Tornante — Privacy Policy
Effective date: 10 July 2026 · Version 1.0 (TestFlight beta)
Tornante is built to keep your data on your phone. This policy explains, in plain language, what the App does and does not do with your data. Data controller: Diego Bianchi — diegobianchi99@gmail.com.
The short version
- No account, no sign-up, no advertising, no analytics, no trackers.
- Your location never leaves your device. GPS is processed on the phone to time the spoken pacenotes; it is not transmitted, logged remotely, or shared.
- The App talks to the internet only when you create a stage (see below). While you drive, it works fully offline.
What the App processes, and where
| Data | Where it is processed | Leaves the device? |
|---|---|---|
| GPS position, speed, heading during a run | On the device only | No |
| Stages you create/import (routes, names, elevation) | Stored on the device (local database) | No |
| App settings (look-ahead, volume, units, language) | Stored on the device | No |
| Start/finish/via coordinates when you pick a route on the map | Sent to the routing/elevation service to compute the road path | Yes — only these points, only at creation time |
| Map preview tiles at creation time | Standard tile requests to the map tile provider | Yes (standard web request) |
Network requests in detail
When you create a stage by picking points on a map, the App sends only the coordinates you tapped to a routing service (by default a public Valhalla instance operated by FOSSGIS e.V., using OpenStreetMap data) and, where elevation data is not bundled, to the same service's elevation endpoint. These requests include no identifiers, no account, and no history — technically they are ordinary web requests, so the service operator sees your IP address, as with any internet request. Map preview tiles are fetched from CARTO. No request of any kind is made while you drive.
Location permission
The App asks for location permission ("While Using", optionally "Always" for screen-off/pocket use) solely to time the pacenotes during a run. Location is used in real time and is not stored after the run, not transmitted, and not used for any other purpose. You can revoke the permission at any time in iOS Settings; the App then works in replay mode only.
What the App does NOT do
- No collection of personal data by the Developer — we run no servers.
- No analytics or crash-tracking SDKs, no advertising, no fingerprinting.
- No sale or sharing of any data with anyone.
TestFlight (beta builds)
Beta builds are distributed through Apple TestFlight. Apple provides the Developer with anonymised crash logs and basic beta statistics under Apple's TestFlight terms and privacy policy. This is Apple's collection, governed by Apple's policies; the App itself adds no telemetry.
Your rights (GDPR)
Because the App stores your data only on your device and the Developer holds no personal data about you, most GDPR requests (access, rectification, erasure) are satisfied directly on your phone: deleting a stage, or deleting the App, removes the data. For anything else, contact diegobianchi99@gmail.com. You also have the right to lodge a complaint with your supervisory authority (in Italy: the Garante per la Protezione dei Dati Personali).
Changes
Material changes to this policy will be shown in the App and reflected in the effective date above.