Last updated 29 September 2026
We are the data controller for everything described here.
Signing in uses Sign in with Apple. We receive and store a stable identifier Apple generates for you, and an email address — which is Apple's private relay address unless you chose to share your real one. Your name is optional and usually absent. We store a hashed session token so you stay signed in, and which device you signed in on, so a device barred from contributing stays barred whoever signs in on it. The token itself is never written down. Basis: performance of our agreement with you. The account is kept until you delete it. A session is kept until you sign out, delete your account, or leave it unused for 180 days.
From the first time you open the app, it keeps a random secret on your phone, and we store a hash of it. We use it only to check that a sign-in comes from that phone before anything you did on it signed out moves into your account. Basis: our legitimate interest in keeping each phone's history its own. Deleted with your account for every phone you are signed in on, unless that phone is barred from contributing.
Places you add, photographs you upload, ratings and reviews, corrections and answers you give, and reports you send. You need an account for these. They are attached to it and, except ratings and reviews, to a random identifier stored on your device, so a contribution can be traced to the device that made it.
Answers and corrections stay attached to you for 90 days, so you can still see and change them under Your contributions. After that we remove your account and device identifier from them, and they still count for the place. "Not sure" and "Doesn't apply here" stay attached until you delete your account. Places, photographs, ratings and reviews stay attached to your account until you delete it. Basis: performance of our agreement, and our legitimate interest in a usable, trustworthy map.
When you mark the road you have just driven as Difficult or Easy, the report carries that stretch — the last few hundred metres, taken from your route, or, if you had left it, up to 90 seconds of your phone's positions, which we match to the road and keep as the road's line. It is attached to your account for two years, and after that kept without it.
A photograph is re-encoded when it arrives, which strips the metadata out of the image file itself. We do keep two things from it separately: the date it was taken, and the coordinates recorded by the camera. The coordinates are used to place the photograph and to check it belongs where it was filed. They are never displayed to anyone.
When you answer a question about a place — whether the tap works, whether it is open — we record your answer, the date, and whether you told us you were there at the time. Taken together, those answers are a record of places you have visited. The answers are linked to you for 90 days. Our points record, which notes where and when you answered, stays until you delete your account.
Places you save, mark as somewhere you would return to, or put in a list are stored the same way. Lists are private to you, and deleting your account deletes them and your saved places.
The dimensions, weight, fuel and gas setup you enter so routing can avoid what will not fit, and the optional details you can set for a trip — travelling with children, travelling with a dog — which change which places are suggested. It is stored against your device until you sign in, and against your account from then on, so it follows you to another phone. Basis: performance of our agreement. Kept until you delete the vehicle or your account.
If you buy Getaway+, Apple sends us its record of the subscription: its identifier, the plan, when it started and ends, and whether it is a trial, renews or was refunded. We store it with the random identifier stored on your device, and your account once you sign in, to give you Getaway+. Basis: performance of our agreement. Deleted 30 days after it ends or is refunded. Deleting your account removes your account from it, not the device identifier.
If you choose "Hide photos from this person" on a photo, we record that you did, so their photos stay hidden from you: your account, or your device's identifier if you are not signed in, and theirs. It is never shown to them or to anyone else. Basis: performance of our agreement. Kept until you unhide them under You → Privacy → Hidden photos, or either of you deletes their account.
When you plan a route, your position and your destination are sent to our server and passed to our own routing engine, which runs on the same infrastructure. Routes are not stored. There is no table of where you have been, and your position and destination are never logged.
The app remembers, on your phone, roads you keep choosing over the suggested route, and sends them with a route request so the route can follow them. Our server uses them for that one request and keeps nothing.
When you search for a place by name, the text you typed and a coordinate near you are sent to our server, which forwards them to OpenStreetMap's search service. That service sees our server, not your device. The text is not stored on our side unless you have turned usage statistics on.
Under You → Privacy there is a switch called "Share usage data". It is off unless you turn it on. With it on, the app records which screens and actions are used, plus the text you type into search, and sends it with a random identifier stored on your device, your device model, your iOS version and which build of the app you are running. That identifier is deliberately a different one from the one attached to your contributions, so the two cannot be joined. Basis: your consent, which you can withdraw at any time by turning the switch off. Kept for 180 days.
When you finish a drive, the app asks whether you want to help improve routes with your drives, and stops asking once you answer. It is off unless you say yes, and you can change it under You → Privacy. With it on, each drive sends the roads you drove, the hour and whether it was a weekend, how your pace on each compared with what we expected and how long you stood still, your vehicle type, and when the drive ended. It sends no coordinates and no route line. We add those figures to averages kept for each road and hour, and keep nothing that says who or which phone they came from. Until you answer, finished drives wait on your phone for up to two weeks: Yes sends them, and Not now deletes them. Basis: your consent, which you can withdraw at any time by turning it off. The averages are kept with no time limit, and what was already added cannot be taken back out, because nothing in them says it was yours. A random number sent with each drive, so that a resend is not counted twice, is deleted after 30 days.
Our web server records each request it answers: the time, which address on our server was asked for, the response and how long it took, and the app and iOS version your phone sends with every request. The address can name a place you opened. It never includes your location, anything you typed, your IP address or your account. Basis: our legitimate interest in keeping the service working and finding out why it did not. Kept for 30 days.
The verdict of every automated check, and every report anyone sends, together with the identifier of the device that sent it. When we remove or do not publish something of yours, or stop you from contributing, we record why: the rule, the reviewer's note, and the report that led to it, if there was one. When the automatic check refuses text you send, we record only the reason and that software decided, never the text itself. If you are signed in, the app tells you what we decided and why. If you disagree, you can complain to the Communications Regulatory Authority (RRT) or go to court. Basis: our obligations under the Digital Services Act, and our legitimate interest in being able to explain a decision. Kept for as long as we may need to justify it.
Your IP address is used briefly in memory to stop one device flooding the service, and is never written to disk. Drive traces recorded during navigation stay on your phone — nothing uploads them, and you can export them yourself under You → Privacy. The only positions that leave it during a drive are the short stretch a road report carries, when you send one.
If you allow Motion & Fitness, the app reads it on your phone only to find where you parked and whether your vehicle has moved since. It never leaves your phone.
Where you left your vehicle, and the places you recently drove to or stopped at, stay on your phone too. The app uses them to show you the way back to your vehicle and to ask you about a place later. Nothing uploads them.
OpenAI Ireland Limited — photographs and contributed text are sent to OpenAI's moderation service to be checked for objectionable content. This is the one place your content leaves our infrastructure. OpenAI does not use it to train their models, and their moderation endpoint retains nothing — with one exception they apply regardless: an image their own system flags as child sexual abuse material is retained for manual review and reported. We send no account, name or device identifier with it.
OpenStreetMap Foundation — search text and an approximate coordinate, as described above, forwarded by our server.
Apple — handles the sign-in itself, and knows you have signed in to this app. Apple sells Getaway+, and a purchase gives Apple the random identifier stored on your device. We verify what Apple sends us against Apple's public keys.
Our hosting provider (Hetzner) — runs the servers and the database in the European Union. They do not process your data for their own purposes.
We share nothing with anyone else, and we do not sell data.
Everything is stored in the European Union. The single transfer outside it is the moderation check: OpenAI Ireland Limited is our contracting party, and it processes the content in the United States. OpenAI is not certified under the EU–US Data Privacy Framework, so that transfer rests on the European Commission's Standard Contractual Clauses, which form part of our data processing agreement with them.
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to what we do with it, and to receive it in a portable form. Where we rely on your consent — usage statistics and drive data — you can withdraw it at any time, in the app, without asking us.
Write to support@getawayapp.eu and we will answer within a month. There is no charge.
If you are not happy with how we handled it, you can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt), or to the supervisory authority where you live.
Getaway is not aimed at children. You need to be at least the minimum age in your country to have an account, as listed in section 4 of the terms of use.
Text you submit can be refused automatically.
If we want to use your data for a new purpose, we will tell you before we do.
See also our terms of use.