Privacy Policy - Dot8 Development

Effective Date: March 23, 2026

Dot8 Development ("we," "us," or "our") operates mobile applications published under the dot8development developer account. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our mobile applications (each an "App," collectively the "Apps"). Please read this policy carefully. By using our Apps you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

        Note: Not all of our Apps collect the same data. Some Apps operate
        entirely offline and store data only on your device, while others connect to our servers
        to deliver their features. The sections below describe the full range of data our Apps
        may collect. Each App only collects what is relevant to its functionality.
    

1.1 Personal Information You Provide

Depending on the App, when you create an account, contact us, or use certain features, we may collect:

Full name or display name
Email address
Profile information you choose to provide
Authentication credentials (e.g., API keys or locally stored account information)

1.2 Information You Enter Into the App

Some of our Apps allow you to enter and manage personal or third-party information as part of their core functionality. This may include:

Names, contact details, and notes about other people (e.g., guest lists, vendor contacts)
Dates, schedules, and event details
Budget and cost-tracking information

In Apps that operate offline, this information is stored exclusively on your device and is never transmitted to our servers or any third party.

1.3 Information Collected Automatically

When you use Apps that connect to our servers, certain information may be collected automatically, including:

Data Category	Examples	Purpose
Device Information	Device model, operating system version, unique device identifiers	App compatibility and troubleshooting
Usage Analytics	Features used, session duration, interaction patterns, crash reports	Improving app performance and user experience
Map & Viewport Data	Map region being viewed, zoom level (when using map features)	Delivering relevant content for the visible area
Log Data	IP address, access times, referring URLs	Security, analytics, and service improvement

1.4 Location Data

Some of our Apps display location-based content (such as real-time positions of vehicles or points of interest on a map). This content is sourced from public third-party data providers and does not represent your personal location. If an App ever requires access to your device's location services, it will request your explicit permission first, and you can enable or disable this through your device settings at any time.

1.5 Device Calendar Access

Some Apps may request read and write access to your device's calendar to create reminders or schedule events related to App features. Calendar data is accessed locally on your device and is not transmitted to our servers. You can grant or revoke calendar access at any time through your device settings.

2. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Consent — Where you have given clear consent for us to process your personal data for a specific purpose (e.g., location data, marketing communications).
Contract — Where processing is necessary to perform a contract with you (e.g., providing the App's services).
Legitimate Interests — Where processing is necessary for our legitimate interests (e.g., analytics, fraud prevention), provided those interests are not overridden by your rights.
Legal Obligation — Where we need to comply with a legal obligation.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our Apps
Create and manage your account
Deliver location-based features and services
Analyze usage trends to improve functionality and user experience
Detect, prevent, and address technical issues and security threats
Communicate with you about updates, support, and promotional materials (with your consent where required)
Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

Service Providers — Third-party companies that perform services on our behalf (e.g., analytics, cloud hosting, crash reporting). These providers are contractually obligated to protect your data.
Legal Requirements — When required by law, regulation, legal process, or governmental request.
Business Transfers — In connection with a merger, acquisition, or sale of assets, in which case your data may be transferred to the acquiring entity.
With Your Consent — In any other circumstances where you provide explicit consent.

5. Data Storage & Backend Services

5.1 On-Device Storage

Some of our Apps store all data exclusively on your device using local storage mechanisms. In these Apps, your data never leaves your device unless you explicitly export or share it (e.g., creating a backup file). Uninstalling such an App will permanently delete all locally stored data.

5.2 Server-Connected Apps

Other Apps connect to backend servers operated by Dot8 Development to provide their core functionality. These self-hosted servers may handle:

Authentication — Account creation, API key generation, and session management. Credentials are stored securely using industry-standard hashing.
Real-Time Data — Fetching and aggregating data from public third-party sources (e.g., transportation APIs, public data feeds) and delivering it to your device.
API Processing — Your requests may be processed server-side and, where needed, forwarded to third-party APIs to deliver app features. Only the minimum data necessary is shared with these services.

        Self-hosted infrastructure: Our backend servers are operated and maintained
        directly by Dot8 Development. We implement firewalls, encrypted connections (TLS/SSL),
        regular security updates, and access controls to protect your data. While self-hosting
        gives us full control over your data, no infrastructure is immune to risk — we continuously
        monitor and improve our security measures.
    

6. Third-Party Services

Our Apps and backend systems may interact with the following categories of third-party services:

Mapping Services — Google Maps SDK or native platform mapping (Apple MapKit) to display interactive maps. When using Google Maps, map viewport data and rendered coordinates are sent to Google. Google's privacy policy applies to data processed by their services.
Public Data APIs — Our server-connected Apps may fetch real-time data from official public sources, such as national transportation APIs (e.g., Trafikverket, Entur, Digitraffic, Irish Rail). These requests are made server-side and do not include your personal information.
Analytics & Crash Reporting — If applicable, services such as Google Analytics, Firebase Analytics, or Firebase Crashlytics to understand usage patterns and identify bugs.
Advertising — If applicable, ad networks that may collect data to serve personalized or non-personalized ads.
Push Notifications — If applicable, services such as Firebase Cloud Messaging (FCM) or Apple Push Notification service (APNs) to deliver notifications.

Not all Apps use all of the above services. Each third-party service operates under its own privacy policy. We encourage you to review those policies.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we securely delete or anonymize it.

        Retention periods: For server-connected Apps, account data is retained
        for the lifetime of your account and deleted within 30 days of account deletion. Analytics
        data is retained in aggregated, anonymized form. Server log data is retained for up to
        12 months. For offline Apps, data is retained on your device until you delete it or
        uninstall the App.
    

8. Your Rights

8.1 Rights Under GDPR (EEA/UK/Switzerland Residents)

If you reside in the EEA, UK, or Switzerland, you have the right to:

Access — Request a copy of the personal data we hold about you.
Rectification — Request correction of inaccurate or incomplete data.
Erasure — Request deletion of your personal data ("right to be forgotten").
Restrict Processing — Request that we limit how we use your data.
Data Portability — Receive your data in a structured, machine-readable format.
Object — Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent — Withdraw consent at any time where processing is based on consent.
Lodge a Complaint — File a complaint with your local data protection authority.

8.2 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete — Request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale — We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at dot8development@gmail.com. We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), secure server infrastructure, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. Where we transfer data outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our Apps are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at dot8development@gmail.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you through the App or by email. We encourage you to review this policy periodically. Your continued use of the Apps after changes are posted constitutes acceptance of those changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: dot8development@gmail.com
GitHub: github.com/dot8development

For GDPR-related inquiries, you may also contact your local Data Protection Authority.