Privacy Policy

1. Data Controller

This website is operated by its creators. We are committed to protecting your privacy and handling your data responsibly.

2. Data We May Collect

Account Data

If you sign in, we receive your email address. Google sign-in may also provide display name and profile picture. This data is stored in an EU-hosted database.

Location Data

GPS coordinates (only if you allow browser location access)
Approximate location based on your IP address (if location access is denied)
Locations you choose to save while logged in
Location search requests (not stored, only used for geocoding to match places)

Route Data

Saved routes with GPS coordinates
Elevation and timing data included in uploaded route files
A simplified set of route points used for air-quality analysis
Cached analysis results showing air quality along your routes

Preferences

Theme settings (system/light/dark) are stored locally in your browser only.

3. How We Use Your Data

Show air quality information for your location
Save your preferred locations for quick access
Analyze air quality along your saved routes
Protect your personal data

We never share your personal data.

Service providers only receive anonymized data needed to run the app.

4. Legal Basis (GDPR Article 6)

Consent: when you allow GPS/location access, saving locations and routes
Legitimate interest: providing core features (e.g., air-quality analysis, performance, security)
Contract: to manage your account when you sign in

5. Third-Party Services

Service	Purpose	Data Shared
Supabase	Authentication & database	Account data, saved locations, saved routes
Google OAuth	Sign-in	OAuth tokens
ipgeolocation.io	Approximate location	IP address
Nominatim (OSM)	Location search	Search text
Strava	Optional route import	Access tokens, athlete name, and the GPS routes of activities you choose to import (shown only to you)
Open-Meteo	Global air quality data	Coordinates
OpenWeatherMap	Global air quality data	Coordinates
ARSO	Slovenian air quality data	None
Vercel Speed Insights	Performance monitoring	Anonymized page metrics
Vercel Analytics	Page view analytics	Anonymized page views, browser info
PostHog	Product analytics	Page views, interaction events, browser and device metadata; session recordings only with consent

6. Data Retention

Account data: kept until you delete your account
Saved locations: kept until you delete them
Saved routes: kept until you delete them
Browser storage: kept until you clear your browser data

7. Your Rights

You can control your data in the following ways:

Delete your account and all associated data through the profile settings
Delete saved locations individually through the app
Delete saved routes individually through the app
Update your email address (email/password accounts only; OAuth users manage credentials via their provider)
For OAuth sign-in (e.g., Google), manage login details through your provider
Sign out any time to stop syncing data
Clear browser storage to remove local preferences

For other data-related requests, contact us at info@aeriqo.app.

8. Cookies

Essential storage (always on): we use browser storage and authentication cookies to keep you signed in and remember your settings. Analytics (only with your consent): PostHog (product analytics and session recordings) may set cookies. If you decline, PostHog only counts visits without cookies, using an anonymized identifier. We do not use advertising cookies. You can change your choice at any time via “Privacy choices” in the site footer.

9. Data Security

We use appropriate safeguards to protect your data, including:

Encrypted connections (HTTPS)
Secure authentication (OAuth 2.0)
Database access controls (Row Level Security)
Analytics cookies and session recordings only with your consent

10. Children's Privacy

This service is not intended for children under the age of 16.

11. Changes to This Policy

We may revise this policy from time to time. Changes will be posted here, and the updated version applies once published.

12. Contact

Contact email: info@aeriqo.app