Summary
PlingPling is a crowdsourced app for cycling conditions in Sweden. Riders report conditions such as snow, potholes and slippery surfaces as pins on a map, vote on other riders' reports, save their routes, and see today's weather for riding.
To do this we process your email address (to sign you in), your location while you use the app, and the reports, votes and routes you create. Reports are public. There is no analytics, no advertising and no tracking.
Controller
Travalytics AB, 559527-2468
Raffinadgatan 2, 222 35 Lund, Sweden
Privacy questions: hello@travalytics.io (subject: "PlingPling privacy")
Data we process
| Data | Purpose | Who can see it | How long we keep it |
|---|---|---|---|
| Email address | Signing in with a six-digit code sent by email (there is no password) | Only Travalytics | Until you delete your account |
| Account ID (a random identifier) and sign-in session | Keeping you signed in. The session is stored locally on your device | Your account ID is shown alongside your reports. It is not your name or email address | Until you delete your account. The session ends when you sign out |
| Precise location (only while the app is in use, and only with your permission) | Showing your position on the map, and attaching it to reports you create | Not shared unless you create a report, search for an address, plan a route or view the weather (see below) | Not stored beyond what is listed in this table |
| Reports: condition type, position, optional note, place name, time created and expiry time | Showing conditions to other riders | Public to all app users while the report is active (24 hours by default, at most 30 days), together with your account ID | Deleted 30 days after the report expires, or when you delete your account |
| Votes on reports | Showing how reliable reports are | Linked to your account | Until the report or your account is deleted |
| Saved routes: name, route line and waypoints | Showing conditions along your routes | Only you | Until you delete the route or your account |
| Address search text | Suggesting addresses when you plan a route | Sent to Geoapify to get suggestions | We keep only your account ID and the time, to limit request rates. Deleted after 2 days |
| Route points | Fitting a drawn route to the road network | Sent to Mapbox | We keep only your account ID and the time, to limit request rates. Deleted after 2 days |
| Your position, rounded to a grid of roughly 2 km | Showing today's weather | Sent to SMHI, with MET Norway as a fallback. Not linked to you | Cached per grid area, not per person |
| Device language | Choosing the app's language | Stays on your device | - |
The note on a report is public. Please do not write personal information in it, about yourself or anyone else.
What the app does not do
- No analytics, no crash reporting tools, no advertising, no tracking across other apps or websites, and no selling of data.
- No location access in the background.
- No access to your contacts, photos, camera or microphone.
Service providers and recipients
| Provider | Role | Receives | Location |
|---|---|---|---|
| Supabase (Supabase Ireland Ltd) | Database, sign-in and server functions | All account and app data above | Ireland (EU) |
| Resend | Sends the sign-in code emails | Your email address | USA |
| Mapbox | Fitting routes to the road network | Route coordinates | USA |
| Geoapify | Address search | Search text | Germany (EU) |
| SMHI | Weather | Rounded position | Sweden |
| MET Norway | Weather, as a fallback | Rounded position | Norway (EEA) |
| Apple (iOS) and Google (Android) | Map display (Apple Maps or Google Maps) and the operating system's lookup of place names from a position | Position and IP address, under their own privacy terms | Set by Apple and Google, and may include countries outside the EU/EEA (Apple, Google) |
| Expo (650 Industries) | Delivers app updates | IP address, app version and device version | USA |
Transfers outside the EU/EEA
Some of these providers are based outside the EU/EEA. When data is transferred to them, the transfer is protected by the EU-US Data Privacy Framework, where the provider is certified under it, or by the EU Commission's standard contractual clauses.
Legal bases
- Performance of a contract (providing the service you signed up for): your account, reports, votes, saved routes, address search, route fitting and weather.
- Legitimate interest: limiting request rates, preventing abuse, and keeping the service secure.
- Consent: location access. You give and withdraw it in your phone's settings.
Your rights
You have the right to access, correct and delete your data, to restrict or object to how we process it, and to receive your data in a portable format. To use these rights, email hello@travalytics.io (subject: "PlingPling privacy"). We respond within one month.
You can also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
Deleting your account
In the app, go to Account > Delete account. Without the app, email hello@travalytics.io (subject: "PlingPling privacy") from the address you sign in with.
Deleting your account immediately deletes the account, your reports, your votes and your saved routes. Records kept to limit request rates (account ID and time only) expire within 2 days. Step-by-step instructions are on the delete your account page.
Children
You must be at least 13 years old to use PlingPling. The service is not aimed at children.
Security
All connections to our servers are encrypted (HTTPS). Database access rules ensure that users can only change their own data.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change is significant, we also tell you in the app.
Contact
Travalytics AB, Raffinadgatan 2, 222 35 Lund, Sweden. Email: hello@travalytics.io (subject: "PlingPling privacy")