Privacy Policy — LVN MAP

a. Your location

We use your phone's location to show where you are on the map, to work out routes, for voice guidance and for road alerts. While navigating, the app keeps using your location in the background or with the screen off, so the guidance doesn't stop. The app doesn't use your location in the background outside navigation.

b. Route and search requests

When you search for a place, the search text is sent to our servers with your location, to rank the results near you; when you ask for a route, its start and destination are sent. While navigating, the rest of your route is sent every minute to update the arrival time with live traffic, and your current location with the destination when a faster route is looked for or the route is worked out again. When you choose a route, its junctions' positions and directions are sent, then every minute those you'll reach in the next 15 minutes, with when you're expected there, so the usual wait at each is counted in the arrival time. We use these requests only to answer them; we don't keep them or link them to you.

c. Movement data for traffic

While navigating, the app sends pieces of the roads you drive with their speed and time. They aren't kept under a name, a number or your phone's id, but under a temporary id that changes every day and whose key is deleted the next day, so one day can't be linked to another. The phone removes the first 200 metres and the last 200 metres of each trip before sending, so your starting point and destination don't show. This data is combined with other vehicles' data to work out road speeds, traffic and arrival times, and no road's speed is shown unless it comes from at least 3 different vehicles. None of it is sent outside navigation.

d. Usage statistics

The app sends general events, such as opening the app, starting navigation and arriving: the kind of event and, for some, a number about it (the route's or the drive's length in km, the drive's minutes, which of the routes shown was chosen, whether you were navigating, or the kind of report sent), without the search text or any location, with the governorate instead of the location, the phone's system and the app's version, "first use in this session, hour, day, week or month" marks and the week the app was installed. These events carry no id that links them to you or to each other. We use them to count users and improve the app.

e. Road reports

When you report police, a camera, an accident, a hazard or a bump, or confirm or deny a report, we receive its type, place, direction, your speed and time, with a random id of your phone that doesn't reveal your name or number, to prevent abuse, and we show it to other drivers without any information about you. If you suggest a change to a place, we also receive the place's name and what you write.

f. Bumps

While you drive with the app open, the app reads your phone's motion sensors to find bumps. On a jolt that looks like a bump, it sends its place, your direction, speed and time and the jolt's strength, with your phone's random id. These are combined from several drivers to find bumps, which are reviewed before they appear on the map.

g. Sharing a trip

If you choose «مشاركة الرحلة» (Share trip), we create a link that lets whoever has it see your car's location, your route and your expected arrival time, until you arrive or stop sharing. The link ends on arrival or after 24 hours at most, and we keep only the latest location while the share lasts. You choose who gets the link.

h. Reporting a problem

If the app stops working unexpectedly, it may send a technical crash report to the error-tracking service we use (Sentry, in the European Union): the error and where in the app it happened, the app's version and your phone's model and system, with a random installation id used only to count crash-free sessions, without your location, IP address or anything that identifies you. If you choose «الإبلاغ عن مشكلة» (Report a problem), your phone's mail app opens a message to business.care@gpslvn.com with what you write, the app's version and your phone's system, and you can attach the app's log, with your locations removed from it.

i. What stays on your phone

Home and Work, recent destinations, settings, and what the app learns about when you head home or to work («رايح للبيت؟», "Going home?"), are all kept encrypted on your phone. When the app suggests going home or to work, your location and the Home or Work point are sent to our servers only to time the drive, like any route request, and aren't kept. Downloaded maps and area packs stay on the phone too.

j. Opening map links

When you open a location link from Google Maps or WhatsApp, the app reads only the coordinates. If the link is shortened, your phone contacts Google's service only to expand it. If you copy a map link, the app asks «تروح لهذا الموقع؟» (Going to this place?) without reading the link, and reads it only if you tap.

k. Voice search

Voice search uses your phone system's speech recognition (Google or Apple), which is subject to its own privacy policy. Your voice doesn't reach us.

l. The web map

When you use the map on the web, map, search and route requests go to our servers as in the app. We use no advertising trackers or third-party analytics on the site. The site may send, once a visit, how long the map and the panel took to load and their sizes, whether it's your first visit, the browser family and system, a narrow or wide window and the connection type, with no id or cookie and without your IP address, to measure the site's speed; these are kept about 30 days.

m. Technical logs

Our servers don't record IP addresses in their ordinary request logs, nor search texts or locations. Only critical errors are logged, and they may include the requesting device's address, for security and abuse prevention. Logs are deleted automatically when they are rotated, and aren't archived, except the site's speed records (l), kept about 30 days.

To work out traffic we also use the locations and speeds of vehicles of our own vehicle-tracking service, and whether the engine is running when the tracker sends it, under its contracts. This data is turned, as soon as it arrives, into a temporary id that changes every day, with no names, plate numbers or phone numbers, and is used only combined. The positions themselves are matched to the roads and deleted within 48 hours; they are never archived or put in a backup. After that we keep only aggregates, with no id and no vehicle's trail: per road, and per approach to a junction and each movement through it, for each quarter-hour of each day, the number of vehicles, the median time or speed, the time the slowest 15 % take and the free-flow speed; and how many vehicles stood still on each road in each place and hour, or stopped for long in each place. These aggregates are kept 12 weeks, then folded into season and event profiles kept 5 years. From them we learn the roads' usual speeds, the usual waits at junctions and the parking places, and only what comes from at least 3 vehicles is used. To learn this from the first day we also read, once, the same vehicles' past positions kept by the tracking service, up to 5 years back: each vehicle's day gets a temporary id made for that reading alone, is matched to the roads in memory, and only the same aggregates are kept from it. For 90 days we keep a summary of some trips we don't learn from, to measure how accurate arrival times are: the area's tier, the trip's day and hour, and its real and estimated times, with no id or location.

• Location: for the map and navigation; used in the background during navigation only.
• Notifications: to show navigation under way and alerts.
• Microphone: for voice search only, when you tap the microphone button.
• Display over other apps: for LVN Map's floating button during navigation, if you turn it on.
• Motion sensors: to find bumps while driving; the app asks no permission for them.

You can withdraw any permission in the phone's settings at any time, and the feature that uses it may stop.

• We don't sell, rent or share data for advertising.
• Only service providers working for us, such as server hosting, storage and the content delivery network (Cloudflare) the service's requests pass through and the error-tracking service (Sentry), who are bound to protect the data.
• We may publish or share combined statistics and road speeds that identify no person or vehicle.
• Official authorities, if Iraqi law requires it of us through a valid legal request.

Data may be kept on servers outside Iraq, including servers in Europe.

• Trip sharing: the latest location only, while the share lasts (24 hours at most), then deleted; that you arrived stays 10 minutes.
• Movement data: matched to the roads and deleted within 48 hours, never archived or put in a backup; only road speeds combined without any id remain.
• Fleet data from our tracking service (section 2): the positions deleted within 48 hours; the aggregates 12 weeks, then season and event profiles 5 years; the trip summaries 90 days.
• Usage statistics: the events themselves 7 days, then in a monthly archive without any id; the counts combined, and no cell under 3 people shown.
• Reports: kept with your phone's random id while the service runs; you can ask for their deletion.
• Bumps: deleted after 90 days; those approved stay on the map without any id.
• Your phone's random id and its abuse-prevention record: while the service runs; you can ask for its deletion.
• Technical logs: deleted when rotated, not archived.
• The web's speed records: about 30 days.
• Crash reports: at the error-tracking service for the period it keeps them, then deleted.
• Encrypted database backups: they hold the aggregates, reports, bumps, your phone's random id, usage statistics and settings, never raw positions from the fleet or phones, nor trip sharing; they are replaced by newer ones after a limited time.
• What is on your phone: until you delete it or delete the app.

• «حذف بياناتي» (Delete my data) in Settings erases everything the app keeps on your phone.
• What is kept under the temporary daily id can't be linked to you by us, and is kept for the periods above.
• Reports, bumps and what is kept under your phone's random id: you can ask for their deletion through the data-deletion page or by writing to us.
• For any question or request: business.care@gpslvn.com, the number 6086, or the data-deletion page.

Connections to our servers are encrypted (HTTPS), and data kept on the phone is encrypted. Access to our systems is limited to authorised staff, with two-step verification and a record of every action.

The service is meant for adult drivers, and we don't knowingly collect children's data.

If we change this policy we update its date on this page, and tell you in the app if the change is significant.