Dovedu Privacy Policy
Last updated: 14 October 2026. This version applies from that date.
This policy explains what the Dovedu app for Android (Доведу in Ukrainian; "the app") records, what leaves your phone, where it goes, how long it is kept and what you can do about it.
The app is published by Odyssean LLC, a limited liability company registered in the State of Washington, United States ("we", "us"). Address: 4730 University Way NE, Ste 104-5528, Seattle, WA 98105, United States. Email: team@dovedu.app.
1. The short version
- The app works out your position on your phone. To do that, it records satellite signals, motion sensors, mobile cells and Wi-Fi networks around you, and your phone's own location. This is precise location data.
- It records all this only while positioning is on: from when you open the app until you tap Stop (in its notification, or menu ☰ → Settings → Stop positioning now), or until it shuts down by itself after the car has not driven for 15 minutes while the app is not on the screen (you can change the 15 minutes in Settings). A notification shows the whole time. Positioning continues when the screen is off or another app is in front.
- Nothing is sent to us before you tap Agree and continue on the screen that explains this.
- The app can send us three kinds of data. Each has its own switch in Settings → What we receive:
- Bug reports (crash reports and the app journal): on by default. You can turn it off.
- Positions (the app's positioning results): off by default.
- Full recordings: off by default.
- Without an offline map, the map, address search and routes come from public servers run by others. They see your IP address and the area you look at, what you search for and where your routes start and end (section 4).
- We use what you send us to fix faults and to make positioning more accurate. We do not sell it, we do not use it for advertising, and the app has no advertising or analytics code.
- There is no account and no sign-in screen. We know your installation only by a random install ID. To have your data deleted, email us that ID (section 10).
2. What the app records on your phone
While positioning is on, the app writes the following into files on your phone:
| What | Details |
|---|---|
| Satellite data | Raw measurements, navigation messages and signal strength from your phone's satellite receiver (GPS, Galileo, GLONASS, BeiDou and other systems), and the receiver's model and capabilities. Orbit files the app downloads are kept with the recording. |
| Your location | Location fixes from your phone's satellite receiver and from Android's network location, with their accuracy. The position you set yourself with Set your position → Here I am, if you do. |
| Motion and other sensors | Accelerometer, gyroscope, compass, orientation, barometer, ambient light and the significant-motion detector. If you allow Physical activity: the step detector and step counter. The names and makers of the sensors. |
| Mobile network | The cells your phone can see (their identifiers and signal strength), the network operator, whether you are roaming, and the operator and country of your SIM cards. Not your phone number, the SIM card's serial number or the phone's IMEI. |
| Wi-Fi networks | The access points around you: their identifiers (BSSID), names (SSID), signal strength, frequency and what they announce about themselves (for example a venue name), including the network your phone is connected to. Network names can be names other people chose for their own networks. The app asks the phone to scan for Wi-Fi regularly. It never joins these networks and never reads anyone's traffic. |
| Phone state | Battery level, charging and temperature; screen on or off and its brightness; battery saving and power states; whether the phone is online and over which kind of network; airplane mode; Wi-Fi and location settings; the phone's clock, time zone and network time; the app's own processor use. |
| Navigation | When you set a destination: its name and coordinates, the route, and how far you are from it. Not the text you type into the search box. |
| Car data | Only if an OBD adapter is paired with your phone in Android's Bluetooth settings and you allowed Nearby devices: while positioning is on, the app connects to the adapter and reads your car's speed, engine speed, throttle and accelerator position, engine load, gear, odometer, distance since fault codes were cleared, engine run time, fuel level and fuel rate, coolant and outside temperature, intake pressure, air flow and barometric pressure, and which of these your car supports. Also the adapter's name, Bluetooth address, version and voltage reading. Not the car's identification number (VIN). |
| The app's results | The positions the app computed, with their uncertainty, speed and heading; beside them, your phone's own location fix and Android's network location at the same moment; the satellite signals the app used or set aside, and whether it judged any of them to be wrong. |
| Device and app | Phone maker and model, Android version, app version, the version of the positioning model, and the country the app works in. |
Whenever the app runs, positioning or not, it also keeps an app journal: when the app started and stopped and why, positioning starting and stopping (including when it shut down by itself), which permissions are on, power settings, uploads, your choices on the switches, map downloads, the country the app detected from the mobile network, and the text of any problem report you send with Report a problem. The journal contains no positions.
Together, the recorded data shows where you were and when. Treat a recording like a detailed log of your trips.
The app computes your position from this data on the phone itself. It does not need to send anything to us to work.
3. What can leave your phone
Nothing is sent to us until you tap Agree and continue on the screen "What Dovedu records", which sums this up and links to the full text. After that, the switches in Settings → What we receive decide what is sent:
| Switch | What it sends | Size | Default |
|---|---|---|---|
| Bug reports (crash reports and app journal) | Crash and freeze reports, and the app journal (section 2). They include the install ID and technical details of the phone (model, Android version, memory, storage, battery, screen, language and time zone). No positions: the journal holds only the country the app detected, and Sentry, which receives the crash reports, works out an approximate city, region and country from the connection's IP address. | Small | On. You can turn it off. |
| Positions (positioning results) | The app's results (section 2), with the install ID. This is location data. | Small | Off. You can turn it on. |
| Full recordings | Everything else the app records (section 2), with the install ID. | 10–40 MB per hour | Off. You can turn it on. |
- Test versions. A test version we give you directly, outside Google Play, sends all three kinds of data, and you cannot turn them off: that is the condition of testing, and its consent screen says so. The version on Google Play works as described above.
- Crash reports go to Sentry. The journal, results and recordings go to our private storage at Supabase. See section 7.
- Files are sent in parts, while positioning is on and afterwards. By default they are sent only over Wi-Fi. You can allow mobile data with Upload on mobile data in Settings. Crash reports are small and go over any connection.
- The first time the app sends a file, it signs in to our storage anonymously, without any screen or account. Our storage provider records the IP address the phone signed in from and the app's technical identification (Android version and phone model) with that sign-in.
- After our server confirms that it has received a whole file, the app deletes that file from your phone 48 hours later.
- When you turn a switch off, the app stops sending that kind of data from then on. Data already sent stays with us until you ask us to delete it (section 10).
- When you turn a switch on, the app also sends the files of that kind that are still on your phone from earlier recordings.
- A problem report you send with Report a problem is part of the journal: it reaches us only while Bug reports is on. Its text is never put into crash reports.
- Export logs in Settings packs the app's recordings and journals into one file and opens Android's share menu. Where it goes is your choice. We receive it only if you send it to us.
4. Other services the app contacts
To work, the app talks directly to the services below. Each of them sees your phone's IP address and the request itself. They are not our service providers, and their own privacy policies apply.
| Service | When | What it receives |
|---|---|---|
| OpenFreeMap (tiles.openfreemap.org) | Map images, when no offline map for your country is on the phone | The parts of the map you look at. These usually show the area around you. |
| Photon by komoot (photon.komoot.io) | Address search, when no offline map is on the phone | The text you type and a nearby point (your position, or the centre of the map), so that results near you come first. |
| The public Valhalla routing server run by FOSSGIS e.V. (valhalla1.openstreetmap.de) | Routes, when no offline map is on the phone | The start (your position) and the end of each route. |
| German Federal Agency for Cartography and Geodesy, BKG (igs.bkg.bund.de) | Downloading satellite orbit files, when our own copy on GitHub cannot be reached | Only the download request. |
| Time servers: ntp.colocall.net, the NTP Pool Project (pool.ntp.org, ua.pool.ntp.org), Google (time.google.com) and Cloudflare (time.cloudflare.com) | Checking the phone's clock while the positioning engine runs | Only the time request. |
| GitHub (github.com) | Offline maps; satellite orbit files, every hour while the phone is on Wi-Fi and while the positioning engine runs | Which offline map you download; the orbit file request. |
| The website behind a link you share into the app | When you share a place from another app (for example a Google Maps link) | The app opens the link to read the place's coordinates. |
The app asks for offline maps and orbit files at our website, dovedu.app, which sends the request on to GitHub. Netlify, which hosts the website, sees that request and your IP address, as GitHub does.
With an offline map for your country on the phone, the map, search and routes work on the phone and nothing is sent to the first three services.
Three more things are outside our control:
- Android's network location comes from your phone's own location service (on most phones, Google Location Accuracy). It works under Google's terms and your phone's settings. During setup, the app may ask you to turn it on, through Google's own dialog.
- If you allowed your phone to share usage and diagnostics with Google, Google Play may give us crash statistics about the app. Google provides these under its own terms, and they do not identify you to us.
- If backup is on in your phone's settings, Android may copy the app's files into your phone's backup in your Google account, under Google's terms. We cannot read those backups.
5. Why we use your data, and on what legal basis
| What we do | Data | Legal basis |
|---|---|---|
| Find and fix crashes, unexpected stops, battery drain and overheating | Crash reports, app journal | Our legitimate interest in an app that works. You can turn it off at any time. |
| Make positioning more accurate: test every new version of the positioning engine on earlier drives, and build and improve our positioning data, such as a list of Wi-Fi networks and mobile cells and where they are, which the app may use on phones to find positions | Positioning results, full recordings | Your consent: you turn the switch on, and you can turn it off at any time. |
| Keep our servers safe and stop abuse | IP addresses, sign-in records, upload records | Our legitimate interest in a secure service. |
| Answer your requests and delete data, and keep a record that we did | Install ID, your email address and message | Our legal obligations, and our legitimate interest in showing that we handled your request. |
We do not use your data for any other purpose. If we ever want to, we will ask you first.
6. What we do not do
- We do not sell your data.
- We do not use it for advertising, and we do not build profiles of you.
- The app contains no advertising code and no analytics code.
- We do not publish your recordings, your results or your trips.
- We do not share your data with anyone else (for example authorities, researchers or business partners), except the providers in section 7 and where the law requires it (section 12).
- We do not ask for your name, email address or phone number. There is no account.
7. Who stores your data for us, and where
| Provider | What | Where | Its privacy policy |
|---|---|---|---|
| Supabase | App journal, positioning results, full recordings and the anonymous sign-in records, in private storage | European Union (Ireland) | supabase.com/privacy |
| Sentry | Crash reports | European Union (Germany) | sentry.io/privacy |
| Proton | Emails you send us | Switzerland | proton.me/legal/privacy |
All three act as our processors: they store the data for us and follow our instructions. Only members of our own team who need it for the purposes in section 5 can read it.
8. International transfers
Your data is stored in the European Union, and the emails you send us in Switzerland. Odyssean LLC is a US company, Supabase and Sentry are US companies too, and our team may work from other countries, so the data can be accessed from the United States and from other countries outside your own. Supabase and Sentry are bound by data processing terms that include the European Commission's Standard Contractual Clauses where the law requires them.
9. How long we keep it
| Data | How long |
|---|---|
| Full recordings, positioning results and app journals on our servers | No fixed end date. We keep them so that we can test every new version of the positioning engine on earlier drives, in every season and on many phones. We delete them when you ask (section 10), or when we no longer need them for that. |
| Anonymous sign-in record with the IP address (Supabase) | As long as we keep the data of that installation. |
| Crash reports (Sentry) | Up to 90 days, then Sentry deletes them automatically. |
| Technical access logs with IP addresses, kept by our providers | A short time, at most 90 days. |
| Emails you send us | As long as we need them to answer you and to show that we handled your request. |
| On your phone: files that were sent | Deleted 48 hours after our server confirms it has received the whole file. |
| On your phone: files you chose not to send | They stay on your phone. When the app's recordings take more than 2 GB, the app deletes the oldest of them first. |
| On your phone: offline maps, the map's cache and the app's small working files (for example the last position shown) | Until you uninstall the app or clear its storage. |
Uninstalling the app, or clearing its storage in Android's settings, deletes everything the app stored on your phone.
10. Your choices and rights
- Stop positioning at any time: tap Stop in its notification, or menu ☰ → Settings → Stop positioning now. Opening the app turns it on again. It also shuts down by itself when the car has not driven for a while (Settings → Shut down after no driving).
- Choose what is sent: use the switches in Settings → What we receive. You can change them at any time.
- Delete your data on our servers: email your install ID to team@dovedu.app. You find it in the app: menu ☰ → Settings → Install ID (tap it to copy). We delete the data stored under that ID, including crash reports, within 30 days and confirm by email.
- Delete the data on your phone: uninstall the app, or clear its storage in Android's settings.
- Get a copy of your data: email us your install ID. Anyone who has seen your screen could know that ID, so before we send a copy we ask you to show that the phone is yours: either send a problem report from the app with a code we give you (this needs Bug reports on), or tell us the date, time and place of one of your recorded trips.
- Correct your data: the data is recorded by the phone's sensors, so it cannot really be corrected, but we can delete it.
- Withdraw consent: turn the switch off. This does not affect what was sent before; to remove that, ask us to delete it.
- Object to our use of crash reports and the journal: turn the switch off, or write to us.
- Complain to a data protection authority. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua). In the European Union, it is the data protection authority of your country; in the United Kingdom, the Information Commissioner's Office. Elsewhere, your local authority.
These rights apply wherever you live. We answer within 30 days and never charge for it.
Important: reinstalling the app gives it a new install ID. After that, we cannot connect your earlier data to you unless you kept the old ID. If you want your data deleted, copy the ID before you uninstall. If you have used several install IDs, send us all of them.
11. Security
- Everything the app sends to us, and its requests to the services in section 4, travel over encrypted connections (HTTPS). Only the time requests use the standard time protocol, which is not encrypted; apart from the IP address that every request shows, they carry no data about you.
- Our storage is private. The app can add files to it, only to its own installation's folder, but it cannot read, list, change or delete anything there. Reading needs a key that only our team holds.
- Our providers encrypt the data they store.
- The app tells Sentry not to collect personal data, and it never sends screenshots, screen layouts, your taps or recordings of the screen.
- Recordings on your phone are only as safe as your phone. Anyone who can unlock it can open the app and export them. Lock your phone.
No system is perfectly secure. If a breach affects your data, we will inform the authorities as the law requires and publish a notice on this website. We have no email address or phone number for you, so we will also write to anyone who has contacted us about their data.
12. Sensitive data
A recording is a detailed log of where you went and when. It can also show where and when satellite positioning failed. We treat recordings and results as sensitive:
- we keep them in private storage and use them only for the purposes in section 5;
- we do not publish them and do not sell them;
- we disclose them to authorities only when the law requires it, for example under a valid court order, and then no more than the order requires.
13. Children
The app is made for drivers. It is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has sent us data, write to us and we will delete it.
14. Changes to this policy
We may update this policy when the app or the law changes. We will change the date at the top. If we want the app to send more kinds of data, or to use data for a new purpose, the app will ask you again before it applies.
15. This website
This website has no cookies, no analytics and no forms. Netlify, which hosts it, and Bunny Fonts, which serves its typeface, receive your IP address and the page you ask for with every request, as any web server does, under their own privacy policies. If you write to us from the website, your email reaches us like any other (sections 7 and 9).
16. Contact
- Email: team@dovedu.app
- Mail: Odyssean LLC, 4730 University Way NE, Ste 104-5528, Seattle, WA 98105, United States
We answer within 30 days.
This policy exists in English and Ukrainian. If the two versions differ, the Ukrainian version applies to users in Ukraine and the English version to everyone else.