Privacy Policy

Karim Marzouki, trading as Aduro — The Magic Pen, c/o POSTFLEX PFX-436-295, Emsdettener Straße 10, 48268 Greven, Germany. Contact for any privacy question or request: contact@adurothemagicpen.com.

There is no analytics or tracking script anywhere in this app. Nothing follows you between sites. The database is hosted in the EU. Your travel history is yours: you can export all of it as a file, or delete everything permanently, from your profile. No email to support required.

Account details: email address, when you create an account. Needed to sign you in and back up your data. Lawful basis: performance of a contract (Art. 6(1)(b)).

Trips and profile: countries, entry and exit dates, nationality, income if you enter it. This is the product: the calculations are impossible without it. Lawful basis: contract.

Documents: anything you choose to upload to the vault, which may include passport scans and insurance certificates. Stored in a private bucket, encrypted at rest, retrievable only by you. Entirely optional. Lawful basis: consent (Art. 6(1)(a)).

Location: the community radar is currently a preview that runs entirely on your device. No coordinate of any kind is sent to us today. See the section below for what will happen when the networked version ships.

Waitlist email: if you ask to be notified when the radar launches, we store your email address and the city you chose, for that purpose only. Lawful basis: consent.

Payment details: handled entirely by Stripe. We receive a subscription status and an invoice reference; we never see or store card numbers. Lawful basis: contract.

Today the radar is a local preview. Your position is read only if you allow it, is held in your browser, and is never transmitted. The only thing that reaches us is your email address, and only if you join the waitlist.

When the networked version launches, the design already built for it works like this: you are invisible by default and must choose to appear; your coordinate is rounded to a grid cell of roughly one kilometre on your device, so your exact position is never transmitted; you are shown only where at least five people share a cell, so a position cannot be narrowed down by watching it; and no location history is kept. A single current cell is stored and overwritten, never appended to.

This page will be updated before any of that goes live, not after.

Emergency health information (blood type, allergies, current medication) is stored only in your browser's local storage. It is deliberately excluded from synchronisation and never reaches our servers.

Health data is special category personal data under Art. 9 and carries a higher bar than anything else here. Since the feature's entire value is being available offline on your device, there is no reason to accept that exposure, so we do not.

No advertising or analytics cookies are set. The app uses local storage and IndexedDB to hold your trips and cached city data so it works offline, and a session cookie to keep you signed in. Both are strictly necessary for a service you have asked for.

Referral links are held for the current browsing session only and are cleared when the tab closes. There is no persistent tracking cookie.

• Supabase: Database, authentication and file storage. EU (Frankfurt, eu-central-1).
• Vercel: Website hosting and delivery. EU and global edge network.
• Stripe: Payment processing and subscription billing. EU and USA (Standard Contractual Clauses).

Each acts as a processor under a data processing agreement. Transfers outside the EU rely on Standard Contractual Clauses.

Your data is never sold, and never shared for advertising.

Where a company pays for your seat, it can see only country day-counts and threshold status: the minimum needed for its own compliance obligations.

It cannot see your radar activity, your income or savings, your documents, your saved cities, your notes, or your location. That boundary is enforced in the database, not merely hidden in the interface, and a settings page shows you exactly what is shared.

Account data is kept while your account exists. Delete your account and it is removed permanently, including stored files. This is immediate and cannot be undone.

Invoices and payment records are retained where tax and commercial law requires it, independently of account deletion.

Waitlist emails are kept until the feature launches and you have been notified, or until you ask us to remove you.

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful beforehand.

Two of these are built in rather than requiring a request: Download my data produces a JSON file of everything held: profile, trips, document details, saved cities, connections and referral records. Delete account erases it. Both are on your profile page. Files in your vault are downloaded from the vault itself.

For anything else, email contact@adurothemagicpen.com. You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of your federal state.

Data is encrypted in transit and at rest. Access is enforced at the database level through row-level security, so a request for someone else's data fails at the source rather than relying on the interface to hide it. Document storage is private, reachable only through short-lived signed links.

The service is not directed at children and paid accounts require you to be 18 or over.