Privacy policy

Data controller

Routka is published by Clement Levasseur, reachable at clementlevasseur@gmail.com. The data controller alone determines the purposes and means of processing your data.

Data collected

Routka only collects data strictly necessary for the operation of the service:

• Email address: used to create and authenticate your account, and for service-related communications (password reset, account deletion).
• Username: public name displayed on your profile, your courses and the leaderboard.
• City: optional self-declared information, displayed on your public profile if you choose to provide it.
• GPS location: collected only during an active run or when creating a course, in order to validate checkpoints and compute the track. Location is never collected in the background.
• Photos: if you choose photo validation mode, the images you take at checkpoints are stored as proof of passage. You can delete them at any time from the application.
• Technical data: anonymized error logs (Sentry) and anonymous audience measurement (Vercel Analytics, Vercel Speed Insights). No tracking cookies are used.

Purposes of processing

Your data is used exclusively to: operate the application (authentication, course creation and execution), display your public profile and the leaderboard, ensure security and proper operation of the service, and respond to your support requests.

Legal basis

Processing is based on contract performance (you must have an account to use the application) and, for location and photos, on your explicit consent given when using the relevant features.

Data retention

Your data is retained for as long as your account is active. It is fully and permanently deleted within 30 days after your account is deleted. Anonymized error logs are retained for a maximum of 90 days.

Data sharing

Routka never sells or rents your personal data. Data is hosted by Supabase Inc. (backend) and Vercel Inc. (website) as technical sub-processors. No data is shared for advertising purposes.

Security

Data is stored encrypted and access is protected by standard authentication mechanisms (Row Level Security at the database layer). Communications between the application and the backend are encrypted via HTTPS/TLS.

Your rights

Under the GDPR, you have the right to access, rectify, erase, port, restrict and object to the processing of your personal data. You can exercise these rights from the application or by contacting us at clementlevasseur@gmail.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

Account deletion

You can delete your account at any time from the application (Profile > Settings > Delete my account). Deletion permanently erases all your personal data, courses, photos and run history.

Minors

Routka is not intended for children under 13. If you are a minor, you must obtain the consent of your parents or legal guardians before using the service.

Policy updates

This policy may be updated to reflect changes to the service or regulatory requirements. Any significant change will be notified to you in the application before it takes effect.

Contact

For any question regarding your personal data: clementlevasseur@gmail.com