Privacy Policy
Last updated: 14 July 2026
This Privacy Policy describes how Square Wave AS processes personal data in connection with the iLende app, in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven). iLende is built on the principle of data minimisation: there are no user accounts, no advertising, and no third-party analytics or tracking tools.
1. Data controller
Square Wave AS, company registration number 934 409 302, Norway, is the data controller for the personal data processed through iLende. Privacy enquiries: privacy@squarewave.no.
2. Personal data we process
Location. If you grant location access, your location is processed only locally on your device to show your position on the map and to guide you during navigation. Location data is not sent to us and is not stored off your device.
Saved places (iCloud). Waypoints you save can sync across your devices through your private iCloud account using Apple's CloudKit. This data stays within your iCloud, is managed by Apple, and we never receive or have access to it. You can turn syncing off in your device's iCloud settings.
Technical data when loading maps. To display and download maps, the app requests map data from our storage and content-delivery provider, Cloudflare. Such requests automatically involve technical data such as your IP address, time and request metadata, as necessary to deliver content and protect the service against abuse. We do not use this data to identify, profile or track you.
Purchases. In-app purchases are handled entirely by Apple. We never receive payment-card details — only aggregated, non-identifying sales information from Apple.
3. Purposes and legal basis
We process the above data solely to provide and secure the app. The legal bases are:
Performance of a contract (GDPR art. 6(1)(b)) – to deliver the maps and features you downloaded or purchased.
Legitimate interests (GDPR art. 6(1)(f)) – in operating, securing and improving the service and protecting it against abuse.
Location is processed only locally on your device and results in no processing by us.
4. Data processors
We use data processors that process personal data on our behalf under data processing agreements in accordance with GDPR art. 28:
Cloudflare, Inc. – storage (R2) and content delivery (CDN) of map data. This is our only external cloud service provider. Cloudflare processes technical data (including IP address) to deliver content and secure the service.
All other processing takes place within Apple's platform – on your device and in the App Store – without us receiving personal data.
5. Apple
Apple provides the operating systems, app distribution and payment processing. When you make a purchase, Apple acts as an independent data controller for the payment under Apple's own privacy policy. Any crash or usage diagnostics are governed by your device settings and handled by Apple, not by us.
6. Transfers outside the EEA
Cloudflare is a global provider, and some technical data may be processed outside the EEA. Such transfers take place under appropriate safeguards in accordance with Chapter V of the GDPR, including the EU Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework.
7. Retention
We do not store personal data about you in our own systems. Technical delivery logs held by Cloudflare are retained for a short period for security and operations, then deleted or anonymised in accordance with the provider's routines.
8. Your rights
You have the right to access, rectification and erasure of personal data, as well as the right to restriction of and objection to processing, and data portability, to the extent the conditions in the GDPR are met. Because we operate no user accounts and do not identify users, we are in many cases unable to link technical data to you. You may at any time lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) if you believe the processing breaches the rules.
9. Changes
We may update this policy from time to time. Material changes will be published here with a new "last updated" date.
10. Contact
Square Wave AS, company reg. no. 934 409 302, Norway — privacy@squarewave.no.