Version 1.1 · Effective 29 June 2026
This notice explains how we process your personal data under the GDPR, the BDSG and the TDDDG.
The joint controllers are Leonardo Marangoni, Erlend Mats Dugstad and Raphaël Giraud. Contact: contact@street-wise.app. The current controller's details are always available in the App's legal section (Impressum).
We process your device location to compute and display your route in real time. Accessing the location information on your device requires your consent under § 25(1) TDDDG, which you give before first use; the subsequent processing of that location data is based on your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time in Settings, with effect for the future. We do not store your location and we keep no journey history. However, to calculate your route, your location and destination are transmitted to our maps and routing providers, Google Maps and Mapbox, Inc., which are located in the United States (see sections 4 and 5).
We process your reports to operate the service and, in aggregated and anonymised form only, to improve the App during the pilot. Legal basis: operating the service (Art. 6(1)(b) or 6(1)(f) GDPR); for the aggregated and anonymised improvement purpose, our legitimate interest under Art. 6(1)(f) GDPR, supported by a documented balancing test (LIA). Retention: 12 months, then deleted or fully anonymised; pilot data will be deleted at the end of the pilot.
To create your account, contact you about the pilot, and let you exercise your rights. Legal basis: performance of the contract, Art. 6(1)(b) GDPR. Retention: for the duration of your account, then deleted.
To prove that you accepted the Terms and gave consent, and to establish or defend legal claims. Legal basis: our legitimate interest in establishing or defending legal claims, Art. 6(1)(f) GDPR. Retention: kept for the limitation period for potential claims (the regular period under § 195 BGB is three years from the end of the year in which the claim arose, § 199 BGB), then deleted; where a longer statutory limitation period applies to a specific claim, the receipt is kept for that period. These receipts are deliberately retained even after you delete your account (when your other account data is erased), because they exist precisely to evidence your prior consent.
For the security, stability and abuse prevention of the pilot. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. Retention: a short rolling window; the IP address is truncated or dropped as soon as possible. We do not use any third-party crash reporting or diagnostics SDK.
If you use the AI Call, your spoken interaction is processed to generate the AI's response by our voice provider ElevenLabs, Inc., located in the United States (see sections 4 and 5). Legal basis: your consent under Art. 6(1)(a) GDPR, given when you start the feature. ElevenLabs does not retain the content of these interactions, and we do not retain it either. The AI Call does not contact third parties and does not transmit your location. Please avoid disclosing sensitive personal information during an AI Call.
We use service providers (processors) to run the App. They process data only on our documented instructions under Art. 28 GDPR. The SDKs of the US providers below may access information on your device; where this is not strictly necessary it is done on the basis of your consent under § 25 TDDDG.
We do not use any crash reporting or diagnostics provider. We do not share data with municipalities during the pilot in any form that identifies you.
Our hosting is located in the EU. Some of our other processors are located in the United States, namely Google (Google Maps), Mapbox, Inc. and ElevenLabs, Inc. When your personal data is transferred to them, we rely on appropriate safeguards under Chapter V GDPR, in particular the EU Standard Contractual Clauses, supported by a documented transfer impact assessment for each transfer. You may request a copy of the relevant safeguards at contact@street-wise.app.
You have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent at any time (in Settings) with effect for the future. To exercise any right, contact contact@street-wise.app. You also have the right to lodge a complaint with a supervisory authority — for Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI) — or with the supervisory authority of your country of residence or of the place of the alleged infringement.
You can withdraw your location consent, your AI Call consent, and any optional report-improvement consent at any time in Settings, in one step. Withdrawal stops future processing based on that consent but does not affect the lawfulness of processing already carried out, and does not delete reports you have already submitted (you can request their deletion separately).
We use appropriate technical and organisational measures to protect your data (Art. 32 GDPR), including data minimisation by design (transient location processing), access controls, and append-only consent records. No system is perfectly secure, but our architecture is designed to minimise the data at risk.
The pilot is intended for adults (18+). We do not knowingly collect data from minors and do not operate an age verification system beyond your confirmation that you are 18 or older. If you believe a minor has provided us data, contact contact@street-wise.app and we will delete it.
We may update this notice during the pilot. We will notify testers in the App of material changes and, where required, ask for renewed consent before continuing.
Provider identification under § 5 DDG is available in the App's legal section.
See also our Terms & Conditions.
