Privacy Policy
Effective Date: January 27, 2026
1. Introduction
This Privacy Policy describes how MapBloom ("the App", "we", "us", or "our") processes information when you use our mobile application.
MapBloom is operated by Jakub Różycki (sole proprietorship), located in Cracow, Poland.
We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy laws.
2. Data Controller Information
| Field | Information |
|---|---|
| Data Controller | Jakub Różycki |
| Business Address | Łokietka 5/37, 30-010 Cracow, Poland |
| Contact Email | [email protected] |
| Service | MapBloom mobile application |
Note on Third Parties: Apple Inc. acts as an independent data controller for data processed through Apple MapKit services (map display, place search, reverse geocoding). We do not control Apple's data processing or international transfers. See Apple's Privacy Policy.
3. Information We Process and Sources
3.1 Sources of Information
We receive information from the following sources:
- Directly from you: Map area selections, place search queries, support communications
- From your device: IP address, device location (if you grant permission)
- From Apple MapKit: Place names and coordinates via reverse geocoding
3.2 Categories of Information
Map Creation Data
- Selected map area coordinates (the area you choose on the map)
- Place search queries you enter
- Place name information (city, country) derived from coordinates using Apple's reverse geocoding
Server Logs
When the App requests map rendering from our backend, our server automatically logs:
- IP address
- Timestamp of the request
- Requested coordinates and rendering parameters
- Technical diagnostics (response time, error codes)
Device Location (Optional)
If you grant location permission, the App may access your approximate or precise device location (depending on your iOS settings) to display your current position on the map. Your device location is processed on-device and is not stored by us unless you select your current location as the map area.
Communications
If you contact us (for example, by email), we process your message content and contact details to respond.
4. Required vs. Optional Information
| Information | Required? | Consequence of Not Providing |
|---|---|---|
| Selected map area coordinates | Yes | Cannot generate your map poster |
| Place search queries | No | Can still select areas manually on the map |
| Device location permission | No | "Show my location" feature unavailable; all other features work |
| Photo library permission | No | Cannot save posters to your photo library; can still share them |
| Support communication details | Yes* | Cannot respond to your inquiry (*only if you contact us) |
5. Purposes and Legal Bases for Processing
For EEA/UK Users (GDPR)
| Processing Activity | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Map rendering (coordinates, parameters) | Provide requested poster | Art. 6(1)(b) - Contract performance |
| Place search and reverse geocoding | Display place labels on poster | Art. 6(1)(b) - Contract performance |
| Server logging (IP, timestamps, coords) | Security, debugging, abuse prevention | Art. 6(1)(f) - Legitimate interests |
| Device location display | Show your position on map (optional) | Art. 6(1)(a) - Consent (via iOS permission) |
| Support communications | Respond to inquiries | Art. 6(1)(b) - Contract; Art. 6(1)(f) - Legitimate interests |
Legitimate Interests Assessment (Server Logging): Our interest in operating a secure and reliable service is necessary for providing MapBloom. The impact on users is limited because:
- We collect minimal diagnostic data (IP, timestamp, coordinates)
- Retention is short (30 days)
- Data is not used for profiling, marketing, or advertising
- Data is not shared beyond essential service providers
You have the right to object to processing based on legitimate interests. We will assess whether we have overriding grounds to continue processing. See Section 8.
6. Data Sharing and Recipients
Categories of Recipients
| Recipient | Role | Data Shared | Location |
|---|---|---|---|
| Apple Inc. (MapKit) | Independent controller | Search queries, coordinates, device/network info | EU / USA |
| OVH Cloud (hosting) | Processor | Server logs, request data | EU (France) |
| Email provider (if applicable) | Processor | Support communications | EU |
- Crash reporting or analytics services
- Advertising networks
- Any other third-party SDKs that collect user data
Disclosures for Business Purposes (California)
We disclose the following categories of personal information to service providers for business purposes:
- Identifiers (IP address): To hosting provider for server operation
- Geolocation data (coordinates): To hosting provider for rendering; to Apple for geocoding
- Internet activity (logs): To hosting provider for storage and debugging
7. Data Retention
| Category | Retention Period |
|---|---|
| Server logs (IP, coordinates, timestamps) | 30 days, then deleted or anonymized |
| Coordinates for rendering | Not retained in user profiles; may appear in logs for 30 days |
| Device location | Processed on-device; not stored by us |
| Support communications | Up to 24 months after resolution, then deleted or anonymized |
| Saved posters | Stored locally on your device only; we do not access them |
8. Your Rights (EEA/UK - GDPR)
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase data in certain circumstances
- Restrict processing in specific situations
- Data portability - receive data in a structured, machine-readable format
- Object to processing based on legitimate interests (we will assess overriding grounds)
- Withdraw consent at any time for consent-based processing (e.g., disable location permission in iOS Settings)
How to Exercise Your Rights
- Contact: [email protected]
- Response time: Without undue delay, and within one month of receipt. This period may be extended by up to two additional months where necessary; we will inform you of any extension within one month.
- Verification: We may request information to verify your identity.
Given our minimal data collection, most requests can be addressed by confirming we do not retain personal data beyond the 30-day server log period.
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. In Poland:
9. Your Rights (California - CCPA/CPRA)
Categories of Personal Information Collected (Past 12 Months)
| CCPA Category | Examples | Sources | Sold? | Shared for Ads? |
|---|---|---|---|---|
| Identifiers | IP address | Your device | No | No |
| Geolocation data | Selected map coordinates, device location | You, your device, Apple MapKit | No | No |
| Internet/network activity | Timestamps, error codes, response times | Your device, our server | No | No |
We do not collect: Financial information, protected classifications, biometric data, sensory data, professional information, education information, or inferences.
Sensitive Personal Information
Precise geolocation is considered sensitive personal information under California law.
- Selected map coordinates represent the area you choose for your poster, not necessarily your physical location.
- Device location (if enabled) may include your precise location. This is optional and used only to show your position on the map. You can limit this by:
- Not granting location permission, or
- Changing permissions in iOS Settings > Privacy & Security > Location Services > MapBloom
Your Rights
California residents have the right to:
- Know what personal information we collect, use, and disclose
- Delete personal information
- Correct inaccurate personal information
- Opt out of sale/sharing (not applicable - we do not sell or share for advertising)
- Limit use of sensitive personal information (see above)
- Non-discrimination for exercising your rights
How to Submit Requests
- Email: [email protected]
- Mail: Jakub Różycki, Łokietka 5/37, 30-010 Cracow, Poland
Response Time: We will respond within 45 days of receiving your verifiable request. If we need more time (up to 90 days total), we will notify you in writing.
Verification: We may ask you to provide information to verify your identity based on the limited data we process.
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We will require:
- Signed written permission from you
- Verification of your identity directly
- Confirmation that you authorized the agent
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
11. Data Security
We use appropriate technical and organizational measures to protect your information, including:
- Encryption: TLS encryption for data in transit
- Access controls: Restricted server access on a need-to-know basis
- Limited retention: Data deleted or anonymized after retention periods
- Minimal collection: We collect only what is necessary for service delivery
12. International Data Transfers
Our servers: Located in the EU (OVH Cloud, France).
Apple: Apple Inc. may process data in the United States. Apple is certified under the EU-US Data Privacy Framework. As Apple acts as an independent controller for MapKit services, we do not control their international transfers. See Apple's Privacy Policy.
Your rights: Where GDPR applies to transfers we control, we rely on recognized safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
13. Apple App Tracking
We do not track users across apps or websites owned by other companies as defined by Apple. We do not use the Identifier for Advertisers (IDFA). App Tracking Transparency authorization is not required or requested by MapBloom.
14. Children's Privacy
MapBloom is a general audience app and is not directed at children. We do not knowingly collect personal information from children under 13 years of age (or under 16 in the European Economic Area).
If you believe a child has provided personal information to us, please contact [email protected] and we will promptly delete it.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Effective Date" above when changes are made.
For material changes, we will provide notice through the App or other appropriate means.
Continued use of MapBloom after changes constitutes acceptance of the updated policy.
16. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights:
Email: [email protected]
Address: Jakub Różycki, Łokietka 5/37, 30-010 Cracow, Poland
Policy Version History
| Version | Date | Changes |
|---|---|---|
| 1.0 | January 27, 2026 | Initial policy |
This Privacy Policy is effective as of the date listed above and governs your use of the MapBloom application.