Privacy
Vegvísir privacy policy
1. Who is responsible
The controller responsible for processing your personal data is Vegvísir Hugbúnaðarlausnir ehf., registration number 490626-2040, Akrakór 7, 203 Kópavogur, Iceland.
Telephone: +354 778 9654
Privacy email: privacy@taptraffic.app
2. About Vegvísir
Vegvísir helps you keep track of regular car journeys and gives you advice about routes and departure times.
With your consent, the app can use precise location and motion information to learn your travel patterns and provide more personalised recommendations. Collection may continue in the background, even while the app is closed or not actively in use.
The beta is available only to adults whom we have invited. Public registration is not available, and the beta is not a project operated by any city authority.
3. What information do we use?
Account and settings
We use the information needed to create and operate your account. This may include:
- your email address, if you connect one to the account;
- an account identifier;
- your language and timezone;
- notification settings;
- consent and other choices you make in the app.
A guest account is not linked to an email address unless the user adds one later. We therefore cannot locate a guest account using an email address.
Places and journeys you enter
We store information that you enter in the app, such as:
- saved places, such as home and work, together with their names, addresses and coordinates;
- planned journeys, including the starting point, destination, expected arrival time and flexibility.
Optional trip-data collection
If you enable “Trip data collection”, the app may collect:
- your precise location;
- time and motion information, such as speed and direction;
- information about arriving at and leaving places;
- traces of the routes you travel;
- technical information about your device and the app.
Collection may continue while the app is closed or not actively in use. Information may be stored temporarily on your device before being sent to a Vegvísir server.
Vegvísir can use this information to identify journeys, visits to places, common routes, regular destinations and travel patterns. It may then use those findings to predict journeys and recommend routes and departure times.
Trip-data collection is optional, and you can turn it off at any time.
Security, notifications and diagnostics
We use limited technical information to:
- protect your account and prevent misuse;
- send notifications that you have enabled;
- check whether the app’s main features are working;
- identify and fix errors.
This may include your IP address, information about your device and app version, sign-in information, information needed to send notifications and basic usage records.
Diagnostic information is stripped of precise location data and direct identifiers before it is sent to Sentry.
4. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Create and operate your account, store information you enter, calculate routes and provide the services you request. | The processing is necessary to perform our contract with you under GDPR Article 6(1)(b). |
| Collect precise location and motion information and use it to learn your travel patterns. | Your consent under GDPR Article 6(1)(a). Consent is optional, and you can withdraw it at any time. |
| Protect accounts, prevent misuse, identify errors and keep the service reliable. | Our legitimate interests under GDPR Article 6(1)(f). |
| Collect limited usage information to check whether the app’s main features are working. | Our legitimate interests under GDPR Article 6(1)(f). |
We do not sell personal data or use it for advertising. We do not share it with employers or publish the results of coordination between users.
If this changes, we will update the privacy policy before the change takes effect.
5. Service providers and recipients
We use the following service providers:
- Render hosts Vegvísir’s servers and database in Frankfurt, Germany.
- Google Maps Platform, TomTom and Apple MapKit provide maps, place search, route calculations and traffic information. Place information, coordinates and routes are sent when necessary for the features you use.
- Expo, APNs and FCM are used to send notifications.
- Sentry receives scrubbed diagnostic information.
- Resend and Google Workspace are used to send sign-in codes and receive email and privacy requests.
- Vercel hosts this website and the privacy-request form.
- Healthchecks monitors automated background jobs. No journey or location information is sent to it.
Service providers may use personal data only on our instructions and for the purposes described here.
6. Transfers outside the EEA
Vegvísir’s main service and database are hosted in Frankfurt, Germany. However, some of our service providers are headquartered outside the European Economic Area or provide services from outside it.
When personal data is transferred outside the EEA, we use appropriate safeguards. These may include:
- a European Commission adequacy decision;
- the EU–US Data Privacy Framework;
- European Commission Standard Contractual Clauses;
- additional safeguards where necessary.
You can contact us for more information about international transfers of personal data.
7. How long do we keep your information?
| Information | Retention period |
|---|---|
| Raw location and motion information | 90 days. |
| Detected journeys, visits, route traces, frequent places and travel patterns | Until you select “Delete My Data” or delete your account. |
| Saved places, planned journeys and settings | Until you remove the information or delete your account. |
| Inactive guest accounts and associated information | Deleted after 180 days without use, unless a sign-in remains active. |
| Limited information about usage, notifications and routes | Generally up to 90 days. Information from internal optimisation runs is kept for 30 days. |
| Expired sign-in codes and inactive login sessions | Seven days. |
| Backups, service logs and recovery data | Up to seven days. |
| Email data held by Resend | 30 days. |
| Diagnostic information held by Sentry | Up to 90 days. |
When information is deleted, it is removed from the live database immediately. It may remain in encrypted backups for up to seven days and is deleted when those backups expire.
8. Your choices and rights
Turning off trip-data collection
You can withdraw your consent by turning off “Trip data collection” under “Account” in the app.
This stops further collection. Information that has already been collected is not deleted automatically.
Deleting trip data
You can use “Delete My Data” to delete collected trip data and anything the app has learned about your travel patterns.
Your account, saved places, journeys you entered and settings remain unchanged.
Deleting your account
Deleting your account deletes all information associated with it.
The easiest way to do this is in the app. Users who have connected an email address to their account can also submit a request through our account-deletion page.
A guest account is not linked to an email address. Guest users must therefore delete their account in the app while they still have access to the device.
Your other rights
You have the right to:
- access your personal data;
- have inaccurate information corrected;
- request deletion or restriction of processing;
- receive your information in a portable format;
- object to processing based on legitimate interests;
- withdraw your consent at any time.
You can send a request to privacy@taptraffic.app or use the form on our website. We may verify that the request concerns your account using the email address registered to it. We normally respond within one month.
Never send us passwords, secret keys or sign-in codes.
9. Profiling and automated decisions
Vegvísir analyses your travel patterns so that it can provide recommendations. You are always free to ignore them.
The app does not make automated decisions that have legal or similarly significant effects on you. It therefore does not use automated decision-making within the meaning of GDPR Article 22.
10. Contact and complaints
Privacy questions and requests can be sent to privacy@taptraffic.app.
You also have the right to complain to Persónuvernd, the Icelandic data protection authority.