Privacy Policy · Terms of Use Language: SK · EN · CS · DE · AT · PL · HU · SL · HR · IT · ES · FR · NL · DA

Privacy Policy for eBikemap

Last updated: 9 July 2026

Applies to the website ebikemap.eu, PWA (service worker), and native eBikemap apps (Android / iOS, package eu.ebikemap.app) that load the same web service.

1. Introduction and controller

Data controller for eBikemap:

• Martin Obert
• Bojná, Slovak Republic
• Natural person operating the service privately; no registered business activity at the time of publication.
• Email: info@ebikemap.eu

This policy describes data processing for ebikemap.eu, PWA, native apps, map functions, route planner, account, chat/assistant and related features.

2. Device location (GPS)

• Regular map use: coordinates are mainly processed locally on your device.
• Active navigation/follow mode: location may be read continuously only while this feature is active.
• Server transfer: coordinates may be sent when saving/sharing routes, reporting stations, using chat/assistant, routing API, or geocoding.
• Offline map: downloaded map regions are stored locally on your device.

3. Cookies, local storage, session

• Technical cookies: language (lang) and entry market (ebm_entry).
• Login: session cookie EBMSESSID (HttpOnly, up to 180 days, sliding expiry).
• LocalStorage: planner settings and optional short-lived route restore data on your device.
• Anonymous feature telemetry: only aggregate daily counts of feature usage may be stored (feature name + count). We do not store IP address, user agent, cookies, user ID, advertising identifier, or any per-user hash for this telemetry.

4. Visit logs (aggregated statistics)

We store only aggregate first-party visit statistics: date, total count, bot/human flag, country code derived from IP, market tag, and coarse device/OS category. Raw IP address and full user agent are not stored in the statistics table, and no per-user daily hash is stored.

5. User account (optional)

If you register/sign in (email/password, Google, or Sign in with Apple), we store account identifiers, verification state, password hash (if applicable), OAuth IDs, planner preferences and routes saved in your account section.

Account deletion: you can delete your account yourself via https://ebikemap.eu/delete-account.php. After confirmation, we remove account data (email, preferences, routes saved in your account). Anonymised or aggregate statistics and data we must retain by law may remain.

6. Content you submit voluntarily

• Shared/saved route: route JSON, optional title, map snapshot, and IP for moderation/security retention.
• Station reports: form data, photos, and IP.
• Contact: email and message content.

IP retention for routes/points: up to 90 days by default (or less if configured), then automatically removed.

7. Assistant/chat and AI route description

• Chat/assistant: This is an AI system (not a human operator). Messages and context (including approximate location, route preferences and map tips) may be processed on our server; responses are generated using the OpenAI API. You are informed that you are interacting with AI in the chat interface before and during the conversation (EU AI Act, Art. 50).
• Optional AI route description: A compact route summary may be sent to OpenAI for AI-generated text. Such descriptions are labelled as AI-generated in the app.
• AI operation metrics: model, token counts, processing time and success/error status for technical and cost control — not for profiling or automated decisions about you.
• Retention: chat messages are processed for the duration of the session; we do not permanently store full chat histories linked to your account unless you explicitly save content elsewhere in the service.

8. Maps and third parties

While using the service, these systems may be contacted (and may process IP/request metadata):

• Our infrastructure: map.ebikemap.eu and api.ebikemap.eu.
• Optional map layer: MapTiler (api.maptiler.com).
• OpenStreetMap ecosystem: Photon and Nominatim.
• Sign-in providers: Google and Apple.
• AI provider: OpenAI (chat assistant and route descriptions).

Client libraries are hosted on ebikemap.eu. Service worker may cache static files and optional offline tiles locally.

9. Legal basis, rights and transfers (GDPR)

Legal bases include service provision and legitimate interest (security/aggregated stats). Under GDPR you have rights to access, rectification, erasure, restriction, objection, and data portability.

Requests: info@ebikemap.eu (typically within 30 days). You may also delete your account directly via https://ebikemap.eu/delete-account.php.

You may lodge a complaint with the Slovak Data Protection Authority: www.dataprotection.gov.sk.

Contact form messages are usually kept up to 12 months. Terms of Use: terms.php.

Transfers outside the EU/EEA may occur when using providers (Google, Apple, OpenAI, MapTiler, OSM services) under their terms and applicable safeguards (e.g. Standard Contractual Clauses where offered).

10. AI transparency (EU AI Act)

From 2 August 2026, Regulation (EU) 2024/1689 (AI Act) requires providers of AI systems that interact directly with users to ensure users know they are interacting with AI. We meet this obligation through clear in-app notices in the chat panel and in the first assistant message, and by labelling AI-generated route descriptions. Our AI features are limited-risk interactive AI systems; we do not deploy high-risk AI as defined in the AI Act. AI outputs are informational only and do not replace your own judgement or professional advice.

11. Children

The service is not intended for children under 16.

12. Contact

info@ebikemap.eu