Privacy Policy
Effective 30 September 2026
1. Who we are
MudNav is provided by Jeton Cloud, the data controller under the EU General Data Protection Regulation (GDPR).
Contact for privacy matters: privacy@mudnav.com
2. What stays on your phone
The following never leave your device unless you share them yourself:
- planned routes, recorded tracks, GPX files and offline maps;
- settings and paired motorcycles;
- the connection to your motorcycle's dash (local Wi-Fi and Bluetooth between the phone and the bike);
- caller names and phone state, used only to show incoming calls on the dash;
- the app log, which is sent only if you tap Share in the settings.
3. Data we process on our servers
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Google account ID, name, e-mail address | Sign-in to Crew; letting friends invite you by e-mail | Contract (Art. 6(1)(b)) | Until you delete your account |
| Your latest position | Showing you on the map to the friends you chose, only for the time you set | Consent (Art. 6(1)(a)); you can stop sharing at any time | Only the latest position is kept; it is deleted when sharing ends |
| Trail of the last hours (optional) | “Show the route I rode” for your Crew | Consent | At most 24 hours |
| SOS alerts | Alerting your Crew with your position | Vital interests and consent (Art. 6(1)(d) and (a)) | Until the alert is closed, then at most 7 days |
| Friends list, invitations, blocks | Running Crew | Contract | Until you delete them or your account |
| Device push token | Waking the app for SOS and invitations | Contract | Until you sign out or delete your account |
| IP address and request time (server logs) | Security and preventing abuse | Legitimate interest (Art. 6(1)(f)) | At most 30 days |
Only the people you chose can see your position, and only until the time you set. The server enforces this, not just the app. You can delete your account and all data with one button in the app, or by writing to us.
4. Where the data is
- Our servers: OVHcloud data centre in Warsaw, Poland (EU).
- Cloudflare manages our domain names (DNS) and may protect traffic to our servers against attacks. It processes IP addresses for that purpose only.
5. Services your phone contacts directly
For maps, search, routes and weather, the app asks public services directly from your phone. They see your IP address and the area or route you asked for, but no name or account.
| Service | What for | Where |
|---|---|---|
| OpenFreeMap, OpenStreetMap tile servers, OpenTopoMap | Map images | EU / UK |
| BRouter, Valhalla and OSRM (FOSSGIS) | Route calculation | Germany (EU) |
| Photon (komoot), Nominatim (OpenStreetMap Foundation) | Place search | Germany (EU) / UK |
| Overpass API | Fuel stations and points along the route | EU |
| Open-Meteo | Weather | EU / Switzerland |
| Amazon Web Services (public terrain data) | Hill shading | USA |
| Google Maps and Esri satellite layers | Only if you pick these map styles | USA |
| Google (Sign-In, Play services, push messages) | Signing in, scanning the dash QR code, SOS notifications | Google Ireland / USA |
The UK and Switzerland have EU adequacy decisions. Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Push messages only tell the app to wake up; your position is then fetched from our EU server, not sent through Google.
6. Permissions the app asks for
- Location, also in the background: navigation, speed on the dash, and noticing your bike when you start a ride.
- Nearby devices, Bluetooth and local network: connecting to the motorcycle's dash.
- Notifications: ride status, SOS and invitations.
- Phone, call log and contacts: showing who is calling on the dash (stays on the phone).
- Screen capture: showing the map on the dash when you choose mirroring.
7. Payments
Paid features are sold through Google Play. Google handles the payment. We only receive whether your subscription is active, never card details.
8. Your rights
You can ask for access to your data, a copy of it (portability), correction, deletion or restriction, and you can object to processing or withdraw consent at any time. Write to privacy@mudnav.com; we answer within 30 days. You can also complain to a data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
9. Children
MudNav is meant for riders aged 16 and over. We do not knowingly collect data from younger children.
10. Security
All connections to our servers are encrypted (HTTPS). Access to the servers is by key only and limited to the operator. Security updates are installed automatically.
11. Changes
If this policy changes, we will update the date above and, for important changes, tell you in the app.