Privacy Policy

Last updated: October 7, 2026

1. Introduction

Your privacy is important to us. This Privacy Policy explains how Mandal Software (arunavm.com), the developer of Samveis, collects, uses, and protects your personal information when you use our mobile application.

By using Samveis, you consent to the data practices described in this policy. If you do not agree, please do not use the application.

2. Data Controller

Mandal Software, a sole proprietorship (enkeltpersonforetak) registered in Norway
Contact: privacy@samveis.com or arunavm.com
Country of operation: Norway
Supervisory authority: Datatilsynet (the Norwegian Data Protection Authority)

3. Data We Collect

We collect the following categories of data:

• Account data: If you sign in with Google or Apple, we receive your name and email address (and, with Google, your profile picture address) and store them to run your account. We never receive your Google or Apple password.
• Live location: Your GPS position while you are in an active ride session, shared with the other riders in that session. It is held only for the duration of the ride (see Data Retention).
• Ride data: The session code, your rider name, when you joined and left, and ride statistics such as distance, duration, speeds and elevation gain.
• Saved routes: Routes you create or save (waypoints and, if you upload one, the GPX file), and the departure and return times you set for weather alerts. Your location is not tracked outside a ride.
• Device data: A random device identifier and the platform (Android, iOS or web) for your devices, used for ride sessions. We do not store your device name. Versions of the app before 1.0.64 also showed ads through Google AdMob, which used the advertising identifier; current versions show no ads and contain no advertising code.
• Subscription status: Whether you have Samveis Pro and when it expires. Payments are handled by Apple, Google or Stripe through RevenueCat. We never receive or store your card details.
• Technical data: Your IP address is processed by our hosting provider to deliver the service, prevent abuse and limit repeated requests. If you choose to share crash reports with developers, Apple and Google pass them to us in aggregated form. The app itself contains no analytics or crash-reporting library.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• Consent: You explicitly consent to location tracking when joining a ride session and accepting this policy.
• Contractual necessity: Location sharing is required to provide the core group-ride tracking functionality.
• Legitimate interest: Security and abuse prevention help us keep the service safe and reliable.

5. How We Use Your Data

• To display your position on the group ride map in real time.
• To provide weather forecasts along your planned route.
• To manage your subscription status (free vs. Pro).
• To improve app performance and fix bugs.

6. Data Retention

• Live location: Held only while the ride session is active and deleted when the session ends or is closed automatically (at the latest after 24 hours). A rider who stops sending updates is removed after 5 minutes.
• Ride participants and statistics: Deleted 7 days after the session ends. The session record itself is deleted 30 days after it ends.
• Saved routes: Kept until you delete them or delete your account.
• Device records: Deleted after 90 days without use.
• Weather alerts: Deleted 7 days after they are created.
• Account data: Kept while your account is active. You can delete your account in the app (Settings, Delete My Account), which removes your account, routes, ride data and device records from our servers straight away. Backups and logs at our providers are overwritten within 30 days.
• Crash reports from the app stores: Kept for up to 12 months.

7. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Cloudflare — Hosting and infrastructure for the Samveis servers, database and website (processes all app traffic including IP addresses). Cloudflare Privacy Policy
• RevenueCat — Subscription management (and Stripe for web payments, Apple and Google for in-app payments). RevenueCat Privacy Policy
• OpenStreetMap — Map tiles and the public route catalogue (© OpenStreetMap contributors). OSM Privacy Policy
• yr.no (MET Norway) — Weather forecasts. Only approximate coordinates along a route are sent, never your name or account. MET Norway Privacy
• Open-Meteo — Weather data. Open-Meteo Terms
• Google Sign-In / Apple Sign-In — Authentication.

8. Your Rights

Under the GDPR and Norwegian data protection law, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request restriction of processing.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw consent at any time by uninstalling the app or contacting us.
• Complain: Lodge a complaint with Datatilsynet.

You can delete your account yourself in the app. For any other request, contact us at privacy@samveis.com or via arunavm.com. We respond within 30 days.

9. Children's Privacy

Samveis is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent and believe your child has provided us with personal data, please contact us.

10. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (TLS), secure cloud infrastructure, access controls, and masked rider identifiers so other riders in a session never see your device or account ID.

If a personal data breach occurs that puts your rights at risk, we will report it to Datatilsynet within 72 hours and, where the risk is high, tell the people affected without undue delay.

11. International Transfers

Your data may be processed in countries outside the EEA by our third-party service providers. In such cases, we rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last updated" date above.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us through arunavm.com.

Back to Home