Privacy Policy
Effective from October 9, 2026
Who we are and what this policy covers
This policy explains what Been To does with your data. It applies to the Been To app for iOS and Android, published by Treefox AB.
Treefox AB, organization number 559492-2477, Märsta, Sweden, is the data controller. You can reach us at dev@treefox.app.
The short version: your map, your trips, and your photos stay on your device and in your own iCloud. We do not have an account for you and we cannot see your map. Some features send coordinates to our servers for a moment to compute a route or a search result. We use a few analytics and payment services that receive a device identifier and usage events. We never sell your data.
Data that stays on your device and in your iCloud
Been To stores these on your device only:
- Location history. With your permission, the app records your location in the background and marks the places you have been on your map. The app needs this to work. The location data and the time of each visit are stored in a database on your device.
- Trips and areas you add. Trips you draw or import, and areas you mark as favorites.
- Photo metadata. With your permission, the app reads the date and location of photos in your photo library to suggest past trips and to show photos on the map. The app reads this on your device. It does not upload your photos or their metadata.
- Name, profile picture, and settings. A name and a profile picture you pick, and your map style and other preferences.
On iOS, the app backs up your database to the iCloud Drive storage of your own Apple account. Backups are on by default, and you can turn them off under Settings. Apple stores this data under the Apple Privacy Policy. We cannot read your iCloud data.
On Android, a backup is a file that you export and import yourself through the system file picker. If you turned on Android's own app backup, your phone may also copy the app's data to your Google account, under the Google Privacy Policy. We cannot read that data either.
You can delete this data at any time. Delete a backup in the app under Settings, or delete the app to remove the data on the device.
Data sent to our servers, and why
Some features send a small amount of data to servers that Treefox AB runs. The app sends this data only when you use the feature.
| Feature | What is sent | Why |
|---|---|---|
| Add a train trip | Start and end coordinates of the trip | To compute the rail route |
| Add a road trip | The coordinates of the trip | To compute the road route |
| Add a flight | The airport codes of the flight | To draw the flight path |
| Search for an area | The search text | To find the area |
| Nearby areas and area boundaries | Which map tiles to download, for the part of the map you look at | To show the areas near you and their boundaries |
Every request also carries your IP address, as all internet traffic does. We do not send your device identifier with these requests, so we cannot connect a request to you.
Our route servers keep an access log with your IP address and the coordinates of each request for 30 days, for security and troubleshooting. Place search and map downloads are not logged.
Cloudflare, Inc. (USA) runs the area search and serves the map data. Cloudflare sees your IP address for those requests and keeps aggregate traffic statistics. Some area images and descriptions load directly from Wikimedia, which sees your IP address.
Data sent to other companies
We use a few services from other companies. Each one is a data processor that works for us under a contract, except Apple and Google, which are independent.
| Service | Company and location | What it receives | Why |
|---|---|---|---|
| Mixpanel | Mixpanel, Inc. (USA). Data is stored in the EU. | A random identifier for your device, your device model and operating system version, your IP address and the approximate location (city and country) that Mixpanel derives from it, and events about how you use the app, for example which screens you open and whether you subscribed, with the plan and price. | To understand how people use Been To and to improve it. |
| RevenueCat | RevenueCat, Inc. (USA) | The same device identifier, your IP address, your purchase and subscription history, and on iOS Apple's install attribution token. | To manage subscriptions and free trials. |
| Singular (iOS only) | Singular Labs, Inc. (USA) | The same device identifier, your device model and iOS version, your IP address, app launches, and whether a free trial started and converted, with the amount. | To measure which advertising campaign led to an install. |
| Apple (iOS only) | Apple Inc. | Your purchases through the App Store, your iCloud backups, the part of the map you look at, and the place names you type when you add a past trip. | Payment, backups in your own account, and the map. |
| Google (Android only) | Google LLC (USA) | Your IP address and the part of the map you look at, when the app loads map tiles. Also the place names you type when you add a past trip. The Google Privacy Policy applies. | To draw the map and to find places. |
On iOS the device identifier is the vendor identifier that Apple gives each app publisher. On Android it is a random ID that the app creates when you first install it. It is not your name, email, or advertising identifier. We do not ask for the advertising identifier, and we do not show ads.
Mixpanel, RevenueCat, and Singular are in the United States. We transfer data to them under the European Commission's standard contractual clauses, which are part of our contract with each of them. For data from the United Kingdom, the UK addendum to those clauses applies. Their policies are here: Mixpanel, RevenueCat, Singular.
We also share data when the law requires it, for example to answer a court order, or to protect our rights or someone's safety.
We never sell your data.
Why we are allowed to process this data
Your map, trips, and photo data stay on your device and in your own iCloud. We never receive them, so we do not process them. For the data that does reach us or our services, the GDPR and the UK GDPR require a legal basis for each purpose. These are ours.
| Purpose | Legal basis |
|---|---|
| Compute routes and search for places | Performance of the contract: the app cannot do this without sending the request. |
| Manage subscriptions and trials | Performance of the contract, and our legal duty to keep accounting records. |
| Usage analytics and install attribution | Our legitimate interest in understanding and improving the app and in measuring which campaigns bring new users. We use a pseudonymous device identifier, never the advertising identifier, so nothing links you across apps or to advertising networks. Campaign results come through Apple's SKAdNetwork, which reports no identifier at all. We do not profile you for ads. You can object at any time, see Your rights. |
| Answer legal requests | Legal obligation. |
How long we keep data
| Data | Kept for |
|---|---|
| Analytics events in Mixpanel | 2 years, then deleted |
| Subscription records in RevenueCat | As long as you have a subscription, and then 7 years, as Swedish accounting law requires |
| Install attribution in Singular | Up to 60 days for data about your device. Campaign totals without identifiers are kept longer. |
| Server request logs | 30 days on the route servers. Search and map downloads are not logged. |
Your rights
Under the GDPR and the UK GDPR you can:
- Ask what data we hold about you, and get a copy.
- Ask us to correct or delete it.
- Object to processing based on our legitimate interest. Turn off "Share usage analytics" under Settings > Privacy in the app, and nothing more is sent to Mixpanel or Singular. Email us to have the data already collected deleted.
- Ask us to restrict processing while we handle your request.
- Receive your data in a portable format. Your map and trips are already yours: the app can export them under Settings.
- Complain to the Swedish Authority for Privacy Protection (IMY), imy.se, to the ICO, ico.org.uk, if you live in the United Kingdom, or to the authority in your country.
To use a right, email dev@treefox.app. We answer within one month.
We do not have an account for you, so we cannot find your analytics data from your name or email. To delete your analytics data, use "Request deletion of my data" under Settings > Privacy in the app. It opens an email to us with the identifiers filled in. We then delete your data from Mixpanel, RevenueCat, and Singular.
If you no longer have the app and cannot give us the identifier, we cannot find your data. In that case it is deleted after the retention period.
You can stop all collection by deleting the app and your iCloud backups.
Children
Been To is not for children under 13. We do not knowingly collect data from them. If you believe that a child under 13 uses the app, email dev@treefox.app and we will delete the data.
Security
Your map and trips are stored on your device and in your own iCloud account, protected by your phone's operating system and by your Apple or Google account. Data sent to our servers and to the services above travels over encrypted connections (HTTPS). Only the people who run Been To can access the analytics and subscription services, and they need it to operate the app.
Changes to this policy
When we change this policy, we update the date at the top. If the change matters to you, for example a new purpose or a new service, we also show a notice in the app. Where the law requires your consent, we will ask for it in the app.
Contact
Treefox AB (559492-2477)
Märsta, Sweden
dev@treefox.app