# Everyday Grandeur Privacy Policy
Oct 26, 2026 · @Pontus Bovin
Last updated: October 26, 2026. This policy explains what personal data the Everyday Grandeur app collects, why, who can see it, and how you can delete it.
## 1. Who we are
Everyday Grandeur is provided by Pontus Bovin, Sweden, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR).
Questions about this policy or your data: <everydaygrandeur1@gmail.com>..
## 2. What data we collect
We only collect what the app needs to work. Nothing is sold to anyone.
| Data | When it is collected | Visible to other users? |
| --- | --- | --- |
| Email address and password (stored encrypted by Firebase Authentication) | When you create an account | No |
| Username | When you create an account | Yes |
| Profile picture | If you upload one | Yes |
| Sites you add: title, description, category, style, architect, build year, photos and exact coordinates | When you add or edit a site | Yes, without your name after account deletion |
| City name of a site you add, looked up from its coordinates by your phone's map service | When you add a site | Yes |
| Photos you add to other people's sites | When you upload them | Yes |
| Guestbook entries | When you write them | Yes |
| Liked and saved sites, and your own lists of sites (name and the sites in them) | When you like or save a site, or create a list | No, unless you share a list (section 4) |
| Visited sites (check-ins): which site and when | When you check in | Counted in your public stats; check-ins appear in the activity feed |
| Your location at the moment of a check-in | When you check in | No, used once and not stored |
| Your location while using the map and home screen | While the app is open, if you allow it | No, stays on your phone |
| Level, points, badges and statistics calculated from your activity | Automatically | Yes |
| Advertising data collected by Google AdMob, such as device information, IP address and, if you allow it, your device's advertising identifier | When ads are shown | No |
## 3. Why we use your data
| Purpose | Data used | Legal basis (GDPR art. 6) |
| --- | --- | --- |
| Creating and running your account, signing in, resetting your password | Email, password, username | Contract (b) |
| Showing sites, letting you add sites, photos, likes, saves and guestbook entries | The content you add and your interactions | Contract (b) |
| Showing sites near you and walking distances | Your location, on your phone only | Consent (a), given in your phone's location permission |
| Verifying that you are within 500 m of a site when you check in | Your location at that moment | Consent (a), given in your phone's location permission |
| Calculating levels, badges and statistics, and showing your public profile | Your check-ins, added sites and guestbook entries | Contract (b) |
| Keeping the app safe: automatic review of uploaded photos, preventing abuse | Uploaded photos, usernames | Legitimate interest (f) |
| Translating site descriptions so other users can read them | Site descriptions | Legitimate interest (f) |
| Showing ads that fund the app | Advertising data, see section 6 | Consent (a) for personalised ads, given in the consent form or the tracking prompt; legitimate interest (f) for non-personalised ads |
## 4. What other users can see
Everyday Grandeur is a community app, so some of your data is public. Anyone using the app, logged in or not, can see:
- **Your public profile:** username, profile picture, level, points, badges, and statistics such as number of visits, sites added and cities visited, and your favourite site (name, style and build year) if you add one; if it is a site in the app, its photo is shown as a banner behind your profile picture. Other users can find you by searching for your username.
- **The sites you added**, with your username as contributor.
- **Your guestbook entries**, with your username.
- **The activity feed:** short entries such as "@username checked in at \[site\]", "@username added \[site\]" or "@username unlocked \[badge\]". Entries are removed after 30 days.
- **On each site:** how many people have visited it, and who was first to check in (the "Pioneer").
* **Who you follow and who follows you**, with the number of followers on your profile.
* **Shared links:** when you or someone else shares a site or a profile, the link opens a public web page on kulturarvsapp.web.app with the same public information: the site's photo and description, or a profile's username, picture and level. If you share one of your lists, anyone with the link can see its name, the sites in it and your username. You can stop sharing at any time, and the link then stops working.
Your email address, password, liked and saved sites, lists you haven't shared, and your location are never shown to other users.
## 5. Location
The app only uses your location while it is open and only if you allow it in your phone's settings. You can turn it off at any time; the app still works, but without nearby sites and check-ins.
- **Discovering sites:** your location is used on your phone to center the map, show nearby sites and calculate walking distances. It is not sent to our servers for this.
- **Check-ins:** when you tap Check in, your current coordinates are sent once to our server, which checks that you are within 500 m of the site. The coordinates are then discarded. We store only which site you checked in to and when. You do not need to be nearby to check in at a site you created yourself.
- **Adding a site:** the exact coordinates you choose for the site are stored with it and shown on the map, because they are part of the site.
## 6. Advertising
The app shows ads from Google AdMob to fund its development. Ads can be **personalised**, which means chosen based on your interests and activity, but only if you allow it:
- **In the EU/EEA and the UK:** the first time you open the app, Google's consent form asks whether ads may be personalised. You can change your choice at any time under **Profile > settings (cog icon) > Ad privacy settings**.
- **On iOS:** the app asks for permission to track through Apple's App Tracking Transparency. If you say no, we request non-personalised ads only. You can change your answer later in Settings > Privacy & Security > Tracking.
- **On Android:** you can turn off ad personalisation, or reset or delete your advertising ID, in your phone's settings.
Non-personalised ads are not based on your interests or your activity in other apps. Even then, AdMob processes some data, such as device type, operating system, IP address and, if you allow it, your device's advertising identifier. Google uses this to show and count ads, limit how often an ad is shown, and prevent fraud. Read more in [Google's privacy policy](https://policies.google.com/privacy) and [how Google uses data from apps that use its services](https://policies.google.com/technologies/partner-sites).
Saying no to personalised ads or to tracking does not limit the app: you can still use all of it.
## 7. Service providers and international transfers
We use these providers to run the app. They process data on our behalf or, for ads, under their own policies.
| Provider | What they do | Privacy information |
| --- | --- | --- |
| Google Firebase | Sign-in, database, photo storage, server functions and the website | [firebase.google.com/support/privacy](https://firebase.google.com/support/privacy) |
| Google Cloud Vision | Automatically reviews uploaded photos and removes inappropriate ones or ones that do not show a site | [cloud.google.com/terms/cloud-privacy-notice](https://cloud.google.com/terms/cloud-privacy-notice) |
| Google Cloud Translation | Translates site descriptions into English | [cloud.google.com/terms/cloud-privacy-notice](https://cloud.google.com/terms/cloud-privacy-notice) |
| Google AdMob | Shows ads and, in the EU/EEA and the UK, the consent form for personalised ads; see section 6 | [policies.google.com/privacy](https://policies.google.com/privacy) |
| Apple (iOS) or Google (Android) map services | Looks up the city name of a site you add, from its coordinates | Your phone maker's privacy policy |
Our server functions run in Google's EU data centers. Google may still process some data outside the EU/EEA, such as in the United States. Such transfers are covered by the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
## 8. How long we keep data
| Data | Kept for |
| --- | --- |
| Account, profile, likes, saves, visits, follows, lists, level and badges | Until you delete your account |
| Activity feed entries | 30 days |
| Your location for discovering sites | Not stored |
| Your location at a check-in | Not stored; discarded right after the 500 m check |
| Photos rejected by the automatic review | Deleted immediately |
| Sites and guestbook entries you added | As long as the site exists; anonymised when you delete your account (section 9) |
| Advertising data | According to Google's own retention rules. Your ad choices are saved on your phone until you change them or delete the app |
## 9. Deleting your account
You can delete your account at any time in the app: **Profile > settings (cog icon) > Delete account**. If you no longer have the app, email <everydaygrandeur1@gmail.com> from the address you signed up with, with the subject "Delete account". We handle email requests within 30 days.
When your account is deleted, we immediately delete:
- your account, email address, username and password
- your profile picture
- your public profile, level, points, badges and favourite site
- your liked, saved and visited sites, and your lists (shared list links stop working)
- your entries in the activity feed, and who you follow and who follows you
We keep, without any link to you:
- **sites you added**, with their photos and descriptions, because they are part of the shared map
- **guestbook entries you wrote**, shown as "Deleted user"
If you want these removed as well, email us and we will delete them.
## 10. Your rights
Under the GDPR you have the right to:
- **access** the personal data we hold about you and get a copy of it
- **correct** data that is wrong (you can change most of it yourself in the app)
- **delete** your data (section 9)
- **restrict** or **object** to processing based on legitimate interest
- **data portability:** receive the data you gave us in a machine-readable format
- **withdraw consent** at any time, for example by turning off location or tracking in your phone's settings, or by changing your ad choices under Profile > settings > Ad privacy settings
To use these rights, email <everydaygrandeur1@gmail.com>. We answer within 30 days.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at [imy.se](https://www.imy.se), or to the data protection authority where you live.
## 11. Children
Everyday Grandeur is not intended for children under 13, and we do not knowingly collect their personal data. Because profiles are public, users under 16 should have a parent or guardian's permission. If you believe a child has given us personal data, email us and we will delete it.
## 12. Changes to this policy
When the app changes how it handles personal data, we update this policy and the "Last updated" date at the top. For larger changes, we will also tell you in the app.
© 2025 Pontus Bovin. All rights reserved.