Política de Privacidade
Bruma ("we", "our", "the app") respects your privacy. This policy explains what data we collect, why, and your rights.
Data We Collect
- Account information: Apple ID user identifier, display name, and email address (provided via Sign in with Apple).
- Precise location data: GPS coordinates (latitude, longitude, altitude, speed, and timestamps) collected while the app is in use or running in the background with your permission. Location is used to reveal cells on your fog-of-war map.
- Usage data: Tiles explored, tracks recorded, distances walked, milestones achieved, and route history.
- Purchase history: Subscription product ID, transaction ID, and subscription status (managed by Apple via StoreKit).
- AI-generated content: Walking routes, travel journal entries, and statistical insights generated by our AI service based on your anonymized exploration data.
How We Use Your Data
- To display your explored map and calculate statistics.
- To generate AI-powered route suggestions, travel journals, and statistical insights. Your exploration data (cell counts, distances, city coverage) is sent to a third-party AI service (currently OpenRouter) in anonymized form to generate this content.
- To sync your data across devices via our backend servers.
- To verify and manage your Pro subscription status.
Legal Basis for Processing (GDPR)
- Consent: Location tracking, AI data processing.
- Contract performance: Account management, subscription verification, data sync.
- Legitimate interest: Service improvement, security.
Data Storage
Your data is stored on our servers and transmitted over encrypted connections (HTTPS). Location data is also cached locally on your device for offline access.
Data Transfers
Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for international transfers.
Third-Party Services
We share limited data with the following third-party services:
- Apple — Sign in with Apple authentication, MapKit map tiles, StoreKit subscription management.
- OpenRouter — AI content generation (routes, journal, insights). Receives anonymized city name, cell counts, and approximate coordinates. Does not store request data beyond processing.
- Geoapify — City and district boundary data. Receives coordinates to determine geographic boundaries.
- Our backend servers (bruma.run) — Data sync, account management, boundary data storage.
We do not sell your data.
Your Rights (GDPR)
- Access: Export all your data via Settings.
- Deletion: Delete your account and all data via Settings.
- Portability: Your data export is provided in JSON format.
Revoking Permissions
You can revoke location access at any time in iOS Settings > Privacy & Security > Location Services > Bruma. Without location access, the core map exploration feature will not function.
Data Retention & Deletion
We retain your data for as long as your account is active. When you delete your account (via Settings in the app), all your data is permanently and irreversibly deleted from our servers, including:
- Account information (Apple ID, name, email)
- All location data (cells, tracks, track points)
- AI-generated content (routes, journal entries)
- Purchase records and subscription history
- Statistics and milestones
Retention periods:
- Active account data: retained while your account is active.
- Server logs: automatically purged after 30 days.
- Deleted account data: permanently removed immediately upon deletion request.
- Backup systems: purged within 30 days of account deletion.
Home Blur
Pro subscribers can set a privacy zone around their home address. This zone is hidden on shared Explorer Cards but data is still stored privately on our servers.
Children's Privacy
Bruma is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at support@denary.store and we will delete it.
Data Controller
Andrei Fedoseev Sapin
Valencia, Spain
support@denary.store
Last updated: March 2026