Privacy Policy

Iceland GuideMap

Effective date: September 28, 2026

Contact: ingolfur.chen@gmail.com

Introduction

This Privacy Policy explains how Iceland GuideMap ("the App", "we") collects, uses, stores and protects your personal information. The App is developed and operated by Ingolfur Chen, an individual developer based in Iceland ("the operator").

We are committed to handling your information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Please read this policy carefully before using the App. By downloading, installing or using the App, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please stop using the App and uninstall it.

Section 1 — Information We Collect

1.1 Information you provide

Type	When	Purpose	Retention
Apple Sign In credential	When you tap "Sign in with Apple"	Authenticate your account, sync membership status, restore purchases	Duration of your account
Favorites (liked places)	When you tap the ♡ button on a place	Build your personal favorites list; produce anonymous popularity statistics	Duration of your account
Purchase records	When you buy a membership via the App Store	Verify your entitlement, process Apple's refund outcomes	Duration of your account; thereafter in anonymized form (see 4.4)

1.2 Information collected automatically

Type	How	Purpose	Where
Approximate location (optional)	Only when you tap the "locate me" button and grant permission	Show your position on the map; pick your regional aurora forecast	On your device only — never uploaded
Device model and OS version	Read automatically	Compatibility troubleshooting	Server (anonymized)
Anonymous device identifier	A random ID generated locally (not linked to your Apple ID), reported once per day	Basic daily-active counting and push delivery	Server (anonymized)
Anonymous usage events	Counters such as push_open / member_view / paywall_show	Product analytics; contain no personal identity	Server (aggregated)
Push notification token (APNs token)	Generated by iOS after you grant notification permission	Sending aurora alerts and renewal reminders you opted into	Server

1.3 Information we explicitly do NOT collect

For clarity, we do not collect:

Your photo library, videos or audio files
Your contacts, call history or messages
Your precise location track — location is read only at your explicit request and stays on your device
Your device's advertising identifier (IDFA)
Your browsing or search history (in-app search runs entirely on your device)
Biometric data (fingerprints, face data)
Health data or financial account credentials
Your name or email address beyond what Apple Sign In itself provides (and if you choose "Hide My Email", we only see Apple's relay address)

Section 2 — Third-Party Services and Data Sharing

2.1 Third-party services we rely on

The App depends on the following providers for core functionality. They have their own privacy policies which we encourage you to read:

Provider	Role	Data flow	Policy
Apple Inc.	Sign in with Apple, StoreKit	Your login credential and purchase records are processed by Apple	https://www.apple.com/legal/privacy/
Alibaba Cloud	Serverless functions, database, photo storage	Account data and favorites are stored in Alibaba Cloud's Shanghai region	https://www.alibabacloud.com/help/en/legal
OpenStreetMap contributors	Supermarket and map data	Public map data only; no personal information involved	https://www.openstreetmap.org/copyright
OpenChargeMap.org	EV charger data	Public charging-station data only	https://openchargemap.org/
Gasvaktin	Fuel price aggregation	Public price data only	https://gasvaktin.is/
Open-Meteo / Veðurstofa Íslands	Weather and aurora forecast data	Public forecast data only	https://open-meteo.com/ · https://vedur.is/

2.2 Our sharing principles

No sale: we never sell your personal information to anyone
No advertising sharing: we never share personal information with advertisers or data brokers
Minimal disclosure: we disclose information only when required by law or to protect our legitimate rights
Anonymization: anything we analyse internally is aggregated and cannot identify you

CCPA/CPRA notice: we do not "sell" or "share" personal information as defined by California law, and we do not use or disclose sensitive personal information.

Section 3 — How We Use Data

3.1 Sign-in credential

Used only to authenticate you, sync your membership status, and restore purchases on a new device. We never use it for any other purpose, disclose it to third parties, or track your behaviour across other apps.

3.2 Favorites

Used only to render your personal favorites list and to produce anonymous aggregate statistics (e.g. "most favorited places"). We never expose your personal list to other users or use it for advertising.

3.3 Location

Used only on-device, at your explicit request, to show your position and distances to nearby places, and to select your regional aurora forecast. It is never uploaded to or stored on our servers.

3.4 Purchase records

Used only to verify your entitlement and to process Apple's refund/revocation outcomes. We never use them for credit scoring, disclosure to financial institutions, or price discrimination.

Section 4 — Your Rights

4.1 Right to be informed

This policy is our primary way of informing you. Questions are welcome via the contact email at the end.

4.2 Right of access

You can view your favorites and membership status directly in the App (Me → Favorites; Me → membership card).

4.3 Right to rectification

If any personal information we hold is inaccurate, contact us and we will correct it within 7 working days.

4.4 Right to erasure ("right to be forgotten")

You can delete your account yourself, instantly, inside the App:

1. Open the App → Me tab

2. Tap "Delete Account" at the bottom

3. Confirm — your account and all associated server-side data (sign-in record, favorites, membership status, push tokens) are permanently deleted

Retention note: to satisfy financial audit obligations, purchase transaction records are retained in anonymized form only (an Apple transaction ID that cannot be linked back to you).

Deleting your account ends your membership immediately and cannot be undone.

4.5 Right to data portability

4.6 Right to withdraw consent

Uninstalling the App stops all future collection. Deleting your account (4.4) stops all processing of your data. Withdrawal does not affect the lawfulness of processing before withdrawal.

4.7 Right to complain

If you believe our processing infringes your rights, you may lodge a complaint with your local data protection authority (in the EEA/UK: your national DPA; in California: the California Privacy Protection Agency).

Section 5 — Data Security and Retention

5.1 Technical measures

All data in transit is encrypted with HTTPS/TLS
Server storage uses access-controlled, encrypted-at-rest cloud database services
Production data access follows least-privilege principles

5.2 Breach response

If a data breach occurs that is likely to affect you, we will notify affected users and the competent authority within 72 hours of becoming aware, as required by GDPR.

5.3 Retention schedule

Data	Retention	Disposal
Account data (sign-in record, favorites)	Duration of your account	Erased immediately upon in-app account deletion
Purchase records	Duration of your account, then anonymized	Anonymized form (Apple transaction ID only) retained for audit; thereafter deleted
Anonymous counters	Aggregated only	No personal data to dispose of
Push tokens	Until you revoke notification permission or delete your account	Deleted with account

Section 6 — Children's Privacy

The App is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has used the App, contact us and we will delete the relevant data promptly.

Section 7 — Changes to This Policy

We may revise this policy when the law changes, when App functionality changes, or when our service providers change.

Material changes (new data types, new purposes): we will announce them in the App and ask for your acknowledgement on next launch
Editorial changes: we will post a notice in the App without a separate prompt

The revised policy takes effect upon publication. Continued use of the App constitutes acceptance.

Section 8 — Data Sources and Accuracy

Some data in the App comes from third-party public sources:

Data	Source	Update cadence	Accuracy note
Road conditions	Icelandic Road and Coastal Administration (Vegagerðin)	Several times daily	Synchronized with the official feed, but delays are possible
Fuel prices	Publicly posted station prices via Gasvaktin	Daily	For reference; the price at the pump prevails
Exchange rates	Public financial market data	Daily	For reference; your bank's rate prevails
Supermarkets	OpenStreetMap, cross-checked against brand websites	Occasionally	Opening hours and addresses as posted in-store prevail
F-roads	Public map data (OpenStreetMap)	Static, occasionally updated	Actual conditions on site prevail
EV chargers	OpenChargeMap.org (CC BY 4.0)	Quarterly	Charger status, availability and pricing as shown on site prevail
Place descriptions	Original editorial content by the operator	Occasionally	Personal opinion, not professional travel advice

Section 9 — Contact Us

For any question about this policy, or to exercise your data rights (access, rectification, erasure, export):

📧 ingolfur.chen@gmail.com

We commit to responding within 7 working days. If you are not satisfied with our response, you may complain to your supervisory authority per Section 4.7.

Section 10 — Governing Law

This policy is governed by the laws of Iceland, excluding conflict-of-law rules. If you are a consumer in the EEA/UK, mandatory consumer protections of your country of residence remain unaffected.

Disputes shall first be resolved through friendly consultation; failing that, either party may bring the matter before the competent courts of Iceland.

Effective date: September 28, 2026

Version: v1.0