Last updated: September 2026
In short
Radltracker processes your rides entirely on your device. There is no user account, no sign-in, no advertising and no analytics or tracking libraries. I cannot see your tracks — I have no technical access to them.
Controller and disclosure (§ 5 ECG, § 25 MedienG)
Emanuel Schmacher e.U.
Sielach 76
9133 Sittersdorf, Österreich
Email: info@radltracker.app
Business: development and distribution of software for mobile devices.
Trade: unregulated trade in automatic data processing services (§ 5(2) Austrian Trade Act), exercised in Austria.
Companies register: FN 460204x, Landesgericht Klagenfurt.
Supervisory trade authority: Bezirkshauptmannschaft Völkermarkt.
Chamber: Carinthian Economic Chamber, division for management consultancy, accounting and information technology (UBIT); the Austrian Trade Act applies.
VAT ID: ATU62078959
What the app processes
Location
While recording, the app continuously reads your position to compute track, speed, distance and elevation gain. This data is stored in a database on your device and is not transmitted. You grant permission on first launch and can revoke it at any time in system settings.
If you choose “Always”, recording continues when the screen is off or you switch apps — otherwise your ride would stop the moment you put the phone in your pocket.
Camera
The camera view shows the live image from the rear camera so that turn arrows sit over the actual road. The image is only displayed: it is not stored, not transmitted and not analysed. It never leaves memory.
Motion and altitude sensors
Barometer and orientation sensor improve the elevation profile and align the route in the camera image. These readings also stay on the device.
Apple Health and Health Connect (optional)
On request, Radltracker writes finished rides as cycling workouts to Apple Health (iOS) or Health Connect (Android): duration, distance, calories and the route. The app does not read any health data. This exchange happens solely between the app and the health store on your device; it requires your explicit consent, which you can withdraw at any time in system settings.
When data leaves your device
There are exactly four cases, and you trigger all four yourself:
- Map display. The vector map loads its tiles from OpenFreeMap — OpenStreetMap data in the OpenMapTiles style. Switch to aerial imagery and the pictures come from the official service for wherever you are: basemap.at (City of Vienna) in Austria, swisstopo in Switzerland, the relevant state survey service in Germany. That applies to every map in the app — the ride detail, the thumbnails in the rides list, the shared route card and the PDF report included. The provider in question learns your IP address and which section of the map you are looking at; the one currently drawing is named below the map. Map data © OpenStreetMap contributors (ODbL), aerial imagery under CC BY 4.0 or comparable terms.
- Destination search. When you type a place name, that text goes to Photon (komoot GmbH, Germany) — along with your approximate position, so that “station” means the one near you. Photon searches OpenStreetMap data. The search only starts once you pause typing, not on every keystroke.
- Route calculation. When you pick a destination or import a map link, the waypoints go to BRouter, which computes the cycling route from OpenStreetMap data. Only the waypoints are sent — not your recorded ride, not your track.
- Sharing and export. When you create a route image, a short video, a PDF report or a GPX file, you pass that file on through your device’s share sheet — to whom is your decision. You can also save a route card straight to your photos; the app does not read your photo library. Bike-garage reminders are local notifications and are never sent anywhere.
Until the switch to OpenStreetMap, the map, destination search and route calculation ran through Apple Maps and Google. The change has a practical reason — OpenStreetMap is the only data source that carries cycle paths, surface and gradient — and a privacy one: these are smaller recipients, with no advertising business and no profiling across services.
When sharing a ride you can set a privacy zone: start and finish are then hidden in the shared image, so your address does not travel with it.
This website
The page you are reading is a set of static files. It sets no cookies, loads no fonts, maps or videos from third-party servers, and contains no analytics or advertising tools.
The site is hosted by HostEurope GmbH, Hansestr. 111, 51149 Köln, Deutschland, acting as a processor. The server keeps access logs (IP address, time, requested file, browser identification) for delivery and troubleshooting, based on the legitimate interest in secure operation (Art. 6(1)(f) GDPR); those logs are not analysed and are deleted after 30 days at the latest.
So that the page keeps working without a network, it registers a service worker that stores the HTML, stylesheet, script, icon and two font files in your browser’s cache. That is technically necessary storage under § 165(3) of the Austrian Telecommunications Act and needs no consent: no identifiers are set, nothing is sent to me and nothing is combined across sites. Clear your site data in the browser settings to remove it.
Purchases
Radltracker Pro is handled through the App Store or Google Play. I never see payment details; they are processed exclusively by Apple or Google. The app merely asks the store whether a valid subscription exists.
Deletion
Delete individual rides inside the app. Remove everything by uninstalling the app — nothing is left behind on a server, because nothing ever reached one.
Legal bases and retention
The app processes location, motion and camera data on your device in order to deliver the recording, map and navigation you started — the legal basis is performance of the contract (Art. 6(1)(b) GDPR). Apple Health and Health Connect rely on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you can withdraw at any time with effect for the future. Destination search, route calculation and map tiles require the requests named above to leave the device (Art. 6(1)(b) GDPR). Apple and Google also process purchase data in the United States, on the basis of the European Commission’s standard contractual clauses and the EU-US Data Privacy Framework.
Your rides stay on your device until you delete them or the app — I have no access to them and therefore delete nothing. If you send me an email, I process it to answer you (Art. 6(1)(b) or (f) GDPR) and delete it after two years at the latest.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw any consent you have given at any time. Since I store no personal data about you beyond your own emails, access and erasure requests have little to act on — get in touch anyway if you have questions.
You also have the right to lodge a complaint with a supervisory authority. In Austria that is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.
There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
Changes
If anything material about this policy changes, the new version appears here with a new date at the top.