This Privacy Policy explains which personal data is processed when using InLoco, the purposes for which it is used, and the choices and controls available to users.
At a glance
- Access to InLoco is available exclusively through a Google account.
- Saved places, photographs, notes and other information are used to provide the app’s features and allow users to find and manage their places.
- Location is used to associate geographic coordinates with saved places and display them on the map. InLoco does not continuously track location and does not monitor users’ movements in the background.
- Photographs associated with places are not analysed using image-recognition systems and are not used to train artificial intelligence models.
- Usage statistics through Firebase Analytics are optional and are collected only after the user has given consent. Consent can be withdrawn at any time in the app settings.
- Analytics events do not include photographs, notes, place titles, addresses or precise geographic coordinates.
- InLoco does not sell users’ personal data and does not disclose it to third parties for advertising or commercial purposes.
- InLoco does not display advertising, use commercial profiling systems or carry out remarketing activities.
- Users can delete their account and associated data directly from the app or by following the instructions on the dedicated account-deletion page.
The following sections provide more detailed information about the data processed, the services used, retention periods and users’ rights.
1. Introduction
Protecting personal data is an important part of the development of InLoco.
This Privacy Policy explains clearly and transparently which personal data is collected when using the application, the purposes for which it is processed, how it is protected and which rights are available to users.
The purpose of this notice is to help every user easily understand how their information is handled, so that they can use InLoco with full awareness.
This notice applies to the use of the InLoco app and related services, including the official website when it is used to provide information or services connected with the application.
The following sections describe in detail the data processed, the purposes of processing, the services used, data retention periods and the ways in which users may exercise their rights.
2. Data Controller
The Data Controller for personal data relating to the InLoco application is Stefano Mallus, creator and owner of the InLoco project.
For any request relating to this Privacy Policy or to exercise rights under the applicable data-protection legislation, the Data Controller may be contacted at:
Requests will be handled as promptly as reasonably possible and in accordance with the applicable legislation.
3. Scope
This Privacy Policy applies to the processing of personal data carried out in connection with the use of the InLoco application and related services.
In particular, this notice covers:
- the InLoco mobile application;
- the official InLoco website;
- information and support pages connected with the application, including the Privacy Policy, Terms of Use and account-deletion pages;
- the services required for the app to function, within the limits described in this notice.
This notice does not apply to third-party websites, applications or services that may be accessed through links in the application or on the official website. Those services are governed by their own privacy notices, which users are encouraged to review before using them.
4. Personal data processed
4.1 Google account data
To use InLoco, users must sign in with a Google account. The application processes only the information made available during authentication through that Google account.
Data processed
- display name;
- email address;
- profile image.
Purpose of processing
This information is used to identify the user, provide access to the application, maintain the authenticated session and personalise certain profile features.
Additional information
InLoco does not request or store passwords, login credentials or other authentication data. The authentication process is handled directly by Google through Google Sign-In.
4.2 Saved places
InLoco’s main purpose is to allow users to create and manage a personal collection of places of interest.
Data processed
For each saved place, the following data may be processed, depending on the information entered by the user or generated during saving:
- title;
- category and subcategories;
- geographic coordinates;
- address associated with the place;
- date and time associated with the place;
- information required to synchronise data between devices.
Purpose of processing
This data is used exclusively to allow places linked to the user’s account to be saved, organised, searched, displayed on the map and synchronised.
Additional information
Saved places are linked exclusively to the authenticated user’s account and are not made public or automatically shared with other users.
4.3 Photographs
InLoco allows one or more photographs to be associated with saved places to make them easier to recognise and find again over time.
Data processed
Photographs that the user chooses to take or associate with a place are stored together with the relevant place record.
Purpose of processing
Photographs are used exclusively to display saved places, enrich the related records and improve the user experience.
Additional information
Photographs are not analysed using image-recognition systems, are not processed to identify people, objects or content, and are not used to train artificial intelligence models.
Photographs remain associated exclusively with the user’s places, are not saved to the device gallery and are not shared publicly by the application.
4.4 Geographic location
InLoco uses geographic location exclusively to allow the user to associate coordinates with saved places and find them again later.
Data processed
- geographic coordinates of the place;
- address associated with those coordinates, where available;
- information required to display the place on the map and open directions.
Purpose of processing
This data is used exclusively to store the location of saved places, display them on the map, calculate the approximate distance from the user and open navigation through Google Maps.
Additional information
Location is acquired only when required for the app’s features and is not used to continuously monitor users’ movements.
InLoco does not track location in the background and does not record users’ movement history.
4.5 Notes and user-provided content
InLoco allows users to associate notes and other text information with saved places so that they can retain useful and personal details.
Data processed
Text content that the user voluntarily chooses to enter in their place records may be processed.
Purpose of processing
This content is used exclusively to allow the user to view, edit and synchronise information associated with their places.
Additional information
The content of notes is not analysed, profiled or used for purposes other than providing the application’s features.
4.6 Technical information
To ensure that the application functions correctly, InLoco may process certain technical information relating to the device and the use of its services.
Data processed
- technical identifiers required for authentication and data synchronisation;
- application version;
- operating-system version;
- technical information required to manage app features and resolve possible issues.
Purpose of processing
This information is used exclusively to ensure that the application functions correctly, maintain data synchronisation between devices, improve service reliability and identify technical issues.
Additional information
Technical information is not used to personally identify the user or for commercial profiling purposes.
4.7 Application preferences
InLoco may store certain configuration preferences selected directly by the user in order to improve the user experience and preserve selected settings between sessions.
Data processed
- application language;
- visual theme;
- settings available in the app;
- the choice to enable or disable usage statistics (Analytics).
Purpose of processing
This information is used exclusively to personalise the application’s behaviour according to the user’s choices and preserve those settings over time.
Additional information
Application preferences are used exclusively for the operation of the relevant features and are not used for commercial profiling purposes.
5. Purposes of processing
The Data Controller processes personal data exclusively for the purposes described in this Privacy Policy and to the extent necessary to provide the features offered by InLoco.
5.1 Provide the application’s features
Allow access to the app, creation and management of places, storage of photographs, viewing of place records, display on the map and all other features made available by the application.
5.2 Manage data synchronisation
Keep the user’s data up to date and make it available on devices connected to the same account.
5.3 Personalise the user experience
Store user preferences, such as application language, visual theme and other available settings.
5.4 Ensure security, reliability and correct operation
Manage authentication, maintain correct operation of the application, prevent technical issues and ensure continuity of the service.
5.5 Comply with legal obligations
Comply with obligations under applicable legislation and respond to requests from competent authorities where required by law.
5.6 Produce usage statistics
Where the user has given consent, certain information about use of the application may be processed to produce aggregated statistics and help improve InLoco’s features.
6. Legal basis for processing
Personal data is processed by the Data Controller only in the circumstances permitted by the applicable data-protection legislation.
Depending on the purpose, processing is based on one or more of the following legal bases:
6.1 Performance of the service requested by the user
Most personal data is processed because it is necessary to provide the features requested by the user, such as access to the application, saving places, synchronising data and managing preferences.
6.2 Compliance with legal obligations
Certain data may be processed where necessary to comply with applicable legal obligations or to respond to requests from competent authorities where required by law.
6.3 User consent
Where required, processing takes place only after the user has given consent.
At present, this applies to the use of Firebase Analytics for collecting application usage statistics.
Consent is optional, may be refused without affecting the use of the app’s main features, and may be withdrawn at any time in the application settings.
7. Services used
To provide InLoco’s features, the Data Controller uses certain services and software components required for the application to function.
These services are used exclusively to provide the features described in this Privacy Policy and are configured consistently with the purposes of processing described above.
7.1 Firebase Authentication
Service
Firebase Authentication is used to manage user authentication through a Google account.
Purpose
Provide secure access to the application and identify the user while using InLoco.
Data processed
The service processes the information required for authentication through a Google account, as described in section 4.1.
7.2 Local storage on the device
Service
To improve application performance and allow certain features to operate correctly, InLoco keeps a local copy of some data on the user’s device.
Purpose
Reduce loading times, improve responsiveness, support features available offline and synchronise data with the cloud when necessary.
Data processed
Local storage may contain a copy of information associated with the user’s account and required for the application to function.
Additional information
Data stored locally is used exclusively by the InLoco application and forms part of the normal operation of the synchronisation system.
7.3 Cloud Firestore
Service
Cloud Firestore is the cloud database used by InLoco to store information associated with the user’s account.
Purpose
Store and synchronise the data required for the application to function across devices connected to the same account.
Data processed
The service may process data relating to saved places, application preferences and other information described in section 4.
7.4 Firebase Storage
Service
Firebase Storage is used to store photographs associated with saved places.
Purpose
Store photographs and make them available to the user on devices connected to the same account.
Data processed
The service processes only the photographs that the user chooses to associate with their places.
7.5 Google Maps
Service
InLoco uses Google Maps to display the user’s saved places on the map and, when requested, to open directions to the selected place.
Purpose
Allow saved places to be displayed on a map and navigation to be started through Google Maps services.
Data processed
When the user uses map features or starts navigation, data strictly necessary to display the place and calculate the route may be processed.
Additional information
When the user chooses to open navigation through Google Maps, the relevant service is provided directly by Google. Data processing within Google Maps is governed by Google’s Privacy Policy and Terms of Service.
7.6 Firebase Analytics
Service
InLoco uses Firebase Analytics to collect statistical information about the use of the application and understand how it operates over time.
Purpose
Firebase Analytics is used exclusively to analyse, in aggregated form, use of the application’s features, identify possible improvements, measure service reliability and support the development of InLoco.
Data processed
Where the user has given consent, statistical events may be collected in relation to:
- creation, editing, viewing and deletion of place records;
- use of search, filters and the application’s main features;
- use of data synchronisation;
- opening directions;
- other interactions necessary to understand how the application is used.
Certain technical parameters may also be associated with events, such as the place category, number of associated photographs, synchronisation strategy used or other statistical information that does not include the content of place records.
Additional information
Firebase Analytics is entirely optional and is enabled only after the user has given consent.
Consent may be withdrawn at any time in the application settings. If consent is withdrawn, InLoco stops sending new statistical events to Firebase Analytics.
The information collected does not include the content of place records created by the user, notes, photographs, addresses or precise geographic coordinates of saved places.
Firebase Analytics is not used to track users’ movements, analyse the content of photographs or collect the content of place records created in the application.
Firebase Analytics may use pseudonymous technical identifiers to distinguish different installations of the application and produce aggregated statistics. The Data Controller does not use those identifiers to personally identify users or for commercial profiling purposes.
8. Data retention
The Data Controller retains personal data only for as long as necessary to provide the application’s features and for the purposes described in this Privacy Policy.
- account data and content created by the user are retained until deleted by the user or until the account is deleted;
- data stored locally on the device is retained until it is removed by the application, by the user or during the account-deletion procedure;
- statistical information collected through Firebase Analytics, where the user has given consent, is retained in accordance with the retention policies of that service.
At the end of the retention period or following account deletion, data is deleted or made no longer attributable to the user, within the limits and according to the procedures of the services used.
9. Data security
The Data Controller adopts reasonable technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, alteration or accidental destruction.
The main measures include:
- user authentication through a Google account;
- encrypted connections for data transmission;
- cloud services provided by Firebase for data storage and synchronisation;
- access controls through security rules applied to the cloud services used by the application;
- procedures designed to correctly manage account deletion and the associated data.
The Data Controller is committed to adopting security measures appropriate to the evolution of technology and the application’s features.
No information system or data-transmission service can guarantee absolute security. For this reason, the Data Controller cannot guarantee that data will be completely immune from unforeseen events or particularly sophisticated cyberattacks.
10. User rights
Users may exercise the rights granted by the applicable data-protection legislation at any time.
In particular, where provided by law, users have the right to:
- obtain information about the processing of their personal data;
- request access to personal data concerning them;
- request correction of inaccurate data or its update;
- request deletion of personal data where permitted by law;
- request restriction of processing where applicable;
- object to processing where permitted by law;
- withdraw consent to Firebase Analytics at any time, without affecting the lawfulness of processing carried out before withdrawal;
- receive their personal data where the right to data portability applies.
To exercise these rights or request further information about the processing of personal data, users may contact the Data Controller using the details provided in section 2.
11. Account deletion
Users may request deletion of their account and associated personal data at any time.
The deletion request may be submitted directly through the application or by following the instructions on the dedicated page of the official InLoco website.
Once the deletion procedure has started:
- access to the account is disabled during the procedure;
- local data on the device is removed by the application;
- data associated with the account is deleted according to the procedure used by InLoco’s services.
Once confirmed, an account-deletion request cannot be cancelled.
For security and service-reliability reasons, certain deletion operations may require a short period of time to complete. During that period, the user may temporarily be unable to access the application with the account concerned.
12. International data transfers
To provide InLoco’s features, the Data Controller uses services supplied by Google and Firebase, which may involve the processing of personal data on infrastructure located in countries other than the user’s country of residence.
Where personal data is transferred outside the European Economic Area (EEA), such transfers take place in accordance with the applicable data-protection legislation and subject to the safeguards required by law.
Further information about data processing by Google and Firebase is available in the documentation and privacy notices published by Google.
13. Children
InLoco is not specifically designed or intended for use by children.
The Data Controller does not knowingly collect children’s personal data through the features offered by the application.
If the Data Controller becomes aware that a child’s personal data has been processed in breach of the applicable legislation, reasonably necessary measures will be taken to promptly manage or remove that data.
14. Changes to this Privacy Policy
This Privacy Policy may be updated over time to reflect legal changes, developments in the application’s features or changes to the services used by InLoco.
If material changes affect the processing of personal data or users’ rights, the Data Controller will take reasonable steps to inform users through the application, the official website or other appropriate channels.
The date of the latest update is shown at the beginning of this Privacy Policy.
15. Contact
For any information relating to this Privacy Policy or to the processing of personal data through InLoco, the Data Controller may be contacted using the details below:
The Data Controller is available to provide clarification about this notice and to handle requests concerning the exercise of rights under the applicable data-protection legislation.