Privacy policy

Version: v2.1 · Date: 21 October 2026

This policy explains what personal data the TarsisVan app processes, what for, who we share it with, how long we keep it and how to exercise your rights. We have written it to be understood: if anything is unclear, write to us.

1. Who is responsible

TarsisVan, self-employed. Privacy contact: [email protected]. We have no data protection officer because, given our size and what we process, the law does not require one.

2. What data we process and what for

Much of what you save in the app stays only on your phone, encrypted. What is uploaded to our server is the copy that lets you recover your data when you change phones, and what online features need to work.

Data	What for	Legal basis	Where
Your anonymous account identifier	Make the app work without signing up and apply usage limits	Performance of the contract	Our server
Email (only if you give it)	Secure your account with a code, send you your vehicle PDF and manage the account	Performance of the contract	Our server
If you link Google or Apple: your email and an identifier of that account	Let you sign in with it	Performance of the contract	Our server
Acceptance of the terms (version and date)	Prove that you accepted them	Legitimate interest (being able to prove it)	Our server
Consent to marketing emails (version and date)	Send you news and offers from the accessories shop	Consent, which you can withdraw	Our server and Brevo
Email from the website’s “let me know when it launches” list (and the confirmation date)	Tell you once when the app launches and, if you ask later, send you news	Consent (double confirmation by email), which you can withdraw	Brevo. We keep it until you unsubscribe; if you never confirm, it is not kept
Telemetry consent (version and date, also if you refuse)	Record your decision	Compliance with a legal obligation	Our server
Vehicle (dimensions, mass, type), maintenance, checklists, travel journal and expenses, resources, favourites and lists	The app’s features	Performance of the contract	Your phone (encrypted) and a copy on our server
Personal documents and accident reports, with their photos	Keep them for you	Performance of the contract	Only on your phone, encrypted; never uploaded
Driver and insurance data (name, ID, licence, insurer, policy) and number plate	Fill in the accident report	Performance of the contract	Only on your phone, encrypted; never uploaded
How many adults and minors travel	Estimate water, gas and battery use	Performance of the contract	Only the number. Never names or data of minors, which stay on your phone
Location, with your permission	Show you what is nearby, clearance and low emission zone alerts, the weather, and give the copilot context	Performance of the contract; the system asks your permission	Used on the phone. Only specific coordinates go to the server when you look something up nearby or ask the copilot
Questions to the copilot and the context it needs	Answer you	Performance of the contract	Our server and an AI provider (§4). History is only kept on Pro and Max. If you mark an answer as useful or report it, we keep that question and answer on any plan to review it
Voice, if you dictate	Turn what you say into text	Performance of the contract; the system asks your permission	Your system’s speech recognition (Google or Apple). We do not keep the audio
Purchases	Manage your subscription	Performance of the contract	RevenueCat and the store. We never see your card
Telemetry, if you accept it: crashes, performance and screen use	Fix errors and improve the app	Consent, which you can withdraw	Firebase (Google)
Days you use the app, if you accept telemetry	Know how many people use it	Consent, which you can withdraw	Our server
Notifications, if you turn them on	The alerts you asked for	Consent	Firebase Cloud Messaging
Photos you upload to the journal	Keep them for you	Performance of the contract	Our server. The app removes their location first
Content you publish: alias, reviews, photos of places, notices and suggestions	Show it to the community and moderate it	Performance of the contract (terms of use)	Our server. Approved content is visible to everyone only with your alias
Content reports and “wrong photo” notices	Moderation	Legitimate interest	Our server; nobody else sees them
Routes you plan: start, destination and stops	Calculate the route and stages	Performance of the contract	Our server and Geoapify (§4). The saved plan stays only on your phone
Encrypted fingerprint of your connection (IP) when using the copilot	Stop a few accounts from the same place using up the copilot for everyone	Legitimate interest (security and availability)	Our server keeps only a fingerprint encrypted with a secret key, never the IP
Affiliate links shown (if active): country, place you are viewing, type of question and number of travellers	Show you at most 3 useful links	Legitimate interest	Our server, without your account, coordinates or the text of the question

What goes to the copilot. To answer you, the app sends your question and only the context needed: vehicle dimensions, your travel profile if you wrote one, your rounded location and nearby places. If you ask about your trips, expenses or favourites, it also sends their titles, amounts and names. It never sends your email or your identity.

We do not sell your data or use it to take automated decisions with legal effects on you. Automatic review moderation (provisionally hiding a review if three people report it) is always checked by a person.

3. Telemetry

It is optional and off by default. If you accept it, Firebase (Google) receives an installation identifier, the device model and version, the language, crash reports, loading times and which screens you use. It does not include your name or email. You can withdraw it in Settings → Privacy; from then on it stops being collected.

We work with these providers, which process data on our behalf under contract (Art. 28 GDPR):

Supabase: database, accounts, storage and server functions. Data is hosted in Ireland (EU).
OpenRouter (US) and Groq (US): they take your question to the AI model that answers it. We use models from US and Canadian companies, served only by companies headquartered in the EU or the US, with zero retention (they do not keep the question or use it for training). We use no models or servers in China.
Geoapify (Cyprus, servers in Germany and Finland): calculates routes and looks up street addresses. It only receives coordinates or the address text, never your identity.
Google / Firebase: notifications, remote configuration and, only if you accept it, telemetry.
RevenueCat (US): manages subscriptions together with Google Play or Apple.
Brevo (France): marketing emails, only if you accept them.
Cloudflare: hosts the website, maps and images. On the website we use its Web Analytics, which counts visits in aggregate and uses no cookies and does not identify you: it does not store your IP address or build a profile of you.

The app also queries open data services that receive your IP address like any website you visit: Wikimedia and Wikipedia (photos and texts), the geographic institutes of Spain, France and Portugal (aerial imagery), NASA FIRMS (wildfires) and Mangrove Reviews (open reviews: it receives the coordinates of the place you are viewing, not yours). Before downloading third-party photos and reviews, the app asks your permission. Our server requests the weather forecast from the Norwegian Meteorological Institute (MET Norway) with coordinates rounded to ~1 km and without your IP. Reviews are translated on your phone (Google ML Kit) and the text never leaves it.

Affiliate links: if you tap one, you go to the advertiser’s website through Awin with a random identifier and no data about you. From then on, their policy and cookies apply.

Transfers outside the European Economic Area. When a provider processes data in the US, the transfer relies on the EU‑US Data Privacy Framework if the provider has joined it and, otherwise, on the European Commission’s standard contractual clauses included in its contract. You can ask us for a copy of these safeguards.

5. How long we keep data

While you have an account, your app data.
When you delete your account we delete everything linked to it: profile, vehicle, checklists, maintenance, journal and its photos, resources, conversations, published reviews and photos, favourites and the session. Star ratings and area occupancy reports are anonymised: they are no longer linked to you and are kept so the scores other users see do not change.
Copilot conversations (Pro and Max) and answers you mark as useful or report (any plan): 12 months.
Area occupancy reports: 24 months.
Encrypted connection fingerprint for the copilot: 2 days.
Taps on a partner’s website or phone: your identifier, 2 days (to count only once per person and day).
Anonymous accounts with no data and unused for 120 days: deleted automatically.
Days of use (with telemetry): 120 days.
Calculated routes: the server keeps the route, without identifying you, for 7 days.
Content reports and notices of wrong photos or data: 2 years after they are resolved.
Records of deletion requests: 3 years, so we can prove we complied.
Subscription purchase events: 6 years, under the duty to keep business records (Art. 30 of the Spanish Commercial Code).
Server technical logs: at most 28 days.
Telemetry in Firebase: usage events, 2 months; crash and performance reports, 90 days.
Database backups: expire automatically within 30 days at most, and we never restore the data of a deleted account.

6. Your rights

You can ask for access to your data, rectification, erasure, restriction of processing and portability, object to processing based on legitimate interest, and withdraw any consent you gave us at any time, without affecting what was done before. You can delete your account from Settings or at tarsisvan.com/en/delete-account. For anything else, write to [email protected]; we will answer within one month at the latest. If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority of your country.

7. Minors

The app is for people aged 18 or over. The data of minors travelling with you never leaves your phone: only how many there are reaches the server.

8. Security

We encrypt what you save on the phone (AES-256), all communications are encrypted, the database only lets each user see their own data and service keys are kept only on the server. No system is infallible: if you spot a problem, let us know.

9. Changes

If we change this policy in a relevant way, we will tell you in the app and, where needed, ask for your consent again.