wTatry privacy policy

1. Who is responsible for your data

The controller is [NAZWA FIRMY — do uzupełnienia], [adres siedziby — do uzupełnienia], [NIP / KRS — do uzupełnienia]. For anything about personal data write to [kontakt@wtatry.app — do potwierdzenia].

2. The essentials

• The app does not alert rescuers (TOPR, HZS). In an emergency call yourself: 985, +48 601 100 300 or 112.
• We do not sell data or show ads based on tracking.
• Your position on the help screen and map stays on your phone. It reaches our server only during a “Tell my people” hike you start yourself.
• Your contacts’ numbers are encrypted and deleted when the hike ends.
• Delete your account and everything linked to it in the app: More → Delete account.

3. Account

We keep your e-mail address, display name, language, your onboarding answers (experience, who you hike with), your consents with their date and your saved trip plans, so they are on every device you use.

You sign in with a one-time code sent by e-mail, valid for 10 minutes. Sign-in sessions expire on their own; after you sign out we delete them within 30 days.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We keep the data until you delete the account.

4. “Tell my people”

When you start a hike we store your first name (used to sign the text message), 1–3 contacts with their phone numbers, your planned return, the planned route and, during the hike, your GPS position, its accuracy and battery level. Your contacts get a text with a link to a page with the plan; they see your position after an alarm, and all the time only if you switch that on.

If you do not confirm your return, your contacts get a text with your last position after the grace period you chose. The alarm depends on time, not on signal.

Contacts’ numbers are encrypted and deleted as soon as the hike ends. The track is deleted 7 days after the hike ends (30 days after an alarm), together with the last position, the route, your name and the contacts’ page. A hike nobody ended is closed 30 days after the planned return. The log of sent texts (masked number and content) is kept for 90 days.

Legal basis: performance of a contract with you; for your contacts, our legitimate interest in notifying them (Art. 6(1)(f) GDPR). Tell your contacts they will get texts from us; each of them can stop the messages through the link in the text.

5. Location

The help screen, map and navigation use your phone’s GPS; that position does not reach us unless you share it. Background location (“Always”) is used only during a “Tell my people” hike, so your contacts have your last position while the phone is in your pocket. Tracking stops when the hike ends.

6. Trail reports

A report (category, description, place, optionally a photo) is public for 24 hours with your display name. We remove the photo’s metadata (GPS position, phone model). Reports and their photos are deleted after 30 days; when you delete your account we delete your photos and your reports stay without an author. Do not photograph people who could be recognised.

7. Notifications

To alert you to a trail closure, avalanche danger or a storm on your route we store your device’s notification token (from Apple or Google), language, app version and your notification settings. The token is deleted when you switch notifications off, delete your account or do not open the app for a year. Sent alerts are kept for 90 days so the same one is never sent twice.

8. Usage statistics

While the app is on screen it sends an “online” signal about once a minute: platform, screen, whether navigation is running and a coarse area (Tatras, Podhale, Poland or abroad — never your exact position), with a random install ID. It counts people online and identifies nobody; the legal basis is our legitimate interest.

Other events (e.g. a plan created, a screen opened, a map downloaded) are sent only with your consent, which you can withdraw at any time in More → “Anonymous usage statistics”. Raw events are kept for 30 days, then only totals remain.

The wTatry website works the same way: every minute it sends a signal (page, platform) with an ID kept only in the tab’s memory, and page views and events only after you accept in the banner — then a random ID and your choice are stored in the browser (localStorage). We use no advertising cookies and no third-party trackers.

9. Partners and partner links

Partner offers and links to shops are always labelled. We count views and clicks as daily totals, with nothing about the person or device. On a partner’s website its own privacy policy applies.

10. Who processes data for us

Data is stored in the European Union. We are helped by Amazon Web Services (servers and files, Frankfurt), Neon (database, Frankfurt), SMSAPI (text messages), an e-mail provider for sign-in codes, Apple and Google (delivering notifications) and Cloudflare (delivering the website and map). Each processes data only on our instructions.

Without our server your phone fetches some data directly: forecasts from MET Norway, bulletins and closures from TPN services, the map from OpenFreeMap. These services then see your phone’s IP address, as any website does; we send them none of your data. When a typed address is not on the list of popular places, the phone sends just the typed text to the Photon address search (komoot, Germany) to find where it is.

When you plan to arrive by train, the app sends our server your position rounded to about 5 km, the date and the start time, to find the nearest station and a connection. We do not store this request. Driving time is worked out on the phone, without sending your position.

11. Your rights

• access to your data and a copy of it, correction, deletion (simplest: Delete account in the app), restriction and portability;
• objection to processing based on legitimate interest;
• withdrawing your consent to statistics at any time, without affecting earlier processing;
• a complaint to a data protection authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl).

12. Security and children

Connections are encrypted, contacts’ numbers are encrypted with a separate key and only the team members who need it can access data. You must be 16 or older to create an account.

13. Changes

We will tell you in the app about important changes to this policy. The date of the last change is at the top of the page.