PELORUS
Pelorus

Privacy Policy

Effective 29 May 2026

Pelorus is a compass app: you paste a destination and a needle points at it. Convoy mode lets a small group share live position with each other while travelling together. This policy explains exactly what data the app touches, what leaves your device, and to whom.

We designed Pelorus to collect as little as possible. There are no accounts, no advertising, no analytics, and no third-party trackers, and we do not sell or share your data for marketing.

1. Data stored only on your device

The following never leaves your phone. It lives in the app’s local storage and is removed when you delete the app:

  • Your current and recent destinations and your unit preference (km/mi).
  • Your convoy token, a randomly generated per-install ID, and your optional one-character convoy identity glyph.

We have no server-side copy of any of this.

2. Location

Pelorus uses your device location to do its one job — point at your destination. How location is handled depends on what you’re doing:

  • Solo (default) — stays on device. Your location is read on-device to draw the compass needle and compute distance and bearing. It is not transmitted anywhere.
  • Destination search — sent to a search provider. When you search for a place by name, the text you type (and, to improve relevance, an approximate location to bias results near you) is sent to Photon, an open-source geocoding service operated by komoot (photon.komoot.io), which returns matching places. We send only what’s needed to run the search; we don’t attach any identifier. Komoot processes this request under its own privacy policy.
  • Convoy — shared live with your group. When you create or join a convoy, your precise location is shared, in real time, with the other members of that convoy, via our relay server. Convoy is strictly opt-in: it is off until you create or join a session, and a persistent on-screen “broadcast” lamp and rider count show you whenever sharing is live. Leaving the convoy stops sharing immediately.

3. The convoy relay

Convoy position sharing passes through a relay server we operate:

  • Hosting and region: a self-managed server hosted in the EU (Germany).
  • What it does: it forwards each member’s position to the others in the same convoy, in real time, and immediately discards it. It is stateless — there is no database and no message history.
  • What it stores: nothing. Position payloads are never written to disk or logged. Access logging (which would otherwise capture IP addresses) is disabled at the proxy, so no IP addresses or connection metadata are retained.
  • What is sent: your coordinates, the random per-install ID (so your own marker refreshes instead of duplicating), and your optional identity glyph. Convoy membership is established by a shared token, not by any account.

4. What we do not do

  • No user accounts or sign-in.
  • No advertising and no ad identifiers.
  • No analytics or crash/usage tracking SDKs.
  • No selling or sharing of personal data for marketing or cross-app tracking — we do not track you across apps or websites.

For users in the EU/EEA and UK:

  • Solo location is processed locally on your device to provide the core function you requested; it is not transmitted, so there is no off-device processing to consent to.
  • Destination search processes your query (and approximate location) to deliver the search result you asked for.
  • Convoy location sharing is processed on the basis of your explicit consent, given by creating or joining a convoy. You can withdraw it at any time by leaving the convoy.

6. Retention

  • On-device data: kept until you remove it (clear it in-app or uninstall).
  • Convoy relay: not retained — positions are forwarded in real time and discarded; no logs, no database.
  • Destination searches: not stored by us; handled by komoot per their policy for the duration of the request.

7. Your rights

Because we hold no server-side personal data tied to you, most rights are exercised directly on the device:

  • Erasure / withdraw consent: leave the convoy to stop sharing; delete the app to remove all locally stored data.
  • Access / portability / objection: for any request, or questions about this policy, contact us at hi@andithemudkip.com. For data processed by komoot via Photon, see komoot’s privacy policy.

8. Children

Pelorus is not directed at children and does not knowingly collect data from children.

9. Changes

If this policy changes materially, we will update the effective date above and publish the revised version at the policy URL.

10. Contact

Crăcănău C.A. Andrei PFA · hi@andithemudkip.com