Politique de confidentialité

In short

• iLende has no user accounts, no ads, no analytics or tracking tools and no cookies. That applies to the apps and to the website.
• Your location stays on your device, in the app and on the website. In the app, search and route calculation also happen on your device.
• What we or our providers receive is what it takes to deliver the map and the website: technical data when map files and pages are fetched, and whatever you write to us by email. If you share crash reports with app developers, we receive them through Apple or Google. If you test new versions through TestFlight, we also receive that through Apple.

1. Data controller

Square Wave AS, company registration number 934 409 302, Norvège, is the controller of the personal data processed in the iLende apps and on the ilende.no website. You can send questions about privacy to privacy@squarewave.no.

2. The apps for Apple devices and Android

Location

If you give the app access to your location, it uses it to show where you are, to let the map follow you and to guide you during navigation. On iPhone, iPad and Mac the app uses your location only while the app is in use. On Apple Watch your location can also be updated with your wrist lowered while you follow your position on the map.

Your location is processed only on the device. It is not sent to us, and the app keeps no location history.

What is stored on your device

The app stores where the map was last, the waypoints you save yourself (name, position, date and symbol), your settings, the last places, huts and addresses you opened from search (up to eight), the maps you have downloaded and a cache of map data. All of this sits in the app's own storage on the device and is included in your device backups. You delete it by deleting the waypoints and maps in the app, or by deleting the app; the list of recent search results goes when the app is deleted.

Search and routes

Search looks through the place names, huts and routes the app has fetched to your device, and routes are calculated on the device. What you search for and where you want to go is not sent to us.

Background downloads

Map downloads continue when you leave the app, and the Lock Screen can show how far they have come. The Lock Screen view is created on the device, and the app uses no push notifications. When we publish new map data, the app can update the maps you have downloaded over Wi-Fi. So the app may fetch map files even when you are not using it.

Apple Watch

The maps on the watch come straight from your iPhone, over the connection between the phone and the watch. The watch only sends back which maps it has and how much space it has free. Location and waypoints are not sent between the devices this way, and none of it reaches us. The watch does not fetch anything from the internet for iLende.

Ratings

The app may ask you to rate it on the App Store. Apple shows that dialog. The app only counts on the device how often it has asked.

The Android app

The Android app works the same way as the app for Apple devices: your position is processed only on the device, is not sent to us and is not stored as a history, search and route calculation happen on the device, and the map is fetched from our file server as described in section 3. What is said above about what is stored on the device and about downloading in the background applies here too, but the progress is shown as a notification on the phone.

The phone finds your position with Android's location services (Google Play services), according to the settings on the phone and Google's own terms. If you have turned on backup in Android, your waypoints and settings are included in the backup in your Google Account; downloaded maps are not. The rating dialog in the Android app is shown by Google Play.

3. Map data from our file server

Both the app and the website fetch the map from our file server, tiles.ilende.no, which is run by Cloudflare. With each request Cloudflare sees your IP address, the time, which browser or which version of the app you use, and which part of which map file is fetched. Because the map files are divided by area, the requests can show roughly which areas you are looking at. When the map follows your position, in the app or on the website, the requests follow too. Your location itself is still never sent.

This data is used only to deliver the map and to protect the service against misuse and overload. We do not use it to identify, profile or track you. The legal basis is our legitimate interest in delivering and securing the service (Article 6(1)(f) of the General Data Protection Regulation). Cloudflare processes the data on our behalf.

Cloudflare also collects error reports about requests that fail (Network Error Logging). Your browser then sends Cloudflare a report with your IP address, the address that failed, the time and the type of error. The browser remembers this setting for up to seven days.

4. Waypoints in iCloud (iLende Pro)

With iLende Pro your waypoints can sync between iPhone and iPad through your private iCloud database at Apple. For each waypoint the name, position, date and symbol are synced. The Mac version and the Android app do not sync. Syncing requires you to be signed in to iCloud. The data sits in your iCloud, and Square Wave cannot read it.

How to delete it: delete the waypoints in the app, and they disappear from iCloud too. You can also delete all iLende data in iCloud on your iPhone or iPad under Settings → [your name] → iCloud → Manage Storage → iLende.

5. Buying iLende Pro

iLende Pro is bought through the App Store in the apps for Apple devices and through Google Play in the Android app. The store you buy from handles the payment and is an independent controller for the purchase data, which it processes under its own privacy policy: Apple for the App Store and Google for Google Play. We never receive your card or account details. Whether you have bought iLende Pro is checked by the app on your device, directly with the App Store or Google Play; we have no server of our own that checks purchases.

From Apple we receive only aggregated sales figures that do not identify you. From Google we receive sales reports and details of each order as Google provides them to developers in the Google Play Console, such as the order number, price, time and the country the purchase was made from. We use them for our accounts and to help you if you ask about a purchase.

6. Crash reports and usage statistics

The app contains no analytics or crash reporting tools. If you have turned on sharing with app developers in your device's privacy settings, Apple sends us crash reports and aggregated usage statistics. A crash report shows the device model, the versions of the operating system and the app, and what the app was doing when it crashed. You control this yourself under Privacy & Security → Analytics & Improvements in your device's settings.

The same applies to the Android app through Google: if you have turned on sharing of usage and diagnostics data on your phone, Google gives us crash reports and aggregated statistics in the Google Play Console, as Google collects and provides them. You control this in your phone's settings.

We use the crash reports and statistics to find and fix bugs and to improve the app. The legal basis is our legitimate interest in an app that works (Article 6(1)(f)), and you decide whether they are shared. Crash reports we download to fix a bug are deleted once it is fixed, and after 24 months at the latest.

If you test new versions through TestFlight, we receive, through Apple, the name and email address you were invited with and the feedback you send. We use them to test new versions with you (Article 6(1)(f)), and we remove you as a tester when you ask.

7. The ilende.no website

Hosting

The website is hosted by Vercel. To deliver the pages and secure the service, Vercel processes your IP address, the time, the address of the page you ask for and your browser type in server logs. Vercel keeps the logs for a short time under its own routines; we have not set up any storage of them. The legal basis is our legitimate interest in delivering and securing the website (Article 6(1)(f)). Vercel processes the data on our behalf.

The map

The map on the website is fetched from tiles.ilende.no at Cloudflare, as described in section 3. The lists of huts, routes and places, the search files and an outline of the country borders come from ilende.no itself, at Vercel.

Search

When you search on the website, your browser fetches small search files from ilende.no that are named after the first letters you type (for example “bes” for “Besseggen”). The addresses of those files end up in Vercel’s server logs, as described above. The search itself happens in your browser. A search typed on the front page is handed to the map inside your browser, not sent to the server; only with JavaScript turned off does it go to Vercel as an ordinary address.

No cookies and no analytics

The website sets no cookies and uses no analytics, advertising or tracking tools. It loads no fonts or scripts from anyone else.

Settings in your browser

The website keeps a few settings in your browser's local storage (localStorage), so they are remembered next time you visit:

• the map type you chose (ilende.basemap);
• that you declined the suggestion of another language (ilende.langSuggest);
• which graphics quality your device can manage, and whether a notice about 3D terrain has been shown (ilende.gpuTier, ilende.renderScale, ilende.terrainWarned);
• whether the side panel next to the map is open (ilende.panel).

The map page may also leave a short-lived marker in the tab's session storage (sessionStorage: ilende.reloadedAt, ilende.chunkReloadAt), so that it reloads itself at most once a minute after a graphics or update problem. The marker disappears when you close the tab.

None of this is sent to us, and it contains neither location nor searches. This storage is needed for the website to work the way you ask it to, so it does not require consent (section 3-15 of the Norwegian Electronic Communications Act). You can delete these settings at any time under website data in your browser's settings.

Location

The map has a location button. Only when you tap it does your browser ask whether ilende.no may see your location. If you say yes, the browser gives the location to the page, and the map uses it only in your browser: to show where you are, move the map there and follow you. On iPhone and iPad, Safari may also ask for access to motion and orientation so the map can turn the way you face. The direction is used the same way, only in your browser. On other phones the browser gives the map the compass direction without a question of its own, also only after the tap. This happens only because you ask for it, and needs no consent beyond the browser’s own question (section 3-15 of the Norwegian Electronic Communications Act). To the extent it counts as processing by us, the legal basis is our legitimate interest in showing you what you ask for (Article 6(1)(f) GDPR).

Your location and direction are not sent to us and are not stored in your browser. While the map follows you, the address bar shows the view you chose before you tapped. If you then move the map yourself, the address shows the new view, which can be close to where you are, and it also goes into your browser history. Keep that in mind before you share the link. Your browser keeps your answer by its own rules, and you can change it in the browser’s settings.

When the map moves to where you are, your browser fetches the map for that area from tiles.ilende.no, just as it does when you move the map yourself (see section 3). How your location is found (GPS, Wi-Fi or the mobile network) is up to your browser and operating system, under their own terms.

Links to the App Store

When you follow a link to the App Store, Apple's privacy policy applies there. In Safari on iPhone and iPad, the pages can also show a banner for the iLende app. Safari fetches it from the App Store itself when the page loads; we receive no information about it.

ilende.mans.no

The same website is also served at ilende.mans.no, which we run ourselves in Norway. There the IP address, the time, the address of the page and the browser type are kept in the server's access log until the log is rotated, usually within a few days.

8. Email to us

When you write to support@squarewave.no or privacy@squarewave.no, we process what you write, your email address and your name in order to answer you. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f)), or our contract with you when the enquiry is about a purchase (Article 6(1)(b)). The email is stored with our email provider, Apple (iCloud Mail). We delete the enquiry no later than 12 months after the case is closed.

9. Providers and transfers outside the EEA

Cloudflare and Vercel process the data on our behalf under data processing agreements (Article 28 of the General Data Protection Regulation). Both are American companies, and data may be processed outside the EEA. Such transfers rely on the EU–US Data Privacy Framework and the EU's standard contractual clauses. Apple and Google process data under their own privacy policies.

Email to us is stored with Apple (iCloud Mail). Apple Inc. is an American company, and the email may be stored outside the EEA. Apple states that it transfers personal data from the EEA under the EU’s standard contractual clauses.

10. How long data is kept

11. Your rights

You have the right to access the data we hold about you and to have it corrected or deleted. You can ask us to restrict processing, object to processing based on legitimate interest, and receive your data where the right to data portability applies. Write to privacy@squarewave.no. Because we have no user accounts, we usually cannot link technical data, such as an IP address in a log, to you, but we will help you as best we can. You have no obligation to give us any information; the app and the website work without you telling us anything about yourself.

We make no automated decisions about you. If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the data protection authority in the country where you live.

12. Changes

We give notice of material changes on this page and in the app's release notes. The date at the top shows when this policy applies from, and previous versions are linked from there.

13. Contact

Square Wave AS, company registration number 934 409 302, Norvège. Email: privacy@squarewave.no.