We do not sell personal data, and routes, searches and saved places are never used to advertise to you.
Privacy Policy
Privacy,
without the fog
Your route is a request, not a diary.
Effective 2 November 2026Your route is calculated and then forgotten. We keep no record of where you have been.
Crash reports and usage data are on unless you switch them off, when you first open the app or later under Settings, Privacy. Neither contains where you ride.
Who is responsible
45weg is made and run by one individual developer established in the Netherlands, working alone and not through a company. That person is responsible for the use of your data described here (the controller), and hallo@45weg.nl reaches them directly. Ask at that address for their name and postal address and we will give them to you; a supervisory authority receives them on request as well.
The General Data Protection Regulation (GDPR) and Dutch law apply. The Dutch supervisory authority is the Autoriteit Persoonsgegevens.
What we collect
Using the app without an account
You can use 45weg without giving your name or email address. The app gives your installation a random identifier, so our service can check that a request comes from a genuine copy of the app. Google and Apple help with that check and see your IP address and basic device information while doing it. The identifier is still personal data, even though it does not say who you are.
An account, if you want one
An account does one thing: it keeps your saved places when you move to a new phone. You sign in with Apple, Google or an email address and a password. With Apple or Google we receive your email address and, where available, your name. If you use Apple's option to hide your email, we receive a forwarding address from Apple instead of your own. With an email address, Google keeps your password for us, protected so that nobody can read it, and sends the emails to confirm your address or reset your password. Creating an account keeps the places you already saved.
Location and routes
With your permission, the app uses your precise location to show where you are and to guide you. It only asks to use your location while you are using the app. During guidance it keeps doing so with the screen off, and that stops when guidance stops. You can withdraw the permission in your phone's settings at any time; guidance then stops working and the rest of the app keeps working.
When you plan a route, the app sends the start, destination and any stops, your vehicle class, your language and, where the rules depend on it, what kind of motor your vehicle has, to our routing service. The service calculates the route and then forgets it. It keeps no locations and no route history: its log records only that a request was made, whether it worked and how long it took.
Search, maps and shared links
A search, or a point you tap on the map, is sent to Photon (run by komoot in Germany) and, for Dutch addresses, to PDOK (run by the Dutch government), together with a nearby location so results close to you come first. The map itself is loaded from OpenFreeMap. These services see your IP address, as with any internet request.
When you share a map link into 45weg from another app, our service opens it at the provider that made it, which is Google, Apple or OpenStreetMap, to find the place it points to. That provider sees our server, not your phone. The link is not stored.
Saved and recent places
Saved places need an account and are stored online under it: the name you gave each place, its location and address, its position in your list, and which places are Home and Work. Recent destinations, your vehicle, your language and your other settings stay on your phone and are never sent to us.
Crash reports and usage data
Both are on unless you switch them off, and each has its own switch. The app shows both switches before anything is sent, and you can change them under Settings, Privacy at any time. The app works the same with both off.
A crash report says what went wrong, in which version of the app, on what kind of phone, and when. Usage data, collected with Google Analytics for Firebase, records when the app is opened, how long it is used and which screens are used, along with the app version, phone model, operating system, language, time and an approximate region. For trips it also records how a ride went and for which vehicle class, such as whether a route was found or whether your phone could not give a position because location was refused, switched off or only approximate, how long it took to arrive and whether the ride reached its destination, but never where. It records where in the app a destination was chosen, such as search, a saved place or the map, without the place itself; whether a route was closed without being ridden; whether a place search had found anything when it was closed without choosing, never what was searched; and when you change the vehicle, the voice or the language.
Neither contains where you ride. No route, location, address, search or saved place is ever included. Neither is linked to your account, and neither is used for advertising or to follow you across apps.
What is stored on your phone
The app stores on your phone what it needs to work: its identifier and security token, your settings and privacy choices, your vehicle, your language, your recent destinations and any map link you share into it. The law allows this without asking because it is strictly necessary for the app you are using (article 11.7a, paragraph 3 of the Dutch Telecommunications Act).
The identifiers that crash reports and usage data need fall under the same article's exception for measuring how well a service works, with little or no effect on your privacy. You can switch either off at any time. Deleting the app removes everything stored on your phone.
This website
Our web host receives your IP address and browser details to deliver the pages.
Website usage data is off unless you accept it. The website asks the first time you visit. If you accept, Google Analytics places cookies and counts which pages are read, which page you came from, and your browser, type of device, language and approximate region. Its advertising features are switched off. If you reject, Google Analytics is not loaded and it places no analytics cookie. The Google button loads on every page, even if you reject analytics, and sends your IP address to Google. You can change your analytics choice at any time under Cookie settings at the bottom of every page, which also removes the analytics cookies.
Your choice is remembered in your browser so we do not ask on every page. That needs no permission of its own, because remembering your choice is strictly necessary.
If you email us, we receive your address, your message and anything you attach.
Why we use it, and on what basis
To give you the service. Your account, saved places, location, routes, searches and shared links are used to provide what you ask for, which is the performance of our agreement with you (article 6(1)(b) GDPR). The law does not require you to provide any of it, but without your location and destination there is no route, and without an account there are no saved places.
To keep the service working and safe. Security checks, request logs and abuse prevention rest on our legitimate interest in running a reliable service and protecting it and its riders from misuse (article 6(1)(f) GDPR). The logs hold no locations, which keeps the effect on your privacy small.
To fix crashes and improve the app. Crash reports and app usage data rest on our legitimate interest in keeping the app working and learning which parts riders use (article 6(1)(f) GDPR). We weighed that against your privacy: neither contains routes, locations or searches, neither is linked to your account, and neither is used for advertising.
To learn how the website is used. Website usage data is collected only with your consent (article 6(1)(a) GDPR). You can withdraw it at any time under Cookie settings, as easily as you gave it. Withdrawing does not affect what was measured before.
To answer you. Your email is used to handle your message, as part of our agreement with you or, where you are not writing about your own use of 45weg, on our legitimate interest in answering.
Where we rely on legitimate interest, you may object at any time (article 21 GDPR), and we will stop unless we have compelling reasons that outweigh yours. For crash reports and usage data, switching them off is how you object, and no reason is needed.
Who receives data
We use these providers, and each receives only what its job needs:
- Google (Google Ireland Limited and Google LLC), through Firebase, for app security checks, accounts, saved places, crash reports, app usage data and website hosting, and through Google Analytics for website usage data if you accept it.
- Cloudflare, to deliver and protect the routing service.
- Apple, for app security checks, and Apple or Google when you sign in with them.
- OpenFreeMap for the map, komoot (Photon) for place search and PDOK for Dutch addresses.
- The map provider behind a link you share into the app, when that link is opened.
Every provider that handles your data for us protects it at least as well as this policy says we do. Where Google or Cloudflare handles data for us, a data processing agreement binds it to use the data only on our instructions and to keep it confidential and secure. We give personal data to no one who does not meet that standard.
Apple and Google for sign-in, OpenFreeMap, komoot, PDOK and the provider behind a shared link decide for themselves what they do with the request they receive, and their own privacy policies apply to that.
We do not sell personal data, we do not share it with data brokers, and we never use it for advertising. We give data to public authorities only when the law requires it.
International transfers
PDOK is in the Netherlands and komoot is in Germany. Google, Cloudflare and some other providers may handle data outside the European Economic Area (EEA), including in the United States. Where that happens, the transfer is covered by a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's standard contractual clauses. Treat map and shared-link requests as possibly leaving the EEA. Ask us and we will send you a copy of the safeguards for a given transfer.
How long we keep data
- Routes, searches and shared links are not kept after the answer is given.
- An account and its saved places are kept until you delete them. Deletion takes effect at once; Google then finishes removing the account from its backups within 180 days.
- The app's random identifier is kept while it is needed to secure the service, or until you ask us to erase it.
- Request logs hold no locations and are deleted once they are no longer needed to run or secure the service or to deal with a legal claim.
- Crash reports are kept for 90 days.
- Usage data from the app and the website is kept for at most 14 months. Summary reports that no longer relate to you may remain after that.
- Your cookie choice stays in your browser until you clear it.
- Email is kept as long as needed to answer you, and afterwards only as long as needed to show what was agreed or to deal with a legal claim.
Providers that act independently, listed in section 04, keep data for their own periods.
Your rights
You can ask us for access to your data, to correct it, to erase it, to limit how it is used, and for a copy you can take elsewhere. You can object to use based on legitimate interest and withdraw consent at any time. These rights come from articles 15 to 22 GDPR, with the conditions set out there.
Email hallo@45weg.nl. We may ask you to show that the data is yours. We answer within one month; if a request is complex we may take up to two months longer, and we will tell you so within the first month. Requests are free.
You can also complain to a supervisory authority, such as the Autoriteit Persoonsgegevens or the authority where you live or work, and you can go to court.
Account deletion
You can remove saved places one by one at any time. To delete your account and all its saved places, open Settings, choose Account, tap Delete account and confirm. The app tells you whether it worked, and you can keep using 45weg without an account afterwards.
You can also have your account deleted without the app: email hallo@45weg.nl from the address you signed in with, or tell us which address that is, and ask for your account to be deleted. We delete it and all its saved places within one month and confirm by email.
Deleting the app removes what is stored on your phone, but it does not delete your account, your saved places or data already sent. Email us to have other data erased.
No automated decisions, no profiling
Nothing here makes decisions about you automatically, and no profile of you is built. Route calculation is automatic, but it is about roads and vehicle classes, not about you: it depends only on the vehicle class you chose and on Dutch traffic law.
Children
45weg is for people aged 16 or older, and only someone aged 16 or older may create an account. We do not knowingly collect data from a child. If you believe a child has given us personal data, email hallo@45weg.nl and we will delete it.
Security
We protect data with encrypted connections, security checks on requests, access controls and logs that hold no locations. No online service can promise perfect security. If a data breach is likely to put your rights at high risk, we will tell you.
Changes to this policy
We update this policy when the service or the law changes, and the date at the top always shows the current version. If a change materially affects how your data is used, we will tell you in the app or by email before it takes effect, and we will ask for your consent where a change needs it.
On 29 September 2026, crash reports and usage data in the app changed from off by default to on by default. The app shows a switch for each before anything is sent, and choices you had already made were kept.
On 2 October 2026, the website started asking whether you accept usage data. It measures nothing unless you do.
On 13 October 2026, usage data in the app started to include how each trip went, but never where.
On 18 October 2026, usage data in the app started to include where in the app a destination was chosen, routes closed without being ridden, and changes to the vehicle, voice and language settings.
On 21 October 2026, usage data in the app started to include the vehicle class of each trip, whether a route could not be planned because location was refused or switched off, and whether a place search had found anything when it was closed without choosing, never what was searched.
On 24 October 2026, usage data in the app started to include whether a route could not be planned because location was only approximate, and accounts can be deleted by email as well as in the app.
On 2 November 2026, it became possible to create an account with an email address and a password.
The other document