Route Foundry — GDPR and your data rights
The short answer
We hold no personal data about you from this app — none. Route Foundry has no account system and no server of ours. Your routes, tracks and preferences are written to the app's own container on your iPhone and stay there. There is no database in which a record about you could exist, so there is nothing for us to disclose, correct, export or erase.
The rights below are still set out in full, because "we don't collect anything" is a claim, and a claim deserves the detail that lets you check it.
Who the controller is
Divith Technologies, Kumta, Karnataka, India, publishes Route Foundry and is the controller for any processing described here. Data-protection contact: contactnaikprajwal@gmail.com.
For the app's own data, that role is close to empty by design: we are the controller of a system that receives nothing from you.
What is processed, and where
| What | Where it lives | Reaches us? |
|---|---|---|
| Routes, waypoints, cues, notes | Files in the app's container on your device | No |
| Recorded tracks | Written point by point to the app's container | No |
| Preferences and last map position | UserDefaults on your device | No |
| Imported map and routing packs | Files you supplied, in the app's container | No |
| Precise location | Used in memory while navigating or recording; stored only if you save a recorded track | No |
| Diagnostics report | Generated on request, shown to you, shared only if you choose to | Only if you send it |
The app's online features
Four things in the app are online by nature. Each one is a request made by your device, answered back to your device, and invisible to us:
- The Apple Maps basemap — the default map, until you install an offline map pack.
- Smart Routing — sends the two points being joined to Apple's directions service.
- Place search — sends the text you typed to Apple. A literal coordinate pair is resolved on the device and sends nothing.
- Elevation lookup — sends points sampled along a route you drew to Open-Meteo, which answers with the height of the ground there. The answer is stored with the route, so it is fetched once and then works offline.
None of these carries an account, a device identifier, or anything that ties one request to another. Apple's handling is governed by Apple's privacy terms and Open-Meteo's by its own terms; in each case that provider acts on its own account rather than as our processor, because the data never passes through anything of ours.
All four can be switched off, and the app stays useful with all four off: install an offline map pack, draw segments by hand, type coordinates instead of searching, and turn off Look up elevation in Settings. That is the point of a local-first app — the network is a convenience, not a dependency.
Lawful bases
| Processing | Basis | Why |
|---|---|---|
| Everything the app does on your device | No basis needed from us | We are not processing it. It happens on your own device, under your control, and never reaches us. |
| An online feature you use (routing, search, elevation, basemap) | Performance of the contract — Art. 6(1)(b), as between you and the provider you invoked | You asked for the thing that requires the request. Turning the feature off prevents it entirely. |
| Support email you send us | Legitimate interests — Art. 6(1)(f) | To answer you, and to fix the defect you reported. See the company statement for retention. |
International transfers
Nothing from the app is transferred to us, so no transfer question arises between you and us. The online features above are served by Apple and Open-Meteo, which may serve them from outside the EEA and the UK. Those requests carry coordinates or typed text and no identifier, they are made by your device rather than by any system of ours, and each is switchable off.
Retention
Your routes and tracks are kept for as long as you keep them, on your device, and are deleted when you delete them or delete the app. We retain nothing, because we receive nothing. Support correspondence is retained as described in the company statement.
Your rights, one by one
Under the UK and EU GDPR you have the rights below. For this app, most are satisfied by the app itself, immediately, without asking anyone:
- Access (Art. 15) — everything the app holds is on your device and visible in it. Export gives you the full contents of any route in an open format.
- Portability (Art. 20) — export to GPX, TCX, KML, FIT, or the lossless
.routefoundryproject format. No proprietary lock-in, and no request to us. - Rectification (Art. 16) — edit anything, at any time, in the app.
- Erasure (Art. 17) — delete a route in the app, or delete the app to remove all of its data from your device.
- Restriction (Art. 18) and objection (Art. 21) — switch off the feature in question; there is no background processing to restrict.
- Withdrawing consent — location permission can be revoked in iOS Settings at any time, and the app tells you what stops working when you do (recording and navigation) and what does not (everything else).
- No automated decision-making — the app makes no decision with a legal or similarly significant effect about anyone. Article 22 does not arise.
If you would still like a written answer from us, email contactnaikprajwal@gmail.com and we will reply within 30 days, as Article 12(3) requires — most likely to confirm that we hold nothing.
Account deletion
There is no account, so there is nothing to delete. Route Foundry does not create an account, does not ask you to sign in, and holds no server-side copy of anything. Deleting the app removes its data from your device; anything you exported is a file you already own and control. There is no deletion request to submit and no queue to wait in.
Children
The app is not directed at children and collects nothing from anyone, including children. It has no social features, no messaging, no user accounts and no advertising.
How to complain
Please write to us first — contactnaikprajwal@gmail.com — so we have the chance to put something right. You also have the right to complain to a supervisory authority: in the EEA, the authority for the country where you live or work; in the UK, the Information Commissioner's Office. Using that right does not require going through us first.
India's DPDP Act
We are established in India, so the Digital Personal Data Protection Act 2023 applies to us as well. Its analysis of this app is the same: we are not a Data Fiduciary in respect of app data, because we hold none of it. The same contact address serves for any request under that Act, and the company statement covers it in full.