RouteSketcher for iPhone

Privacy Policy

Last updated: October 5, 2026

Need help with the app, your subscription or your data? Email us:

In the app it’s also under Settings > Contact support.

This Privacy Policy explains how the RouteSketcher app for iPhone, including its Share extension and Live Activity (the “App”), handles your data. The website routesketcher.com has its own Privacy Policy, which applies to your routesketcher.com account and to anything you upload to it from the App.

The Short Version

You don’t need an account. The App works without signing up.
Your routes and activities are stored on your iPhone and in your own iCloud. We can’t see them.
Your location is used on your iPhone to guide you and record your activity. It isn’t sent to us.
No ads, no tracking and no analytics tools in the App. We don’t sell your data.
Your drawings and account details only reach our servers when you ask: when you snap a drawing to roads, connect your routesketcher.com account or upload a route.

Who We Are

RouteSketcher is operated by Tonnoz Services, which is responsible for the data described in this policy. You can reach us at [email protected].

What Stays on Your iPhone and in Your iCloud

What the App Stores

Routes you import or draw: the name, the line on the map, your original drawing, its length and your choices for it, like the direction and the starting point.
Activities you record: the GPS track (positions with times), distance, moving time, how much of the art you drew, the activity type and the date.
Settings such as voice guidance, haptics and units. These stay on your iPhone and are part of your iPhone backup if you make one.

iCloud Backup

If you’re signed in to iCloud, the App syncs your routes and activities to the private database of your own iCloud account, using Apple’s CloudKit. That’s how they survive a reinstall and appear on your other iPhones. Your private iCloud database belongs to your Apple Account: we, as the developer, have no access to it. Apple stores it under Apple’s Privacy Policy and it counts toward your iCloud storage. Without iCloud, everything stays on your iPhone only, and the App tells you it isn’t backed up.

Deleting It

Delete a route or an activity in the App and it’s removed from your iPhone and from your iCloud. To remove everything, delete the App, then delete RouteSketcher’s data in your iCloud storage settings (Settings, your name, iCloud, then manage your storage).

Permissions the App Asks For

Each one is optional: without it, the App works with fewer features. You can change them at any time in your iPhone’s Settings > RouteSketcher.

Location (While Using the App)

To show where you are, guide you along a route with voice and haptics, record your activity, place shapes near you, and sort the Discover gallery by distance. During an activity it keeps working while your screen is locked, and iOS shows the location indicator. Your location is processed on your iPhone and only saved inside the activities you record. It is never sent to us: Discover downloads the whole public gallery and sorts it on your iPhone.

Camera

Only to scan a RouteSketcher QR code. The camera image is read on your iPhone while you scan. Nothing is saved or sent.

Photos (Add Only)

To save the share cards, overlay images and reels you choose to save. The App can add to your photo library but can’t see it.

Live Activities

To show your progress on the Lock Screen and in the Dynamic Island during an activity. It’s updated by the App on your iPhone, with no server involved. You can turn it off in the App’s Settings.

Voice guidance is spoken by iOS on your iPhone. Share cards, overlay images and reels are made on your iPhone too.

When the App Connects to routesketcher.com

Our server, routesketcher.com, is hosted by Hetzner in Germany and protected by Cloudflare. Like any internet request, each one the App makes shows your IP address and basic technical details, such as the App and iOS versions. The App connects in these cases:

Importing Routes and Discover

When you open or scan a routesketcher.com link, share one to the App, or browse Discover, the App downloads the public route and its preview images from routesketcher.com. We don’t need to know who you are for that.

Reporting a Sketch

When you report a sketch in Discover, the App sends its link and the reason you picked to routesketcher.com. We store them with a one-way fingerprint of the App’s App Attest key, so each install counts once, and use them only to review the report and keep the gallery safe. The person who made the sketch never sees who reported it.

Snapping a Drawing to Roads

When you tap Snap, the App sends the points you drew to routesketcher.com. Our server loads the roads for that area from OpenStreetMap data, on our own server or, when it’s busy, on public Overpass servers (they receive only the map area, from our server, never your IP address). We snap your drawing, send it back and don’t keep it. Routes drawn in Freestyle never leave your iPhone.

Abuse Protection (App Attest)

To keep Snap, Upload and reports from being misused, the App uses Apple’s App Attest. Your iPhone creates a key that proves a request comes from the real RouteSketcher app, and Apple confirms it. The key and the token we issue for it are kept on your iPhone. They don’t identify you, and we don’t store them, apart from the one-way fingerprint saved with a report. We also limit how many requests each key and IP address can make, with counters kept briefly in memory and never saved.

Logs and Errors

Our server and Cloudflare keep short technical logs (IP address, time, the address requested) for security and to fix problems. Errors on our server are reported to Sentry. These are kept for up to 90 days.

Connecting Your routesketcher.com Account (Optional)

In Settings > routesketcher.com you can connect the account you already have on the website, to bring your sketches into the App and upload routes you draw. The App never creates accounts: if your sign-in matches no routesketcher.com account, the App signs you out and any sign-in record this created is deleted right away.

Signing in: with Apple, Google, or email and password, the same way as on the website. Apple shares the email of your Apple Account, or a private relay address if you chose Hide My Email. Google sign-in happens on Google’s own page in a secure system sheet. Your password goes over an encrypted connection to Supabase, our sign-in provider in the EU, and the App never stores it.
What the App receives: your account ID, username, email address and how you signed in, plus the list of your sketches, including private ones. Your sign-in session is kept in your iPhone’s Keychain.
Uploading a route: the App sends the route’s name, its line on the map and your original drawing. It becomes a private sketch in your account. If you make it public, anyone can see it in the website gallery and in Discover, including where it starts.
Activities stay private: your recorded GPS tracks are never uploaded to routesketcher.com.
Disconnecting: Settings > routesketcher.com signs the App out. Sketches you added stay in your Library. To delete your website account and everything in it, use Delete my account on your routesketcher.com profile page, or email us.

Your account and the sketches in it are covered by the routesketcher.com Privacy Policy.

Subscriptions and Payments

RouteSketcher Pro is sold through Apple’s App Store. Apple handles the payment: we never see your card details or your Apple Account. We use RevenueCat to check and manage your subscription. It receives your App Store purchase records (which plan, prices, dates and transaction IDs) with a random ID the App creates, not your name or email. Apple sends us sales reports that don’t identify you.

No Ads, No Tracking

The App has no advertising, no analytics tools and no tracking across other apps or websites. It doesn’t use the advertising identifier. If you chose to share analytics with app developers in iOS (Settings > Privacy & Security > Analytics & Improvements), Apple sends us anonymous crash reports and usage statistics, which we use to fix bugs.

Service Providers

These providers process data for the App, only as far as needed for what’s described above:

Apple: iCloud backup (CloudKit), App Store purchases, App Attest, Sign in with Apple and Apple Maps (the maps in the App, and directions to a route’s start if you open them)
Hetzner: Hosting of routesketcher.com (servers in Germany, EU)
Cloudflare: Network protection for routesketcher.com, and storage of route preview images
Supabase: routesketcher.com accounts and sketches (servers in the EU), only if you connect your account
RevenueCat: Subscription status
Sentry: Error monitoring on our server
OpenFreeMap: Map tiles for reels. When you make a reel, the App loads the map around your route from OpenFreeMap, which sees your IP address and the map area requested
OpenStreetMap and Overpass: Road data for snapping, requested by our server with only the map area
Google: Only if you sign in with Google, or open directions in Google Maps

Legal Basis for Processing

Under the GDPR, we rely on:

Contract: to provide what you ask for, like snapping, importing, connecting your account, uploading routes and your subscription
Consent: for location, camera and photos, which you give and can withdraw in iOS
Legitimate interests: to keep our service secure and stop abuse (App Attest, request limits and logs)
Legal obligation: to keep financial records for tax purposes

How Long We Keep Data

Routes, activities and settings: On your iPhone and in your iCloud, until you delete them
Drawings sent for snapping: Not kept
Location: Never sent to us
Server logs and error reports: Up to 90 days
Reports of a sketch: As long as the reported sketch exists
Your routesketcher.com account and sketches: Until you delete them or your account
Support emails: 2 years after our last contact

Security

Everything the App sends travels over HTTPS. Your sign-in session and App Attest key are kept in the iPhone’s Keychain, and Apple encrypts your iCloud data. No system is completely secure: if you think something is wrong with your account, email us right away.

International Data Transfers

RouteSketcher is based in the European Union. Some providers, such as Apple, Cloudflare, RevenueCat and Sentry, may process data outside the EU. When they do, appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Your Rights

Wherever you live, you can ask us to access, correct, delete, restrict or export the personal data we hold about you, object to how we use it, or withdraw your consent. Most App data is already in your hands: it lives on your iPhone and in your iCloud, and you can export activities as GPX. For anything else, email [email protected] or our data protection contact at [email protected]. We answer within 30 days.

You can also complain to a data protection authority, such as the Dutch Autoriteit Persoonsgegevens or the one where you live. We’d appreciate the chance to sort it out with you first.

Children’s Privacy

The App is not intended for children under 13, and in the European Union or European Economic Area, children under 16 need a parent’s or guardian’s consent. We don’t knowingly collect personal data from children under 13. If you believe a child has given us personal data, email us and we will delete it.

Changes to This Policy

When the App changes how it handles data, we update this page and the date at the top. We announce significant changes in the App or on this page before they take effect.

This Privacy Policy is provided for informational purposes. For legal advice specific to your situation, please consult with a qualified attorney.