Privacy Policy
Last updated: [DATE OF PUBLICATION]
Applies to TurMap for iPhone and iPad.
Denne siden finnes også på norsk.
TurMap has no account, no server, and no analytics. Your workouts, routes and map are stored only on your device. Nobody — including the developer — can see them.
The only things that ever leave your device are:
- Map tile requests, which necessarily reveal the map area you are looking at (not your tracks)
- Place-search text you type, sent to Apple’s Maps service to return results
- Files you deliberately export or share
All three are described in detail below.
1. Who we are
TurMap is developed by Cameron Redsell‑Montgomerie, an individual developer based in Ontario, Canada. There is no company behind it.
Contact for privacy questions: support@turmap.app
For privacy law purposes, we are the controller only of the very limited data described in section 4. We are not a controller or processor of your health, workout or route data, because that data is never transmitted to us and we have no technical means of accessing it.
2. What TurMap stores, and where
Everything TurMap knows about you lives on your device:
| What | Where | Leaves the device? |
|---|---|---|
| Workout details (date, duration, distance, activity type) from Apple Health | Local database | No |
| GPS route geometry from Apple Health and imported GPX files | Local database | No |
| Trips, groupings, names and notes you create | Local database | No |
| Downloaded offline map regions | Local map cache | No |
| Preferences (map style, recent searches, layer toggles) | iOS settings storage | No |
TurMap has no user account, no login, no cloud sync and no backend server. There is nowhere for your data to be uploaded to.
Device backups
Because the database sits in the app’s own storage, it is included in your normal iPhone or iPad backup (encrypted iCloud Backup or a local computer backup), exactly like any other app’s data. That backup is governed by Apple’s privacy policy and your own iCloud settings, not by TurMap. TurMap does not read, write or sync anything to iCloud itself.
3. Apple Health
If you grant permission, TurMap reads two things from Apple Health:
- Workouts — type, start and end time, duration, and distance
- Workout routes — the GPS coordinates recorded with a workout
That is the complete list of Health data requested. TurMap requests read access only — it never writes anything back to Apple Health, and it cannot, because it requests no write permissions at all.
With your permission, TurMap also uses background delivery, so new workouts are picked up without you having to open the app. This runs entirely on your device.
Health and route data read from Apple Health is never transmitted off your device, in whole or in part, for any purpose — including diagnostics. You can revoke TurMap’s Health access at any time in Settings ▸ Privacy & Security ▸ Health ▸ TurMap, or in the Health app under Sharing ▸ Apps.
Deleting TurMap deletes its local database along with it. Revoking Health access stops further reading but does not by itself delete what TurMap has already stored locally — use [IN-APP DELETE PATH] or delete the app.
4. Data that does leave your device
This is the honest and complete list.
4.1 Map tiles
To draw a basemap, the app requests map tiles over the internet. The primary provider is MapTiler. OpenFreeMap is a fallback the app can switch to if the MapTiler service is unavailable or its credential has to be withdrawn. Both are named here because either may serve your tiles; the in-app map attribution always names the one actually in use.
A tile request unavoidably tells the provider which geographic area you are viewing and at what zoom, along with your IP address. It does not carry your tracks, your workouts, your identity or any account identifier — TurMap has none to send. The provider is not told that a viewed area is somewhere you have been.
What the provider does with that request is governed by its own privacy policy: MapTiler, OpenFreeMap.
Downloading offline regions removes this exposure for later viewing. Once a region is downloaded, panning around it makes no further network requests. If you download regions and then use the app in airplane mode, TurMap makes no network requests at all.
4.2 Place search
When you type in the search field, the text is sent to Apple’s Maps service to return matching places. The search is biased toward the map area you are currently viewing, so that region is sent with the query. This is Apple’s service, handled under Apple’s privacy policy; TurMap receives no copy and keeps no server-side record.
Searching by raw coordinates, or searching your own saved routes and trips, is resolved entirely on device with no network request.
4.3 Things you choose to export
GPX exports and share-card images are generated on device and handed to the iOS share sheet. Where they go from there is entirely your choice. Share cards deliberately contain no basemap tiles — your trace is drawn on a plain panel.
4.4 Your current location on the map
If you enable the show-my-location control, TurMap asks for When In Use location access and displays your position on the map. That position is used for display only: it is not recorded to the database, not added to your history, and not transmitted anywhere.
5. What TurMap does not do
Verified against the source code as of 21 September 2026:
- No analytics or telemetry of any kind. No Firebase, Crashlytics, Sentry, Amplitude, Mixpanel, or equivalent.
- No advertising, no ad identifiers, no tracking prompt — because there is nothing to track.
- No tracking across apps or websites, as declared in the app’s privacy manifest.
- No sale or sharing of personal information, under any definition.
- No profiling and no automated decision-making.
- No third-party data collection code in the app.
Apple may provide the developer with aggregated, anonymised crash and usage statistics only if you have opted in to sharing analytics with developers in Settings ▸ Privacy & Security ▸ Analytics & Improvements. That is an Apple mechanism, controlled by you, and it contains no route or Health data.
6. Purchases
TurMap is a one-time purchase with no subscription.
Any purchase is handled entirely by Apple through the App Store using Apple’s own in-app purchase system. TurMap never sees and never receives your name, your payment details, your billing address or your Apple Account identifier. The app stores only a local flag on your device recording whether the purchase is active, and asks Apple — not us — to confirm it.
“Restore purchases” works the same way: Apple confirms your entitlement against your Apple Account without disclosing your identity to us.
We receive from Apple only the aggregate sales and payout reporting every App Store developer receives. It contains no information identifying individual purchasers.
7. Children
TurMap is not directed at children under 13 and collects no personal information from anyone, including children.
8. Your rights
Because TurMap holds your data only on your own device, the usual data-subject rights are exercised directly, without contacting anyone:
| Right | How to exercise it |
|---|---|
| Access / portability | Export your tracks as GPX from within the app |
| Erasure | Delete data in the app, or delete the app |
| Restrict or withdraw consent | Revoke Health or Location permission in iOS Settings |
| Object to processing | Not applicable — no processing occurs off your device |
We cannot fulfil an access or deletion request on your behalf, because we hold no copy of your data and have no way to identify you.
Where applicable law gives you a right to complain to a regulator, you may contact the Office of the Privacy Commissioner of Canada; in the EEA, your national data protection authority, which in Norway is Datatilsynet; or in the United Kingdom, the Information Commissioner’s Office.
9. Data retention
We retain nothing, because we receive nothing. Data on your device is retained until you delete it or delete the app. Log retention by the map-tile provider and by Apple is governed by their respective policies.
10. Security
Your data is protected by iOS’s own file-system encryption and the app sandbox — the same protection Apple applies to Health data generally. Because nothing is transmitted or stored remotely, there is no server to breach and no credential of yours for an attacker to steal. Network requests the app does make use HTTPS.
11. Changes to this policy
If this policy changes materially — in particular if any future feature introduces a network request that was not previously made — the change will be described in the app’s release notes and the “Last updated” date above will change. Planned route-planning features will require querying map and routing services; those requests will be opt-in, clearly marked, and never on the path to viewing your own history, and this policy will be updated before they ship.
12. Contact
A copy of this policy is also available inside the app, under Settings ▸ Privacy, so it can be read without a network connection.