Privacy Policy

MichaelTan eenmanszaak · 15 October 2026

Data controller

MichaelTan eenmanszaak
Michael Tan
Chamber of Commerce (KvK) number: 85226467
Registered address: Hoogstraat 54, Tegelen
mjw-tan@outlook.com

What data do we collect?

Account and profile data: email address, display name, experience level and, if you fill them in, bio, place of residence and profile photo
Signing in with Google or Apple: if you choose this, we receive your name, your email address (with Apple possibly a relay address) and an account ID from Google or Apple, never your password
Horse data: name, age, breed and photos of your horse(s)
Location data: precise GPS position during navigation, ride recording and group rides in which you share your position, including in the background for as long as that is running
Approximate home area: your last known location rounded to roughly 1 km, used only to warn you about new scare alerts nearby, never visible to other users and deleted as soon as you turn those notifications off
Home base (optional): the precise spot of your stable or home that you enter yourself, with a privacy radius. Never visible to other users; we use it to hide the start and finish of your shared routes within that radius and, rounded to roughly 1 km, as your home area for scare alert notifications. You delete it yourself in Profile
Ride and route data: routes, waypoints, duration and the group rides you take part in, including your live position if you share it during a group ride
Photos you add to routes, horses or your profile
Emergency contact data: name and phone number of your emergency contact, optionally chosen from your address book
Social data: friends, blocked users and content reports you submit
Reports (scare alerts): type, location and description you share with other users
Reviews you post on routes
Subscription data: tier and expiry date
Push token and notification preferences
Technical data: app crashes and error logs via Sentry
Product analytics: use of routes, reports, reviews and app lifecycle via PostHog

Location data in detail

Your location is particularly sensitive data, so here we are specific:

We use your precise location (GPS), not just an approximate location.
Background location is only active while you are recording a ride, navigating or sharing your position in a group ride — not continuously.
During a group ride you can choose to share your live position. Only the participants of that ride session see your position, and only for as long as sharing is on. Sharing continues while the app is in the background or your screen is off, even if you are not navigating or recording a ride at that moment. Your phone then shows that your location is in use: on Android with the persistent notification “Your location is being shared with your group ride”, on iOS with the location indicator in the status bar. Before your phone asks for background location permission, the app first explains what we use it for. Your position is updated about every 5 seconds once you have moved at least 10 metres, and every 30 seconds while you stand still. For each group ride we only keep your last known position, not the track you have covered. Sharing, including in the background, stops as soon as you turn it off, leave the group ride or the ride ends (also when it expires automatically after inactivity); your last known position is then deleted immediately.
When the safety feature triggers (after sustained inactivity during a ride) or when you ask for help yourself, the app gets a WhatsApp message with your last known location ready for your emergency contact. See ‘Safety’ (Veiligheid) in your profile for details. EquiMaps does not send that message itself and sends no data to WhatsApp: it only goes out when you or someone with you taps send in WhatsApp. From then on, WhatsApp’s terms and privacy policy apply.
The emergency screen looks up the nearest street or place through your device’s geocoding service (Apple or Google); your coordinates are sent to that service for this.
Live link: if you have an emergency contact and the setting is on, the app creates a link with a random code for every ride. Anyone you share that link with (for example via WhatsApp) sees your first name, your horse’s name, your route during the ride and your latest position in their browser, updated about every 15 seconds. The link works until an hour after the ride and at most 12 hours after the start; we delete the track after 7 days. You turn this off under ‘Safety’ (Veiligheid) in your profile.
You can always disable location access in your device settings; without location access, navigation, ride recording, live sharing and the safety feature do not work. You disable the safety feature itself by not setting an emergency contact.

What do we use your data for?

Performance of the contract: account management and the core functionality of the app (navigation, ride recording, group rides, subscriptions)
Legitimate interest: security, troubleshooting, product improvement and moderating content posted by users
Consent: using your contacts to choose an emergency contact, background location during a ride and sharing your live position in a group ride

Processors (sub-processors)

Supabase Inc. — storage and authentication (US, SCCs)
Mapbox Inc. — map rendering (US, SCCs)
RevenueCat Inc. — subscription management (US, SCCs)
Apple Inc. / Google LLC — payment processing via App Store and Play Store subscriptions
OpenRouteService (HeiGIT, Heidelberg) — route calculation (EU)
Sentry (Functional Software Inc.) — error monitoring (US, SCCs)
PostHog — product analytics (EU hosting where configured, SCCs where needed)
Expo/EAS (650 Industries Inc.) — push notifications and over-the-air app updates (US, SCCs)

Sharing with other users

Some data is visible to other users of the app because the feature requires it: your profile name and photo with friend requests, group rides and reviews, and the content of reports (scare alerts) you post for other riders nearby. We only share your precise location with other users when you do so yourself: the position you add to a report, and your live position with the participants of a group ride for as long as you share it.

Waitlist on the website

On equestrianmaps.app you can leave your email address to hear when the app is available in the App Store and on Google Play. We then store only your email address, the language of the page and the time you signed up, in our database at Supabase (servers in Ireland). We use the address only for that one message, not for a newsletter, and do not share it with anyone. The legal basis is your consent; you can unsubscribe at any time via support@equestrianmaps.app.

Retention periods

Account and profile data: for as long as your account is active, then deleted within 30 days
Routes, ride data and photos: for as long as your account is active, then deleted within 30 days
Emergency contact data: until you change or remove it, and otherwise within 30 days of account deletion
Live position in a group ride: only your last known position, deleted immediately when you stop sharing, leave the group ride or the ride ends
Live link: the track and latest position of a ride, 7 days
Push token: until you log out or remove the app, or at most 12 months after last use
Crash logs (Sentry): at most 90 days
Product analytics (PostHog): at most 24 months
Waitlist: until we have emailed you at launch, and at most 3 months after that; sooner if you unsubscribe
Backups: at most 30 days after the source data is deleted

Your rights under the GDPR

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at mjw-tan@outlook.com. You can also delete your account and the associated data yourself via Profile → Account → Delete account (Profiel → Account → Account verwijderen). If you can no longer use the app, you can request deletion by email; we handle that within 30 days. See Delete your account and data.

You can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Minimum age

EquiMaps is intended for users aged 16 and over. If you are under 16, you need permission from your parent or guardian to use the app. We do not ask for your date of birth. If it turns out that we are processing data of someone under 16 without that permission, we delete the account and the associated data. Parents and guardians can contact us for this at mjw-tan@outlook.com.

Changes

We will notify you via the app of important changes to this policy.