Privacy policy
Last updated 2026-10-09
This policy explains what Postermap does with personal data when you use the Postermap app for Android and the website postermap.app. We try to say it in plain words. If something is unclear, write to support@postermap.app.
Who is responsible
Iurii Chulovskyi JDG, Poland, is the controller of your personal data (the “developer” in the Google Play listing, “we” in this policy). You can reach us at support@postermap.app.
The short version
- You can start without an account. The app makes an anonymous one in the background so that we can count your free posters.
- If you give us a link, a list of places or a GPX track, we send it to our server and to Google Gemini, an AI service, to find the places. You check every place before a poster is made.
- If you sign in with Google, your posters are backed up to your account.
- Usage statistics are off until you say yes, and you can change your mind at any time. Crash reports are on, and you can switch them off.
- We show no ads and we do not sell your data.
- You can delete your account and your posters at any time, in the app or on the delete account page.
- One thing stays after you delete your account: a one-way marker of your phone, which stops the free posters from being claimed again. See “The phone marker” below.
What we process, why, and for how long
An anonymous account
- What
- A random account id made by Firebase Authentication when you first open the app. It has no name or email.
- Why
- To count your free posters on our server and to know that a request comes from the app. Legal basis: our legitimate interest in running the service and preventing abuse; a contract with you when you use the app.
- Who
- Google (Firebase).
- How long
- Until you delete your account. Empty anonymous accounts that the app leaves behind when you sign in or out hold no posters, name or email.
Your Google account
- What
- Only if you choose Continue with Google: your email address, your name, your profile picture address and your Google account id.
- Why
- To sign you in, to show which account you are using, and to back up your posters and use them on another phone. Legal basis: contract.
- Who
- Google (Firebase Authentication).
- How long
- Until you delete your account.
Your posters in the cloud
- What
- The places, title, dates, style and layout of the posters you make, once you are signed in. Posters on your phone stay on your phone until you sign in.
- Why
- To back them up and sync them. Legal basis: contract.
- Who
- Google (Cloud Firestore, location: Google Cloud's europe-west3 region, located in Frankfurt, Germany).
- How long
- Until you delete the poster or your account.
Links, places and GPX tracks you give us
- What
- The web link, Google Maps link, typed list of places or GPX track you give the app to make a poster. A GPX track contains locations, and may contain times.
- Why
- To find the places and their coordinates, and their names in the poster languages. The link or text is sent to our server (Google Cloud Functions) and to the Google Gemini API; for a web link, Gemini or our server reads the page. Only send pages and tracks you are happy to share with these services. Legal basis: contract.
- Who
- Google (Cloud Functions, Gemini API).
- How long
- We do not store the link, the text or the track after the answer is sent. The places in your poster are stored as described above. A cache of place names with their coordinates, which is not linked to you, helps us answer faster.
Request logs and limits
- What
- For each request: your account id, the kind of source, the host name of the page (not the full address), the AI model, how many tokens it used, the cost and the outcome. Limits on how often you can ask use hashed keys of your account and network address.
- Why
- To run the service, to keep costs under control, to stop abuse and to find faults. Legal basis: legitimate interest.
- Who
- Google (Cloud Firestore and Cloud Logging).
- How long
- The request log is deleted after 30 days. The counters for limits are deleted within hours or days.
App integrity
- What
- Firebase App Check uses Google Play Integrity to check that a request comes from the genuine Postermap app on a genuine Android device. Google processes signals about the app and the device for this.
- Why
- To stop scripts from using the service and the free posters. Legal basis: legitimate interest.
- Who
- Google (Firebase App Check, Play Integrity).
- How long
- Google decides, under its own terms. We keep no integrity data.
The phone marker
- What
- A one-way, keyed hash of your phone’s Android ID, with the number of free posters used on it. It is not your name, email or account id, and we cannot turn it back into the Android ID.
- Why
- So that reinstalling the app, clearing its data or making a new account does not hand out the 3 free posters again. Legal basis: our legitimate interest in preventing fraud.
- Who
- Google (Cloud Firestore).
- How long
- It is kept after you delete your account, for as long as it is needed for this purpose. If you want it removed too, write to us and we will weigh your request against that purpose.
Subscriptions
- What
- Google Play handles the payment: we never see your card or bank details. We learn whether you have Postermap Pro, when it renews and when it ends. RevenueCat, which manages subscriptions for us, receives your account id and the purchase information from Google Play.
- Why
- To give you the posters and exports you paid for. Legal basis: contract and legal duties (accounting and tax).
- Who
- Google Play, RevenueCat, Inc.
- How long
- As long as your account exists and as long as the law requires us and them to keep purchase records.
Crash reports and usage statistics
- What
- Crash reports: Firebase Crashlytics receives a report when the app crashes: the phone model, the Android and app versions, the state of the app and a random id of the installation. They are sent unless you switch them off in Settings → Privacy → Crash reports. Usage statistics: only if you say yes on the first screen of the app, Firebase Analytics receives events about what you do in the app, such as “poster created” or “poster exported as PNG”, never your places, links, files or posters, together with the phone model, Android version, language, the country (from the network address) and a random id of the installation. We use no advertising id and show no ads.
- Why
- To fix faults and to learn which parts of the app are used. Legal basis: crash reports, our legitimate interest in fixing faults; usage statistics, your consent. You can withdraw it at any time in Settings → Privacy → Usage statistics; sending stops at once and the installation id is reset.
- Who
- Google (Firebase).
- How long
- Crash reports: 90 days. Usage statistics: at most 14 months.
This website
- What
- postermap.app sets no cookies and has no advertising or tracking scripts. Our hosting provider, Google (Firebase Hosting), processes your IP address and browser details to deliver the pages, as any web host does. To show a price in your currency, the host picks a small file by the country it infers from your IP address; we store nothing about it and no other service is called.
- Why
- To deliver and protect the website. Legal basis: legitimate interest.
- Who
- Google (Firebase Hosting).
- How long
- As set by Google for its hosting logs.
How the app uses Google user data
If you sign in with Google, we receive your email address, name, profile picture address and Google account id. We use them only to sign you in, to show which account is signed in, and to back up and sync your posters. We do not use them for advertising, we do not sell them and we do not share them with anyone except the services named above that run Postermap for us. Postermap’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who else sees your data
Only the services that run Postermap for us, as processors under their own data processing terms: Google (Firebase, Google Cloud, the Gemini API, Google Play) and RevenueCat. We do not sell personal data and we do not share it for advertising.
Some of these services process data outside the European Economic Area, including in the United States. Where the law asks for it, they rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on standard contractual clauses.
The AI
Postermap uses Google Gemini to read the pages and lists you give it and to find the places. An AI can be wrong, so the app shows you the list of places before it draws anything, and you can fix, move or remove each one. No decision with legal or similarly significant effects is made about you by automated means.
Deleting your data
Delete your account in the app under Settings → Delete account, or on the delete account page if the app is not installed. We then delete your account and sign-in, every poster backed up to it, your poster count and the records of your requests. The phone marker stays, as explained above. Deleting your account does not cancel a subscription: cancel it first in Google Play.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent at any time (this does not affect what was done before). Where we rely on legitimate interest you can object at any time. To use a right, write to support@postermap.app. You may also complain to the data protection authority of your country.
Children
Postermap is not made for children. You must be at least 13 years old to use it, and we do not knowingly collect data from children under 13. If you think a child has given us data, write to us and we will delete it.
Security
Data travels over encrypted connections. Access to your posters is limited to your account by rules in the database, and our server checks that requests come from the genuine app. No system is perfectly secure, so please do not give us pages or tracks that you would not want read by an AI service.
Changes
If we change this policy in a way that matters to you, we will say so in the app or on this page before it applies. The date at the top shows the latest version.
Contact
Iurii Chulovskyi JDG
Poland
support@postermap.app