Privacy Policy
Last updated: April 30, 2026
Mapystik is a personal map and trip planning app for saving places, organizing lists, planning journeys, and sharing selected content with other Mapystik users. This Privacy Policy explains what information Mapystik collects, how it is used, and the choices available to you.
1. Who Is Responsible for Your Data
Mapystik is administered by the Mapystik project owner. For privacy questions, account deletion, or data requests, contact shrbeny.filip@gmail.com.
2. Information We Collect
- Account information: name, email address, password credentials handled by Firebase Authentication, email verification status, account creation date, and last login timestamp.
- Profile information: first name, last name, email, admin or suspended status, and optional avatar photo.
- Saved places: place names, addresses, GPS coordinates, Google Place IDs, categories, tags, icons, ratings, notes, visit status, and dates you add or edit.
- Trips and planning content: trip names, dates, itinerary items, day plans, route/order data, notes, and travel booking details such as route, time, reference number, and notes when you choose to enter them.
- Sharing and collaboration data: invitations, recipient email addresses, sender details, shared place or trip content, collaborator lists, invite status, and notifications.
- Import and export data: content you import from Google Maps text search, Google Takeout-style files, Mapstr files, or Mapystik backup files, and content you export into local backup or PDF files.
- Technical and local app data: authentication/session state, cached app data, local preferences, and browser storage used by Firebase and the app to keep Mapystik working.
3. How We Use Information
- To create and manage your account.
- To save, display, search, organize, import, export, and back up your places and trips.
- To show maps, place search results, photos, addresses, routes, and related map features.
- To enable sharing, collaboration, invite handling, and in-app notifications.
- To let administrators support users, manage access, send service notifications, suspend accounts, and delete user data when needed.
- To maintain security, prevent abuse, diagnose problems, and improve the app.
Mapystik does not sell your personal information and does not use your saved places or trips for third-party advertising.
4. Third-Party Services
Mapystik depends on third-party services that process data under their own terms and privacy policies:
- Firebase and Google Cloud: used for hosting, authentication, Firestore database, and Firebase Storage. See Firebase privacy and security and Firebase Data Processing and Security Terms.
- Google Maps Platform: used for map display, place search, place details, photos, coordinates, and routing-related features. Your use of Google Maps features is also subject to the Google Maps/Google Earth Additional Terms and the Google Privacy Policy.
- Google Fonts and jsDelivr: used to load fonts and interface libraries. These services may receive technical request data such as IP address, browser details, and requested files.
- Analytics and diagnostics: Mapystik stores lightweight product analytics and error diagnostics in Firebase, such as counts for logins, created places, trips, imports, exports, sharing invites, planner/calendar usage, and app errors. These analytics events use account IDs and coarse action metadata; they do not store place names, notes, exact trip content, or travel details. Firebase, Google Cloud, Google Maps, hosting, and browser infrastructure may also create technical logs needed for security, reliability, billing, and abuse prevention.
5. Sharing With Other Users
When you share a place, category, selected places, or trip, Mapystik stores the invite and makes the selected content available to the recipient. Copy sharing gives the recipient an independent copy. Collaboration keeps a live shared trip where collaborators may view or modify trip content. Owners can stop sharing, guests can leave, and deleting a shared trip can remove live access for collaborators. Only share content you are comfortable disclosing to the selected recipient.
6. Administrator Access
Administrators can view user profiles, account status, counts of places and trips, and data needed to support or manage the service. Administrators can edit profiles, suspend accounts, delete user data, export user lists, and send broadcast notifications.
7. Storage, Security, and Retention
Mapystik stores app data in Firebase/Google infrastructure. Firestore and Firebase Storage security rules restrict access based on account ownership, collaboration permissions, and administrator status. No online service can guarantee perfect security, so you should avoid storing highly sensitive information in notes, bookings, or place records.
Your account data is kept while your account remains active. Share invites expire after the configured invite period, currently 14 days, but related notifications or shared content may remain until deleted. Account and data deletion requests are handled by the administrator and are normally processed within 30 days unless a longer period is needed for security, legal, or abuse-prevention reasons. Backups, service logs, and provider records may persist for a limited period after deletion. Exported files are created locally in your browser and become your responsibility once downloaded.
8. Your Choices and Rights
- You can edit many profile, place, trip, category, tag, and booking fields inside the app.
- You can export selected categories, places, and trips as a Mapystik backup file.
- You can ask for access, correction, export, restriction, objection, or deletion of personal data by contacting the administrator.
- If you are in the European Economic Area, United Kingdom, Switzerland, or another region with privacy rights, you may have additional rights under local law.
9. Cookies and Browser Storage
Mapystik uses browser storage, Firebase local persistence, and similar technologies for sign-in sessions, cached data, local preferences, offline behavior, and faster loading. Mapystik does not use advertising cookies.
10. Children
Mapystik is not intended for children under 13, or under the minimum digital consent age in your country. Do not create an account if you are below the applicable age. If you believe a child has provided personal information, contact the administrator.
11. International Transfers
Because Mapystik uses Google and Firebase services, your information may be processed in countries other than your own. Google provides data processing and transfer terms for Firebase and Google Cloud services.
12. Changes to This Policy
Mapystik may update this Privacy Policy when the app, service providers, or legal requirements change. The updated date at the top of the page shows when the latest version took effect. Continued use of Mapystik after an update means you accept the updated policy.
Contact
For privacy questions, account deletion, or data requests, email shrbeny.filip@gmail.com.