Privacy Policy

Last updated: July 7, 2026

Pegasus Coders LLC ("we", "us", or "our") operates Mappu (the "Application"), available on the App Store for iOS and on Google Play for Android. This Privacy Policy covers both versions; where they differ, the platform is noted.

We are committed to protecting your privacy. We do not sell or rent your personal information, we do not require an account, and we do not keep your saved locations or search history on our own systems. Those stay on your device (Section 1). To return search results, the Android version routes your typed query and the map's center coordinate through search services we operate; they are used only to generate results and are not logged or retained (Section 2). The Application also uses trusted third-party services that automatically collect data to enable core functionality, performance monitoring, and advertising, as described below.

1. Saved locations and search history

The Application lets you save favorite locations and view your past searches.

• Local storage. When you save a location (a custom place name and its MapCode) or perform a destination lookup, this data is stored locally on your device — using a Realm database on iOS and a Room database on Android. Your saved locations and search history stay on your device and are kept private to you.
• iCloud sync (iOS only). On iOS, to sync your saved favorites across your personal Apple devices, the Application uses Apple's CloudKit framework, which transfers the data to your own private iCloud account. Search history is never synced and remains only on the device where the search was made.
• Cloud sync (Android, optional). On Android, you can optionally sign in with your Google account to back up your favorites and keep them in sync across your devices. When enabled, your saved favorites (place names, addresses, coordinates, MapCodes, and folder structure) are stored in a cloud database we operate (Google Firebase / Cloud Firestore), keyed to your account so that only you can read them. We receive your Google account email address and an account identifier for account management; we never see your Google password. Search history is never synced. If you don't sign in, everything stays on your device as before.
• Deleting your synced data (Android). You can permanently delete your sync account and all synced favorites at any time in the app (Maps Settings → Favorites Sync → Delete account & synced data). Deletion is immediate and irreversible; favorites stored locally on your devices are kept, and all your devices are signed out. See Account & Data Deletion for details and for requesting deletion without the app.
• Developer access. Data stored on your device and in your private iCloud database is not accessible to us, and we never receive your Apple or Google account credentials. Favorites you sync on Android are stored in a database we operate with owner-only access rules; we do not access their contents except as necessary to fulfill a verified deletion request or as required by law.

2. Maps and search

The Application shows a map and turns the place you choose into a MapCode. Depending on your platform and the map source you select, the following services may be involved:

• Apple Maps. Used as a map source on iOS (native MapKit) and on Android (Apple Maps via MapKit JS). Apple processes your map interactions and coordinate lookups; per Apple's Maps Privacy Policy, Apple does not link these to your identity or Apple ID. On Android, Apple-map searches are relayed through a proxy we operate (see "Search services we operate" below) so that no Apple key is embedded in the app.
• Google Maps and Places (Android). When you choose the Google map source, your search text and the map's location are sent to Google Maps Platform (the Maps SDK and Places API) to return results, governed by Google's Privacy Policy.
• Protomaps / OpenStreetMap (Android). A free map source rendered from OpenStreetMap-based vector tiles that we serve from our own infrastructure (below).
• Search services we operate (Android). To return search results, we route your typed query and the map's center coordinate through servers we operate. These requests are processed solely to generate results and are not logged or retained on our systems. One of these servers also relays Apple-map searches to Apple and signs the token the map needs to load.

We do not track, broadcast, or store your real-time GPS movements.

3. Advertising, analytics, and purchases (Google services)

To show advertisements, monitor app stability, and process subscriptions, the Application integrates services provided by Google LLC. These third parties may automatically collect pseudonymized device data:

• Google AdMob (advertising). Displays advertisements in the free version. AdMob may collect and process your device's advertising identifier (the IDFA on iOS, the Advertising ID on Android), IP address, and basic device properties to serve relevant ads.
• Google Firebase (Analytics, Crashlytics, Authentication & Cloud Firestore). Monitors app performance — collecting crash logs, device models, operating-system versions, and anonymized app-interaction trends, used strictly to identify software bugs and improve the experience. On Android, Firebase Authentication also powers the optional "Sign in with Google" for Favorites sync, and Cloud Firestore stores the synced favorites (see section 1).
• Google Play Billing (Android only). Mappu Pro, an optional subscription available only on the Android version, is processed by Google Play. Your payment is handled entirely by Google; we receive only confirmation that the subscription is active and never see or store your payment-card details.

4. Ad personalization controls

• iOS — App Tracking Transparency. On iOS, the Application follows Apple's App Tracking Transparency (ATT) framework: you are asked whether to allow tracking across other companies' apps and websites (via your IDFA). If you accept, Google AdMob serves personalized ads; if you decline, AdMob still shows ads, but completely non-personalized, generic ones.
• Android — Advertising ID. On Android, ad personalization uses Google's Advertising ID. You can reset or delete the Advertising ID and opt out of personalized ads at any time in your device settings (Settings → Google → Ads).
• Either choice does not affect the core features of the Application.

5. Location data

The Application uses your device location only to center the map on you and to translate coordinates into MapCodes for navigation. We do not track, broadcast, or store your real-time live GPS movements. Coordinate lookups are handled on your device or by the map and search services described in Section 2, which process them only to return a result.

6. Children's privacy

Our Application is a general utility tool and does not knowingly collect data from children under the age of 13. Since we do not collect any personal data directly, we do not store any information that would require parental consent under COPPA or similar international regulations.

7. Third-party links and services

Our privacy policy applies strictly to our Application. Once you transmit a MapCode into your vehicle's physical navigation system, or click an advertisement that redirects you to an external website, your data is governed entirely by the privacy practices of those respective third-party hardware manufacturers or web domains.

8. Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

9. Contact us