Privacy Policy

Bruma ("we", "our", "the app") respects your privacy. This policy explains what data we collect, why, and your rights.

Data We Collect

• Account information: Apple ID user identifier, display name, and email address (provided via Sign in with Apple).
• Precise location data: GPS coordinates (latitude, longitude, altitude, speed, and timestamps) collected while the app is in use or running in the background with your permission. Location is used to reveal cells on your fog-of-war map.
• Usage data: Tiles explored, tracks recorded, distances walked, milestones achieved, and route history.
• Purchase history: Subscription product ID, transaction ID, and subscription status (managed by Apple via StoreKit).
• AI-generated content: Walking routes, travel journal entries, and statistical insights generated by our AI service based on your anonymized exploration data.

How We Use Your Data

• To display your explored map and calculate statistics.
• To generate AI-powered route suggestions, travel journals, and statistical insights. Your exploration data (cell counts, distances, city coverage) is sent to a third-party AI service (currently OpenRouter) in anonymized form to generate this content.
• To sync your data across devices via our backend servers.
• To verify and manage your Pro subscription status.

Data Storage

Your data is stored on our servers and transmitted over encrypted connections (HTTPS). Location data is also cached locally on your device for offline access.

Data Sharing

We do not sell your data. We share limited data with:

• AI providers (anonymized location context for route/journal generation).
• Apple (for subscription verification).

Your Rights (GDPR)

• Access: Export all your data via Settings.
• Deletion: Delete your account and all data via Settings.
• Portability: Your data export is provided in JSON format.

Data Retention & Deletion

We retain your data for as long as your account is active. When you delete your account (via Settings in the app), all your data is permanently and irreversibly deleted from our servers, including:

• Account information (Apple ID, name, email)
• All location data (cells, tracks, track points)
• AI-generated content (routes, journal entries)
• Purchase records and subscription history
• Statistics and milestones

Deletion is processed immediately. Server-side logs that may contain anonymized request metadata are retained for up to 30 days for operational purposes, after which they are automatically purged.

Home Blur

Pro subscribers can set a privacy zone around their home address. This zone is hidden on shared Explorer Cards but data is still stored privately on our servers.

Contact

For privacy questions, contact us at privacy@bruma.run.

Last updated: March 2026