Privacy Policy

The data controller is Volodymyr, address: Poland, Warsaw. Privacy requests: hello@lokumetr.pl.

We store your verified Google account identifier, name and email, a hashed session identifier, language and map preferences, favorites and notes, hidden listings and reasons, saved-search criteria and feedback. Google authenticates your account. We do not receive or store your Google password, and do not retain Google access or refresh tokens.

If you save a private place such as Home or Work, we process its label and precise coordinates to calculate routes. This data is encrypted with AES-GCM and stored separately from search criteria. The routing provider receives the origin and destination coordinates needed to calculate a route.

After Telegram connection we process the chat identifier encrypted with AES-GCM and a separate HMAC fingerprint. We do not store Telegram username, name, photo, or message content beyond transient command handling.

We may process limited product telemetry, submitted feedback, and security/delivery logs such as time, status, and error code. Do not include personal data in feedback.

Sessions, Favorites, and saved searches are processed to provide the service requested by you (GDPR Article 6(1)(b)). Security, abuse prevention, diagnostics, and minimal telemetry rely on our legitimate interests (Article 6(1)(f)).

Telegram connection starts only after your explicit action. Where consent applies to a specific function, you may withdraw it by disconnecting Telegram without affecting prior processing.

Hosting, database, monitoring, and infrastructure processors may receive necessary data under our instructions. Telegram processes bot messages under its own terms. Listing portals and map/routing providers linked by the service are independent third parties.

Telegram and some technical providers may process data outside the EEA. Where applicable, transfers rely on an adequacy decision or Standard Contractual Clauses and additional safeguards where required.

Account data remains until you delete your account or the service closes. Signing out or disconnecting Telegram does not delete saved data. Sessions expire after 90 days; one-time Google and Telegram connection attempts expire after 10 minutes.

Technical and delivery logs are retained only as long as necessary for security and reliability; operational retention periods are documented in deployment configuration.

You may request access, correction, erasure, restriction, portability, or object to processing. You may complain to the Polish data protection authority (UODO). Delete your account and personal data from the Account page. The Telegram /delete command only disconnects Telegram.

We use an HttpOnly cookie, HMAC hashes, chat-ID encryption, access controls, rate limits, and deduplication. We do not make solely automated decisions with legal or similarly significant effects; matching only produces informational alerts.

The effective date and version appear on this page. Material changes may be announced in the service or connected Telegram channel. New terms may require renewed acceptance.