanent deletion

4.3 Right to Correction

Edit your profile information anytime. Update or delete individual check-ins.

4.4 Right to Data Portability

Export your data in JSON format

To exercise any of these rights:

  • Use the in-app tools (Download My Data, Delete Account)
  • Or email us at: support@mapflex.online
  • We will respond within 30 days

5. Sharing Your Information

5.1 We Do NOT Share Your Data With:

  • ❌ Other MapFlex users (no social feed)
  • ❌ Advertisers
  • ❌ Data brokers
  • ❌ Marketing companies
  • ❌ Anyone else

5.2 We Only Share Data When:

Service Providers (Under Strict Contracts):

  • Supabase: Cloud database and storage (data hosting)
  • Stripe/Apple/Google: Payment processing (Premium subscriptions)
  • SendGrid: Email delivery (support emails, account notifications)
  • Sentry: Error tracking (crash reports, debugging)

Legal Requirements:

We may disclose your information if required by law:

  • Court orders or subpoenas
  • Law enforcement requests (with valid legal basis)
  • To protect our rights or safety
  • To prevent fraud or illegal activity

6. Children's Privacy

MapFlex requires users to be 13 years or older.

  • We do NOT knowingly collect data from children under 13
  • If we discover a user is under 13, we will immediately delete their account
  • Parents: If you believe your child has created an account, please contact us at support@mapflex.online

7. External Sharing (Your Choice)

When you choose to share your achievements externally:

What Gets Shared:

  • Share card image (generated by MapFlex)
  • Province/country name
  • Your public stats (if you include them)
  • Referral link (optional, to invite friends)

What Does NOT Get Shared:

  • Your precise GPS coordinates
  • Your full journal entries
  • Private photos (unless you choose to include them)
  • Your account information

Important:

Once you share to external platforms (Instagram, TikTok, etc.), those platforms' privacy policies apply. MapFlex is not responsible for how those platforms handle your shared content.

8. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

  • Right to Know: What personal information we collect and how we use it
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out of Sale: We do NOT sell your personal information (never have, never will)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise CCPA rights: support@mapflex.online

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

  • We'll update the "Last Updated" date at the top
  • We'll notify you via email or in-app notification
  • Major changes will require your consent
  • Continued use after changes means you accept the new policy

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: support@mapflex.online

Website: https://mapflex.online

Support Page: https://mapflex.online/support

Response Time: We aim to respond within 48 hours for general inquiries, within 30 days for formal privacy requests.

Summary (TL;DR)

✅ What we do:

  • Store your check-ins, photos, and journals privately
  • Let YOU control what you share externally
  • Protect your data with encryption
  • Give you full control (export, delete anytime)
  • Comply with GDPR, CCPA, and privacy laws

❌ What we DON'T do:

  • Share your data with other users (no social feed)
  • Sell your data to anyone
  • Track you across apps or websites
  • Use your data for advertising
  • Collect data without your permission

Your data is YOURS. We're just keeping it safe for you.

Last Updated: November 4, 2025

MapFlex - Your Journey, Your Data, Your Privacy 🗺️🔒