Privacy policy

Ura shows the official snowmobile routes of Finland and tells you whether you are on one. It has no account and no sign-up. This policy covers the iOS and Android apps and this site.

Your position is read by the app to work out whether you are on a route. That calculation happens on your phone. Your position is never sent to us or to anyone else.

There is no analytics, no advertising and no crash reporting in the app.

nadlo GmbH, Cordulaplatz 8, 5400 Baden, Switzerland, operates Ura and this site. Write to info@nadlo.ch with any question about this policy.

The full company details are in the imprint.

Where anything is processed at all — the request logs our hosts keep, a trace file you choose to send, an email you write — the legal basis is our legitimate interest in running the service and answering you (Art. 6(1)(f) GDPR), or your consent where you choose to share a file with us (Art. 6(1)(a)).

We are established in Switzerland, not in the EU. Because the processing described here is occasional, covers no special categories of data and poses no risk to your rights, we rely on the exemption in Art. 27(2)(a) GDPR and have not appointed a representative in the Union. Write to the address above; you may also complain to your own supervisory authority.

When you allow it, the app reads your phone’s position while you ride and compares it against the route network stored in the app. The result — on route or off route, and how far off — is shown to you and then discarded. Position is read only while the app is open; Ura never reads it in the background, and never writes it to storage unless you turn on field logging.

No position, track or route history leaves the phone. We do not store your location, because we never receive it. You can withdraw the location permission at any time in your phone’s settings; the map still works, the on-route verdict does not.

The app makes two kinds of network request. Neither carries an identifier for you.

• The route and place bundle, downloaded over HTTPS from our data host, Supabase. It is the same file for every rider, the request carries no account, device or advertising identifier, and — as with any request on the internet — your phone’s IP address is visible to that host. The app checks for a newer bundle when it opens and when it returns to the foreground, at most once a minute. The project runs in Sweden (Supabase region eu-north-1), inside the EU.
• Map tiles and map fonts from the tile service of the National Land Survey of Finland (Maanmittauslaitos). These requests carry our API key, and — as with any request on the internet — your phone’s IP address is visible to that service. Tiles you have looked at are kept in a purgeable cache on the phone, up to 250 MB, so the map still draws without a connection.

Settings → Diagnostics has an optional Field logging switch. It is off by default.

While it is on, the app writes every GPS fix it receives — latitude and longitude to the metre, the time, the accuracy and, where the phone gives one, the heading — together with its own on-route and off-route verdicts to a file in your phone’s Documents folder. That file is a precise record of where you rode. Nothing is uploaded by the app; because it sits in Documents, your phone’s own backup (iCloud or Google) may include it, as it does any document.

The file stays on your phone until you delete it in the app, and you decide whether to send it to us using your phone’s share sheet. If you do, we use it only to work out why the app judged a ride the way it did, and delete it once that is answered — at the latest 90 days after we receive it.

This site is served by Vercel Inc. (USA), which keeps the request logs any web host keeps — your IP address, browser type and the time of the request — for a short period to deliver the site securely; Vercel commits to the EU’s standard contractual clauses for that processing. There is no analytics and there are no third-party scripts. One cookie is set, NEXT_LOCALE: it holds the language you picked and nothing else, is kept for a year, and is sent to the host with every request so the site opens in that language. Your light or dark choice and the theme key setting are kept in your browser and never leave it.

Your language, appearance and map layer choices are stored locally on the device so the app opens the way you left it. They are not synced and not readable by us.

The content of the app comes from public data, compiled before it reaches you. It says nothing about you.

• Routes from LIPAS, the Finnish register of sports facilities, run by the University of Jyväskylä (CC BY 4.0).
• Places from OpenStreetMap contributors (ODbL).
• The base map from the National Land Survey of Finland.

Riding on Metsähallitus tracks requires a permit, bought from eraluvat.fi. Ura is an aid to navigation, not a legal authority: you remain responsible for checking permits, closures, ice conditions and weather before and during a ride.

eraluvat.fi (opens in a new tab)

We keep nothing ourselves. Request logs stay with the hosts for their standard log retention. A trace file you send is deleted within 90 days; an email you write is kept while the conversation is open and deleted within a year of its end.

Under the GDPR and Swiss data protection law you may ask what we hold about you, have it corrected or deleted, have its processing restricted, receive it in a portable form, and object to processing based on our legitimate interests. For almost everyone the answer will be that we hold nothing; if you have sent us a trace or an email, we will tell you what it is and delete it on request.

There is no automated decision-making and no profiling. The app's on-route verdict is a geometric calculation that happens on your phone; it produces no decision about you.

To exercise any of these rights, write to info@nadlo.ch.

You may complain to a supervisory authority: in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi), in Switzerland the Federal Data Protection and Information Commissioner (edoeb.admin.ch), or the authority of the country you live in.

tietosuoja.fi (opens in a new tab) · edoeb.admin.ch (opens in a new tab)

Ura is not directed at children: not under 13, and not under 16 where local law sets the higher age. We do not knowingly collect anything from them — or from anyone else.

We may update this policy as the app changes. The date at the top of this page is the date of the current version.

Questions about privacy go to info@nadlo.ch.

info@nadlo.ch