Privacy Policy

Masaway is operated by Kirill Masarskiy (“Masaway”, “we”, “us”). For privacy questions and requests, contact kirill.masarskiy12@gmail.com.

Optional email address or phone number, only when you provide it. Marketing use requires separate consent.

Installation ID, App Attest key ID, Apple-linked purchase owner ID, product and transaction references.

Trip inputs, preferences, generated routes, feedback, shared routes, and product-usage events. Notes, tickets, expenses, and personal trip photos stay on your device unless you explicitly share them.

Precise location is used transiently for navigation and nearby results. Masaway does not retain your precise location history.

Technical information necessary to protect and operate the service, such as request timestamps, error information, app version, language, and security-validation results.

We process trip inputs and technical identifiers to provide routes, navigation, purchase access, restoration, customer support, fraud prevention, service security, and reliability.

Where applicable, processing is necessary to perform the service you request, comply with legal obligations, or pursue legitimate interests in security and product reliability. Optional marketing contact and anonymous product analytics are processed only after your consent, which you may withdraw at any time.

We do not sell personal information and do not use precise location or trip content for third-party advertising.

Cloudflare provides the API, database, security, and rate limiting. Anthropic processes AI requests. Google Maps/Places and OpenStreetMap/OSRM process place and route queries. Apple and RevenueCat process purchases. PostHog EU receives product analytics only after you explicitly enable anonymous analytics in Profile.

Unsplash and Ticketmaster provide images and events. Affiliate links open third-party services under their own privacy policies.

Providers may process data in countries outside your own. We use provider contractual and security safeguards where required, but data-protection rules may differ between countries.

Shared route links expire after 30 days. A downloaded offline route package is retained locally for up to 12 months.

Server trips, entitlements, purchase references, contacts, and App Attest identity remain until you use Profile → Reset profile, except records Apple or RevenueCat must retain and a pseudonymous launch-offer tombstone used only to prevent repeated promotional claims.

Withdrawing marketing consent deletes the stored marketing contact. If server deletion fails, local data is kept and the app asks you to retry.

Security and operational logs are retained only for the period configured by the relevant provider and as reasonably necessary to detect abuse, investigate failures, and meet legal obligations.

Contact details are optional and never gate product access. Marketing consent defaults to off. Anonymous analytics defaults to off and can be enabled or disabled in Profile.

You can revoke location and photo permissions in iOS Settings. Profile → Reset profile requests deletion of server data linked to the installation and then clears local data.

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection, and may complain to your local data-protection authority. To exercise a right, email us; we may need to verify that the request relates to your installation or purchase account.

More detailed deletion and consent instructions are available on the Privacy Choices page.

Masaway is not directed to children under 13. If local law requires a higher age for independent consent, a parent or guardian must authorize use. Contact us if you believe a child provided personal data without appropriate permission.

We use access controls, encrypted transport, Apple App Attest, rate limits, and server-side purchase validation. No service can guarantee absolute security.

We may update this policy when the app or legal requirements change. The effective date above will be updated, and material changes will be communicated in the app or on this page when appropriate.