Privacy policy

This privacy policy informs you in accordance with Art. 13 GDPR about the nature, scope and purpose of the processing of personal data by the Now Altimeter app for iOS, watchOS and Android and on the website www.now-altimeter.com.

In short: the app needs no account and contains no advertising, no analytics and no tracking tools. Altitudes, locations, tours, calibration and designs stay on your device. Data only leaves your device in the cases described below: when you send feedback yourself, when a tour map loads map tiles, and when you buy a subscription through the App Store or Google Play.

1. Controller

2. The app

2.1 Data that stays on your device

To work, the app uses your device's location (GPS), pressure sensor and compass. The values derived from them – current altitude, coordinates, air pressure, calibration, recorded tours including route and elevation profile, your own designs and background images, and all settings – are stored only locally on your device. They are transferred neither to me nor to third parties. The widget, the complication and the Apple Watch receive their data directly from your own devices.

The app only uses your location with your permission. While a tour is being recorded it also reads it in the background; on Android a persistent notification shows this. Without an active recording the app does not request your location in the background.

If you export a tour as a GPX file or share it as an image, you decide who receives it. Deleting the app removes this data. Backups of your device (iCloud or Google backup) are subject to the terms of Apple or Google.

2.2 Feedback from the app

You can open a feedback form in the app's settings. Only when you tap “Send” are the following data transmitted:

• your feedback text and the selected category (e.g. bug or idea)
• your email address, if you choose to provide one
• app version, operating system and its version, device model and language setting

No device identifier, no location and no tour data are transmitted. If a message cannot be sent (for example without internet), it remains stored on the device and is sent again on the next attempt.

Feedback is received by Tellstack (tellstack.app), a feedback service I operate myself. It runs on servers of Hetzner Online GmbH in Nuremberg, Germany, engaged as a processor under Art. 28 GDPR. To protect against spam, a one-way hash is formed from the IP address and browser identifier; the IP address itself is not stored.

To sort incoming messages (category, summary), your feedback text together with the app version and page reference is transmitted to OpenAI, L.L.C. (USA) – your email address is not. OpenAI is engaged as a processor; the transfer is based on the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR), supplemented by certification under the EU-US Data Privacy Framework. Please do not include sensitive personal information in your feedback.

The purpose is to evaluate and fix reported problems and to reply to your message. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving the app) and, if you provide an email address, additionally Art. 6 (1) (a) GDPR (consent to being contacted). Entries are deleted automatically no later than 12 months after receipt, or earlier on request.

2.3 Tour map

When the Android app shows a tour on the map, it loads map tiles from OpenFreeMap (tiles.openfreemap.org), operated by Hyperknot Software Kft., Hungary. For technical reasons your IP address and the requested map area are transmitted, which reveals which area you are currently viewing. No key or identifier is sent, and the tour data itself never leaves your device. No request is made unless a map is opened.

According to OpenFreeMap, no cookies are set and IP addresses are not stored in regular server logs; only in the event of abuse or attacks are they logged temporarily, for at most 30 days. Cloudflare may be used as a content delivery network. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in displaying maps without a commercial map provider).

On iOS the map is displayed by Apple Maps; Apple's privacy policy applies.

2.4 Purchases and subscriptions

Now Altimeter Pro is purchased and billed through the Apple App Store or Google Play. The respective store (Apple Distribution International Ltd. or Google Ireland Limited) is responsible for payment processing and contract data. I receive neither payment data nor your name. The app only asks the store whether an active subscription exists and unlocks the Pro features accordingly. The free trial is managed locally by the app, without an account.

2.5 Ratings and crash reports

The app may ask you for a rating using Apple's or Google's rating feature; the rating itself is handled entirely by the respective store.

If you have agreed to this in your device settings, Apple and Google provide me with aggregated crash and performance data. These contain nothing that would allow me to identify you personally and are collected by the platform provider, not by the app.

3. The website

3.1 General

Personal data is processed on this website only to the extent necessary for the website to function and for me to provide my services. No tracking cookies or advertising networks are used; for audience measurement see section 3.5. The website runs on a server of Hetzner Online GmbH in Germany.

3.2 Server log files

When you visit the website, the web server provider automatically stores information in so-called server log files, which your browser transmits automatically:

• IP address (anonymised or truncated after a short retention period)
• Date and time of the request
• Requested URL and HTTP status code
• Volume of data transferred
• Referrer URL
• Browser and operating system used

These data are not merged with other data sources and are processed exclusively to ensure trouble-free operation and to ward off attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).

3.3 Web fonts

This website serves its web fonts directly from the same server (self-hosted). No external requests are made and your IP address is not transmitted to any third party.

3.4 Contact form

If you use the contact form on the support page, the data you provide (name, email address, subject, message) is transmitted to me by email to respond to your request and processed for communication.

• Purpose: Handling your request and possible follow-up communication.
• Legal basis: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR for contract-related requests.
• Recipients: Me only. The message is delivered to me via the email delivery service Resend (Resend, Inc., USA), which processes your name, email address, subject and message for this purpose. Resend is engaged as a processor; the transfer to the USA is based on the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
• Retention period: Until your request has been fully processed and as long as required by tax or commercial retention obligations.
• Withdrawal: You can withdraw your consent at any time by email to the address above.

3.5 Audience measurement with Umami

To understand which pages are read, this website uses Umami. I run Umami myself on my server at Hetzner in Germany (umami.now-altimeter.com); no data is passed on to third parties.

Umami records the page visited, referrer, browser, operating system, device type, screen size, language, country and time. It sets no cookies, stores nothing on your device and does not store IP addresses; related page views are recognised via a daily rotating hash that cannot be reversed. Recognition across days or websites is therefore not possible.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a privacy-friendly analysis of usage). You can prevent the measurement by blocking JavaScript from umami.now-altimeter.com, for example with a content blocker.

3.6 Feedback page

You can send me a message directly via the feedback page of this website (now-altimeter.com/feedback). Older versions of the iOS app open this page and pass language, app version, build number, iOS version and device model in the address. Data is only stored once you submit the form, namely:

• your feedback text
• your email address, if you choose to provide one
• language, app version, build number, iOS version and device model
• the time of receipt

The data is stored exclusively on the server of this website and is not passed on to anyone. IP address, browser identifier or other identifiers are not stored. The purpose is to evaluate and fix reported problems; the legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving the app) and, if you provide an email address, additionally Art. 6 (1) (a) GDPR (consent to being contacted). Entries are deleted automatically no later than 12 months after receipt, or earlier on request.

3.7 Cookies

This website uses no tracking or marketing cookies. Your browser's localStorage only holds your theme preference (dark/light mode) so the choice persists on your next visit. Opening the feedback page additionally sets a strictly necessary cookie containing a signed timestamp, used solely to block automated form submissions; it expires after 30 minutes, contains no identifier and permits no recognition. The legal basis is Art. 6(1)(f) GDPR.

4. Your rights

You have the following rights vis-à-vis the controller:

• Access to the data stored about you (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7 (3) GDPR)

The app's data exists only on your device; I cannot provide information about it, and you can delete it yourself at any time. For feedback, contact requests or Umami data, please contact me.

An informal email to the following address is sufficient to exercise these rights: na-app@rz-solutions.dev.

5. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

6. Currency of this policy

This privacy policy is currently valid. Further development of the website or changes in legal requirements may make adjustments necessary. The most recent version can always be found at /en/datenschutz.

Last updated: October 2026