Privacy Policy

Last updated: 10 July 2026

The English version of this policy is the authoritative one; translations are provided for convenience.

RDBK.app ("RDBK", "we") is a free suite for creating and navigating digital roadbooks, available as a website, an installable web app (PWA) and native apps for Android and iOS. This policy explains what data RDBK handles and why. The short version: your location is used on your device to navigate and record routes; an account and cloud storage are entirely optional; we show no ads, run no third-party tracking and never sell your data.

Location

• When you use the Reader, Tripmaster or Recorder, RDBK reads your GPS location to show your position, compute the odometer/heading and follow the roadbook.
• If you record a route, your track is logged as a GPX file on your device. In the native app, recording can continue with the screen locked via a foreground service (shown as an ongoing notification) so the track has no gaps.
• Your live location is not sent to our servers. A recorded route only leaves your device if you choose to save it to your account.

Account (optional)

• The core tools work without an account. If you create one, we store your first/last name, username and email, and a securely hashed password.
• An account lets you save roadbooks to your profile, attach photos and publish public roadbooks.
• You may optionally sign in with Google or with Apple. The provider returns your name, email address and an account identifier, which we use only to create or sign you into your RDBK.app account — we never receive your password for it. With Sign in with Apple you can choose Hide My Email, and then we only ever see Apple's private relay address, never your real one. Email/password sign-in remains available.
• If you delete your account, your profile data (name, email, password, avatar) is removed immediately. Your roadbooks — with their photos and voice notes — are renamed with your former username, moved to a generic “deleted user” profile and kept in its trash for 30 days (ask us within that window if you deleted by mistake); after that they are permanently deleted.

Roadbooks & photos (only if you save them)

• When you save a roadbook to your profile, its data and any geotagged photos you add are stored on our server so you can access them across devices.
• Each roadbook is private by default; it becomes visible to others only if you publish it as a public roadbook.
• When you export a .rdbk file, photos and voice notes are included only if you tick the “include photos & audio” option; otherwise the file holds just the roadbook. A file exported with media carries it on your device — you choose what travels in it.

Camera & photos

The camera is used only when you choose to add a photo to a roadbook. Photos you attach are uploaded to your account; photos are never collected automatically.

What we do NOT do

• No advertising and no third-party advertising/analytics SDKs.
• No selling or renting of personal data.
• No background collection of your location outside an active recording you started.

Cookies & local storage

• RDBK uses a single essential cookie — an httponly session cookie that keeps you signed in after login. It carries no profiling data and is only set once you sign in.
• The app stores preferences and offline data in your browser's local storage on your device (language, map style, and crash-safe copies of in-progress recordings, runs and roadbook drafts so nothing is lost). This never leaves your device.
• No third-party cookies, no advertising or analytics cookies, no cross-site tracking. Because we use only essential and functional storage, no consent banner is legally required; we show a one-time notice for transparency.

Storage & security

Data you save is stored on our server in the EU. Passwords and access tokens are stored hashed. Connections use HTTPS.

Data retention

• Roadbooks you delete are kept in a trash folder for 30 days, then permanently purged. You can recover them yourself within that window; after the purge the data is gone for good.
• Activity-log entries (sign-in, password changes and similar security events) are kept for 90 days and then deleted automatically. IP addresses in the log are anonymised from the start.
• Bearer tokens used by the native apps to stay signed in are pruned after 180 days of inactivity.
• Recording drafts created by the Recorder are deleted automatically after 2 days if they are never edited and saved.

Activity & security logging

For security and abuse prevention we keep a short activity log of key account events — sign-in (including failed attempts), sign-out, registration, email verification, password changes and administrator actions. Each entry stores the event, the time, and your IP address anonymised (the last part removed) so it can't single you out. Entries are deleted automatically after 90 days, and all of your entries are erased when you delete your account.

Your choices & rights

• Use RDBK fully without an account (no personal data leaves your device).
• Edit or delete your roadbooks and photos at any time from your account.
• Request deletion of your account and associated data by emailing us.
• Download a full copy of your data (a ZIP containing every roadbook with its photos and voice notes, and your profile information) before deleting your account.
• Export any individual roadbook as a self-contained .rdbk file at any time.

Children

RDBK is not directed to children under 13 and we do not knowingly collect their data.

Disclaimer

RDBK.app is provided "as is", without warranty of any kind. It is a navigation and roadbook aid, not a certified safety or navigation instrument: GPS positions, maps and distances can be inaccurate or unavailable, and the app may be interrupted by device, signal or battery conditions. Do not rely on it as your sole means of navigation or safety. Always keep adequate maps, equipment and judgement, follow local laws, drive/ride within your limits and respect private land and the environment. You are solely responsible for how you use the app; to the maximum extent permitted by law, the authors accept no liability for any loss, injury or damage arising from its use.

Changes

We may update this policy; the "Last updated" date above reflects the latest version.

Contact

Questions or data requests: rdbk.admin@gmail.com.