DRAFT — requires legal review, not legal advice.
English master for the hosted page (https://getreelmap.app/privacy). Kept in sync with the bundled in-app copy in
src/constants/legal-content.ts(PRIVACY_VERSIONinsrc/lib/auth.ts, currently2026-08-22) — if this text materially changes, bump both. Other languages later; English governs.
ReelMap — Privacy Policy
Last updated: 22 August 2026
This policy explains what ReelMap collects, why, and your rights. The short version: your map is private to you, your precise location never leaves your device, and you can erase everything with one action in Settings.
1. Who we are
ReelMap is operated by an individual developer (the "data controller" under the GDPR). Contact: support@getreelmap.app.
2. What we collect
- Account data. An anonymous account identifier is created automatically the first time you use the app — no name or email is required. If you choose to sign in, we store the identity you link: your Apple or Google account identifier and/or your email address, and your name if your provider shares it.
- Your content. The Instagram/TikTok links you submit and the pins created from them: venue name, coordinates, category, the post's caption, the creator's handle, and the post thumbnail. This is stored per-account so your map can be backed up and synced.
- Consent records. The version and time of your acceptance of the Terms and this policy.
- Location. Your precise device location is used only in the foreground, on your device, to center the map and sort saved places by distance. It is never transmitted to or stored on our servers, and it is never sold or shared. The app requests "while using the app" permission only; the app works without it.
- Technical data. Our infrastructure providers keep standard server logs (IP address, timestamps) for security and abuse prevention.
We do not collect analytics, advertising identifiers, or contact lists, and we do not track you across apps or websites.
3. How we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Extracting a venue from a link you submit and pinning it | Submitted link, extracted venue data | Performance of a contract (Art. 6(1)(b)) |
| Storing, backing up, and syncing your map | Your content, account data | Performance of a contract |
| Optional sign-in and cross-device access | Linked identity (Apple/Google/email) | Performance of a contract; you choose to link |
| Showing the map near you and sorting by distance | Location — on-device only, never transmitted | Consent (Art. 6(1)(a)) via the OS location permission, revocable in system settings |
| Abuse prevention (rate limiting, CAPTCHA) | Technical data | Legitimate interest (Art. 6(1)(f)) in keeping the service available |
| Recording your acceptance of the terms | Consent records | Legal obligation / legitimate interest |
We do not sell your data, and we do not use it for advertising or profiling.
4. Who processes it (our processors)
We use these service providers to run ReelMap. They process data on our behalf, only to provide the feature named:
- Supabase — database, authentication, and hosting (stores your account and your map)
- Apify — fetches the public social-media post behind a link you submit
- Groq — AI analysis of the post's caption to identify the venue and category
- OpenStreetMap Nominatim — geocoding venue names to coordinates
- Google Maps / Apple Maps — map display in the app
- Cloudflare (Turnstile) — CAPTCHA verification to prevent automated abuse
Submitted post captions and venue names pass through these services to create your pin; your identity is not shared with them. Map tiles are requested by the app directly from the map provider, as with any maps app.
5. Retention and deletion
Your data is kept until you delete it. Settings → Delete account & map permanently erases your pins, your profile, your consent records, and your account from our servers — no email required, no waiting period on our side. Anonymized extraction results (venue name and location for a public post URL, with no link to any user) may be retained to avoid re-processing the same public post.
6. Your rights (GDPR and similar laws)
Depending on where you live, you have the right to:
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — delete your data (available directly in-app, see section 5)
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, e.g. revoke location access in system settings; this does not affect prior processing
- Object / restrict — object to or restrict processing based on legitimate interest
In-app deletion covers erasure; for anything else, email support@getreelmap.app and we will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
7. International transfers
Our processors may store data in the EU, US, or other regions under their standard safeguards (including EU standard contractual clauses where applicable).
8. Children
ReelMap is not directed at children under 13 (or the higher minimum age in your country), and we do not knowingly collect their data.
9. Changes
Material changes will be shown in the app and require renewed acceptance. The English version of this document governs.
10. Contact
Data controller: the ReelMap developer — support@getreelmap.app