Effective July 13, 2026 · Last updated July 13, 2026 · Version 1.0
This Privacy Policy explains what data is processed by the GdeBenz Android application (package app.gdebenz.azs), why the data is needed, who may receive it, how long it is retained, and what choices are available to users.
Complete before publication:
Developer and data controller: Mykyta Polekov PRO-STUDIO TOV
Privacy contact: [PRIVACY CONTACT EMAIL].
No registration or user account is required.
The app contains no advertising, advertising profiling, or built-in behavioral analytics.
Location access is optional and is used to show nearby fuel stations, calculate distance, and center the map.
Search-center coordinates are sent to the backend to load fuel stations. If the map was centered using device location, they may correspond to the user's current location.
A fuel price or station status is submitted to the shared database only after a separate action and user consent.
Data is not sold or used for advertising or marketing.
Developer and data controller: Mykyta Polekov PRO-STUDIO TOV
For questions about data processing or deletion: nisbitpolek393@gmail.com
2. Data we process
With the user's permission, the app obtains the device's approximate or precise location. It is used to show nearby fuel stations, calculate distance, move the map to the current location, and define the search area.
The search-center coordinates and selected radius are sent to the GdeBenz backend over an encrypted connection. The search center may come from the device's location or may be selected manually by moving the map. The app does not create a continuous movement history and does not track location in the background.
The last map center is stored locally on the device. The backend application database does not store query coordinates as a user profile or movement history. Network infrastructure providers may, however, temporarily process technical request logs under their own policies.
When the map is loaded, the map-tile provider receives the IP address, technical request information, and identifiers of requested map tiles. The viewed area may be inferred from the requested tiles.
Users can deny location permission and select an area manually. Permission can be withdrawn in Android settings.
The following information may be stored in the app's private storage:
display theme, search radius, and whether onboarding has been completed;
last map center and refresh time;
cached fuel stations, prices, and statuses;
favorite fuel stations;
locally entered prices, statuses, fuel grades, notes, and observation times;
a queue of data that the user agreed to share;
a random app-installation identifier.
This data is not used for advertising or profiling. It is removed when app data is cleared in Android settings or when the app is uninstalled. Automatic backup is disabled.
To load fuel stations, shared prices, and statuses, the app sends the backend the search-center coordinates and radius or map-area boundaries, OpenStreetMap fuel-station identifiers, and standard technical details of the HTTPS request.
The IP address is used for security and request rate limiting. The backend converts it into an HMAC hash and retains request-attempt records for no more than 24 hours. The IP address itself is not stored in plaintext in the GdeBenz application database. The infrastructure provider may apply different retention periods to technical logs.
If the user selects “Share with other drivers,” the following information is sent to the backend:
a random report identifier;
the OpenStreetMap identifier of the selected fuel station;
the fuel grade and price, or the availability status;
selected fuel grades and an optional status note;
observation time, app version, and a random installation identifier.
The installation identifier is not an advertising identifier and is not linked to an account. On the server it is converted into a secret HMAC hash; the original value is not stored in the application database. The hash is used to prevent duplicate submissions, spam, and manipulation of shared data.
Do not include your name, phone number, email address, street address, or other personal information in a note. The backend checks notes for phone numbers and email addresses. A suspicious report is quarantined, and its note is not stored in the status database.
Accepted reports are combined with reports from other drivers and may be displayed in de-identified form. Other users are not shown the installation identifier, its hash, or the IP-address hash.
map operation, nearby fuel-station search, and distance calculation;
loading fuel-station, price, and fuel-availability information;
storing settings and an offline cache;
publishing information voluntarily submitted for other drivers;
security, spam prevention, and request-rate enforcement;
failure diagnosis and service maintenance;
compliance with legal requirements and protection of lawful rights where applicable.
Location access is based on Android permission, which users may deny or withdraw. A price or status is published only after separate consent in the relevant form.
Service
Purpose and data
Supabase
Backend, database, and server functions. The project is hosted in an EU region (eu-central-1). Supabase processes network requests and voluntary reports as an infrastructure provider. Supabase Privacy Policy.
VersaTiles
Map tiles, fonts, and graphical resources. Receives the IP address, technical request information, and tile identifiers. VersaTiles website.
OpenStreetMap / Overpass API
Source of open fuel-station information. If data is not cached, the backend sends the requested area to an Overpass operator from the backend server; the user's device IP address is not forwarded. OSMF Privacy Policy.
External navigation app
After the user taps “Route,” Android sends the selected app the name and coordinates of the fuel station. Further processing is governed by that app's privacy policy.
The map is rendered by the MapLibre library within the app. The current version contains no advertising, marketing, analytics, or crash-reporting SDKs.
Data may be disclosed when required by applicable law or a court order, or when necessary to protect security and lawful rights. The developer does not sell data or disclose it to third parties for their advertising or independent marketing purposes.
Local settings, favorites, personal reports, and cached data — until app data is cleared or the app is uninstalled, unless removed or replaced earlier.
Accepted price and status reports — no more than 30 days.
Quarantined reports — no more than 14 days.
Text of an accepted status note — no more than 14 days.
Aggregated price snapshots normally remain active for up to 12 hours, and status snapshots for up to 6 hours.
The installation HMAC hash is removed with its report: no later than 30 days for an accepted report and 14 days for a quarantined report.
IP-address HMAC hashes — no more than 24 hours.
OpenStreetMap fuel-station information is not user-profile data and may be retained for service operation. Infrastructure-provider backups and technical logs may remain for a limited additional period.
Users may deny or withdraw location permission, leave price or status sharing disabled, clear local data through Android system settings, or uninstall the app.
Users may contact the address in Section 1 to request access, correction, restriction, objection, or deletion of server-side data where the relevant right is provided by applicable law.
The app has no accounts, and server reports are stored under a pseudonymous hash. A deletion request should include the fuel station, report type, approximate content, date, and time. The developer may request additional information needed to locate the record and prevent deletion of another user's data.
Data already included in de-identified aggregate statistics and no longer capable of identifying a user may not be subject to deletion.
Reasonable technical and organizational safeguards are used, including HTTPS, blocking unencrypted traffic, isolated local storage, HMAC hashing before database storage, request-rate limits, value validation, restricted server-table access, and automatic deletion of expired records. No method of transmission or storage can guarantee absolute security.
The app is intended for drivers and is not specifically directed to children under 13. The developer does not knowingly request a child's name, contact details, or other directly identifying information. A parent or legal guardian may contact the address in Section 1 to request deletion of personal information accidentally submitted by a child.
This Policy may be updated when app features, service providers, or legal requirements change. The current version will be published at the same address and the “Last updated” date will be revised. Material changes will be announced in an appropriate manner, for example in the app or on its Google Play page.
Developer: Mykyta Polekov PRO-STUDIO TOV
Privacy email: nisbitpolek393@gmail.com