Privacy Policy

This policy explains what data the Kurs app (“Kurs”, “the app”) and the website https://kurs.stream process. The data controller is [DEVELOPER_NAME] (“we”). Questions: [email protected].

In short. Kurs has no accounts, ads, analytics or tracking SDKs. Your location, routes, tracks and settings are processed and stored on your phone. Only shared road marks reach our server, and we do not store IP addresses.

What stays on your phone

Location

Kurs uses your location to show you on the map, build a route and guide you along it. The permission is “While Using the App”. In the background, location updates only during navigation, track recording or a diagnostics trip recording — iOS then shows the blue indicator. Your last position is stored on the phone so the map opens where you were.

Motion and sensors

The gyroscope, accelerometer, magnetometer, pedometer and barometer are used to guide you without GPS and to detect spoofing. This data is processed on the device only.

Bluetooth and local network

Used only to talk to an ELM327 OBD2 adapter (Bluetooth or Wi-Fi). The app reads only the vehicle's speed — it does not request other data such as the VIN or engine RPM. The name of a saved adapter is stored on the phone.

Voice and notifications

Voice prompts are played and synthesised on the device, without the network. Notifications are local only: about marks of the kinds you chose nearby, and they are off by default. We have no push server.

What else is stored on the phone

Home and work, recent places, tracks, settings, your marks, a map of areas where GPS was unreliable (cells of about 150 m), downloaded maps, and sensor recordings with GPS coordinates if you turn on recording in diagnostics. None of this is sent automatically. Deleting the app deletes this data from the phone.

What goes over the network

Map downloads

Maps and road graphs are downloaded from maps.kurs.stream (Cloudflare R2 storage). These are plain file requests with no user or device identifiers. Like any internet request they carry your IP address and technical data added by the system (such as the User-Agent); Cloudflare processes these as our infrastructure provider under its privacy policy. New versions of downloaded maps arrive automatically — by default over Wi-Fi only; you can change this in settings.

Shared road marks

Shared marks — danger, roadworks, traffic jam, closed road, accident, shelter, fuel station with a generator — are on by default. The marks server runs on Cloudflare Workers with a Cloudflare D1 database.

• When you place a mark, we store its kind, coordinates, radius (100, 300 or 1000 m), a label (the place name from the map, up to 120 characters), creation and expiry time, and a random app identifier.
• When you answer “still here” or “gone”, we store the answer, the time and the same identifier.
• To show marks nearby, the app sends a map area — a square of about 80 × 80 km around your current or last known position. The server does not store this area.

The random identifier is created on the phone and is not linked to your name, Apple Account or hardware device identifiers. It lets only you remove your own mark, stops one phone from voting twice, and limits a phone to 30 marks a day. Reinstalling the app creates a new one.

The server does not store your IP address, User-Agent or other device data; request logging is turned off. Cloudflare, as the infrastructure provider, processes technical request data under its policy.

Who sees marks. Marks are visible to all Kurs users nearby. A mark disappears from the map when it expires (2 hours to 14 days depending on the kind), when three people answer “gone”, or when you remove it.

How long records are kept. A mark's record — with the random identifier and answers — is kept while the mark is on the map and for 30 days after it disappears (it expired or was removed). A daily cleanup then deletes it from the server database, and it leaves the database's backup history at Cloudflare no later than 30 days after that. If you want us to delete records of your marks sooner, write to us with where and when you placed them.

How to turn it off. In the app: «Налаштування» (Settings) → «Позначки» (Marks) → «Лише на телефоні» (Only on this phone). Your marks then stay on the phone, others' marks are hidden, and the app does not contact the marks server.

Offline mode

«Налаштування» → «Карти й мережа» → «Мережа» → «Автономно» (Offline) turns off mark sharing and map checks and downloads. A download started before you switch it on will finish. A Wi-Fi OBD2 adapter keeps working — that is a local connection to the adapter, not the internet.

What you choose to share

Using the system Share sheet you can send a track (GPX), a diagnostics report or a sensor recording. We do not receive them unless you send them to us.

A diagnostics report contains the device model, iOS version, battery, memory and network state, app version, recent GPS positions with coordinates, current position, destination and waypoints, street names on the route, and the state of the spoofing detector, OBD2 adapter, watch and CarPlay, plus map versions. A sensor recording contains GPS coordinates. Share them only with people you trust.

GPX tracks you open from other apps are stored on the phone only.

What we don't do

• We don't create accounts or ask for your name, email or phone number.
• We don't use advertising, analytics, third-party crash reporting or tracking SDKs.
• We don't sell data or share it for advertising.
• We don't track you across apps and websites.

Other devices

On Apple Watch, route data (maneuver, distance, street, arrival time) goes directly from the iPhone, not through our server. On the car display, the map and route are shown from the phone via CarPlay. The Live Activity on the Lock Screen is updated on the device, without a push server. On Android, Kurs also analyses satellite signals (signal strength, gain level) to detect jamming and spoofing; this happens on the device only.

This website

The website uses no cookies, analytics, third-party fonts or scripts. The site's server does not write IP addresses or User-Agents to its logs. The hosting provider may process technical request data under its own policy.

Children

Kurs is not directed at children and does not knowingly collect their data. There are no accounts, so we don't know users' ages.

Legal basis and your rights

We process the minimum of data and only for features you use: mark data — to show shared marks while that feature is on.

Under the Law of Ukraine “On Personal Data Protection” and, if you are in the EU, the GDPR, you have the right to know what data about you is processed, to access, correct or delete it, to restrict processing or object to it. You can lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or the supervisory authority in your country.

How to exercise your rights:

• data on the phone — delete individual items in the app or the app itself;
• your mark — tap it and choose «Прибрати» (Remove), or «Налаштування» → «Позначки» → «Ваші позначки» (Your marks);
• data on the server — write to [email protected]. We don't know who you are, so we'll need the place and approximate time of a mark to find it.

Changes to this policy

When this policy changes, we update this page and the “Last updated” date at the top. Material changes — new kinds of data or new recipients — are also mentioned in the app's update notes.

Contact

[DEVELOPER_NAME] · [email protected]