Privacy Policy

Coroo is designed as a local app. All your content – spots, notes, photos, collections, categories and tags – is stored exclusively on your device. There are no user accounts, no login, no cloud sync to Seitenkick servers, and no tracking of your content.

Seitenkick GmbH Forchstrasse 295a 8008 Zurich Switzerland support [at] coroo [dot] app

The following are stored on your device:

• spots (including coordinates), notes, collections, categories and tags in a local SQLite database inside the app's private storage
• attached photos as files inside the app's private storage on the device
• app settings and state (e.g. the most recently opened collection)

This data stays exclusively on your device and is never transmitted to Seitenkick GmbH or any other server. When you uninstall the app, the operating system removes all of this data.

If you allow it, Coroo accesses your device location to calculate the distance to spots or to create new spots at your current position. Location access happens only in the foreground (while you are using the app) and never in the background. Coordinates are stored exclusively on your device.

You can attach photos to spots, either from your gallery or directly via the camera. Photos are stored as files inside the app's private storage on your device – never in any cloud, never on our servers. Coroo can optionally read the GPS coordinates embedded in the photo (EXIF data) to place the spot automatically. You decide for each photo whether this should happen.

Coroo offers optional synchronization between your own devices (e.g. iPhone and iPad) over the local Wi-Fi network. Key facts:

• Data is exchanged directly between the devices (peer-to-peer) via Bonjour/Zeroconf.
• There is no Seitenkick GmbH server that relays or caches the data.
• No data travels over the internet – everything stays on the local network.
• Both devices must be on the same Wi-Fi network.

For this feature, the app needs the local network permission (iOS) or the Wi-Fi multicast permission (Android).

For map display, Coroo uses Google Maps provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Loading map tiles necessarily transmits data to Google (in particular your IP address, the requested map region, and possibly your requested location). We have no control over this processing. Google's privacy terms apply: https://policies.google.com/privacy

Coroo Premium is sold as a subscription through the App Store (Apple) or Google Play (Google). Payment is processed exclusively by the respective store – Seitenkick GmbH never receives your payment data. To manage subscription status (active/inactive, platform, expiry) we use RevenueCat, Inc. (USA). RevenueCat receives an anonymous, randomly generated device ID – no name, no email address, no payment data. Privacy information:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy
• RevenueCat: https://www.revenuecat.com/privacy

When you visit this marketing website, standard server access data is processed (IP address, user agent, requested URL, timestamp). This is used to serve the site and to mitigate abuse. If you use the feedback form, we store the content you submit (feature request or bug report). For votes on feature requests, we store an anonymous hash derived from IP address and user agent to prevent multiple votes per browser. This hash cannot be traced back to you. This website uses no ads and no analytics services from US providers (in particular no Google Analytics). No data is transmitted to third parties outside the EU.

To analyze visits anonymously (e.g. number of visits, pages viewed, referring site, approximate region, browser/device type) we use Umami – a privacy-friendly, data-minimizing analytics tool that we host ourselves on our own server in the EU (Germany). The controller is Seitenkick GmbH; the collected data never leaves our infrastructure and is not shared with third parties. Umami is deliberately privacy-friendly:

• No cookies are set and nothing is stored in your browser (e.g. localStorage).
• There is no cross-device tracking and no fingerprinting.
• Your IP address is only used briefly to derive an anonymous daily identifier and is not stored in clear text.
• Only aggregated statistics are produced that cannot be traced back to you.

We also record anonymously when the App Store or Google Play buttons are clicked, to understand how effective the page is – likewise without any personal reference. Because no cookies or comparable technologies are used and no personal profiles are created, no consent is required for this. The legal basis is our legitimate interest in a data-minimizing audience measurement (Art. 6(1)(f) GDPR and Art. 31 revFADP).

Depending on usage, the app requests the following permissions:

• Location (for creating spots and distance calculation)
• Photos / library (for attaching images to spots)
• Camera (for taking new pictures)
• Local network (for device sync over Wi-Fi)

You can revoke any permission at any time in your device's system settings.

Under the revised Swiss Data Protection Act (revFADP) and the EU GDPR, you have the right to access, rectify, delete, restrict the processing of and port any personal data we process about you. Since the app works almost entirely locally, this data is already under your direct control: delete a spot, a note or the entire app – and the data is gone. For requests concerning data we process server-side (e.g. submitted feedback), contact us at support [at] coroo [dot] app.

Within the app, you can export all your content as a backup at any time (Premium feature). To delete everything, simply uninstall the app – all locally stored data is removed in the process.

We may update this privacy policy when the app, third-party services, or the legal situation change. The current version is always available at coroo.app/en/privacy.