This Privacy Policy explains how GuruMap (gurumap.org), based in Ireland ("we"), handles your personal data. It is written to comply with the EU General Data Protection Regulation (GDPR).
1. Data controller
Data controller: GuruMap, Ireland. Contact: gurumapapp@gmail.com.
2. What we collect
- Account data: email address, display name, encrypted password (via our auth provider).
- Trip data: destinations, saved trips, criteria you select, places you add.
- Reviews & uploads: star ratings, review text, photos or short videos you choose to upload.
- Billing data: processed by Stripe (we never see full card numbers). We keep the subscription status, plan, and Stripe customer ID.
- Technical data: device type, viewport, IP address, and basic diagnostic logs.
3. Why we use it (legal basis)
- To provide the service (contract): auth, saving trips, showing map results.
- To process payments and prevent fraud (contract & legitimate interest): via Stripe.
- To send transactional emails such as receipts and account notices (contract).
- To secure the service and debug issues (legitimate interest).
- To comply with legal obligations (e.g. tax records).
4. Sharing
We share data only with processors we need to run the service: Stripe (payments), Google Maps/Places/Routes (map & POI lookups you trigger), our hosting and auth provider, and email delivery. We do not sell your personal data.
5. International transfers
Some processors are outside the EEA (e.g. Stripe, Google). Transfers rely on the EU Standard Contractual Clauses or equivalent safeguards.
6. Retention
- Account & trip data: while your account is active, and up to 30 days after deletion.
- Reviews: kept for the lifetime of the service unless you delete them.
- Billing records: 7 years for legal/tax reasons.
7. Your rights (GDPR)
You have the right to access, rectify, erase, restrict or port your data, and to object to processing. To exercise any of these, email gurumapapp@gmail.com. You may also complain to the Irish Data Protection Commission (dataprotection.ie).
8. Cookies
We use only strictly necessary cookies (auth session, security). We do not use advertising trackers.
9. Children
GuruMap is not intended for children under 16.
10. Changes
We may update this policy. Material changes will be announced by email or in-app notice.