SandaMapThis Privacy Policy explains how the mobile application SandaMap — published on Google Play as Sanda: Visited Places & Map, package name com.sanda.sandamap (the "App") — handles information about you. The App is developed and operated by Serhii Serhiienko, Limassol, Cyprus ("we", "us"), who is the data controller for the purposes of the GDPR.
By installing and using the App you agree to this Policy. If you do not agree, please do not use the App.
1. Data we collect
| Category | What it is | Why we need it |
|---|---|---|
| Travel data you create | Countries and cities you check in, saved places, notes, categories, photos you attach, visit dates and passport stamps. | This is the core content of the App. Stored on your device; also stored in the cloud if you sign in. |
| Account data | If you sign in with Google: your email address, display name and profile picture URL, plus an internal user ID. | To identify your account and sync your data across devices. |
| Approximate or precise location | Device location, only while the App is open and only after you grant the permission. | To centre the map on you and suggest the place you are currently at. Location is not stored on our servers unless you save it as part of a place. |
| Usage and diagnostics | Screens opened, features used, session length, app version, device model, OS version, crash reports and performance traces. | To understand which features are used, fix crashes and improve the App. |
| Advertising identifiers | Android Advertising ID (AAID) and related ad-request data. | To serve ads in the free version of the App. See section 4. |
| Purchase data | Subscription status and purchase tokens returned by Google Play. | To unlock supporter features and switch ads off for subscribers. |
We do not ask for, and the App does not collect, your phone number, contacts, SMS, call logs, calendar, microphone, or anything from your photo library beyond the individual images you choose to attach to a place.
2. Third-party services we use
The App uses the following services. Each processes data under its own privacy policy:
- Google AdMob — advertising in the free version. How Google uses data
- Firebase Analytics, Crashlytics, Performance Monitoring and Remote Config — usage analytics, crash reporting and feature flags. Firebase privacy
- Firebase Authentication, Cloud Firestore and Cloud Storage — optional sign-in and cloud backup of your travel data.
- Google Maps Platform — the map itself. Google Privacy Policy
- Google Play Billing and Google Play Install Referrer — subscriptions and install attribution.
3. Legal basis and how we use data
Where the GDPR applies, we process data on these bases: performance of a contract (providing the App and your account), your consent (personalised advertising, optional location access), and our legitimate interests (security, crash diagnostics, improving the App).
We do not sell your personal data, and we do not build profiles about you outside the advertising described below.
4. Advertising
The free version of the App shows ads served by Google AdMob. Ads may use your Advertising ID to limit repetition and, if you consent, to show more relevant ads.
If you are in the European Economic Area, the United Kingdom or Switzerland, the App shows a consent form powered by Google's User Messaging Platform before ads are personalised. You can change your choice at any time in Profile → Privacy settings.
You can also reset or delete your Advertising ID in Android Settings → Privacy → Ads.
Users with an active SandaMap supporter subscription see no ads at all.
Our authorised sellers file is published at sandatravel.com/app-ads.txt.
5. Where your data is stored
Travel data is stored locally on your device in an on-device database. If you sign in, a copy is stored in Google Cloud Firestore and Cloud Storage on infrastructure operated by Google, which may involve transfers outside your country. Google relies on Standard Contractual Clauses for such transfers.
6. Retention
Local data stays on your device until you delete it or uninstall the App. Cloud data is kept while your account exists. Analytics and crash data are retained according to Firebase's default settings — up to 14 months for analytics events and up to 90 days for crash reports.
7. Your rights and choices
- Access and export — your travel data is visible in the App and can be shared or exported from it.
- Correction — you can edit or delete any country, city or place at any time.
- Deletion — delete your account and all cloud data from Profile → Delete account, or email sandamapapp@gmail.com and we will delete it within 30 days.
- Withdraw consent — revoke the location permission in Android settings, or change your ad consent choice in the App.
- Complaint — if you are in the EEA or UK you may lodge a complaint with your local data protection authority.
Residents of California may request disclosure and deletion of personal information under the CCPA/CPRA using the contact details below. We do not sell personal information as defined by that law.
8. Children
The App is not directed at children under 13 (under 16 in the EEA) and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will remove it.
9. Security
Data in transit is encrypted with TLS. Cloud data is protected by Firebase security rules that restrict each document to its owner. No system is perfectly secure, so we cannot guarantee absolute security.
10. Changes to this Policy
We may update this Policy. Material changes will be announced in the App or on this page, with a new date at the top. Continued use of the App after a change means you accept the revised Policy.
11. Contact
Questions about this Policy or about your data:
sandamapapp@gmail.com
Serhii Serhiienko, Limassol, Cyprus
See also: Terms of Use · Support