Legal

Privacy Policy

Protecting your personal data is important to us. We process personal data exclusively within the scope of applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Telemedia Data Protection Act (TTDSG).

This statement gives you an overview of what data we collect, why we process it, and what rights you have.

Controller

The controller responsible for data processing is:

Matthias Richter
Dresdener Str. 77
03050 Cottbus
Email: privacy@kayoro.de

App use & location data

Our app is designed for use with location data (GPS). Your device's location data is processed to provide features such as route display, navigation, and route recording.

Processing is carried out exclusively to provide app functionality. Location data is not stored in a permanently identifiable manner unless required for the respective feature.

Registration & use

When you create an account, the following data may be processed:

Name
Email address
Other profile data where applicable (e.g. profile picture)

This data is used exclusively to provide our services.

In addition, technical data such as IP address and timestamps may be stored during registration to prevent misuse.

Analytics & product improvement (PostHog)

We use PostHog to analyse use of our app and website in order to improve features and detect errors.

The following data may be processed, among other things:

Usage events (e.g. buttons clicked, screens visited)
Device type & technical information
Anonymised or pseudonymised IP address
Session data

Data is processed in pseudonymised form where possible and is not used to directly identify individual persons.

PostHog is initialised opted out by default. Analytics cookies, event capture, and session recording only start after you give explicit consent via our cookie notice. Until then, no PostHog tracking data is stored or sent. The legal basis is Art. 6(1)(a) GDPR. You may withdraw consent at any time by choosing “Cookie settings” in the footer and declining again.

On our partner and route redirect pages (e.g. “/partner/…” or “/route/…”) we additionally record, anonymously and without cookies, whether the redirect opened the app or led to the App Store or Play Store. No cookies are set, no persistent device identifier is stored, and no personal profile is built; this transmission is independent of your cookie consent, since no personal data within the meaning of the TTDSG is stored on or read from your device. The legal basis is our legitimate interest in measuring the reach of this feature (Art. 6(1)(f) GDPR).

When such a redirect leads to the App Store, we additionally store, for at most one hour, a salted hash of your IP address together with the originally requested target (e.g. a route or partner). This lets us automatically open the right target once the app is installed. The entry is deleted after at most one hour, or immediately after first use; the original IP address cannot be recovered from the hash. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working redirect after app installation).

Website analytics (Google Analytics)

On this website we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to statistically evaluate website usage and improve our offering.

The following data may be processed, among other things:

pages visited and time on site
device type, browser, and operating system
approximate origin (country/region)
session data

Google Analytics is only loaded after you give explicit consent via our cookie notice. The legal basis is Art. 6(1)(a) GDPR.

You may withdraw consent at any time by choosing “Cookie settings” in the footer and declining again, or by clearing your browser’s site data. Alternatively, you can install the Google Analytics opt-out browser add-on.

Further information is available in Google’s privacy policy.

Sharing of data

We do not sell personal data.

Data is only shared:

when necessary to provide the app (e.g. technical service providers)
when you have given explicit consent
when we are legally obliged to do so

Storage & security

We implement technical and organisational measures to protect your data from loss, misuse, and unauthorised access.

Passwords are stored exclusively in encrypted form and are not processed in plain text.

Your rights

You have the right at any time to:

Access your stored data
Rectification or erasure
Restriction of processing
Object to processing
Data portability

Contact

For questions about privacy, you can reach us at:
Email: privacy@kayoro.de

← Back to home