Legal
App Privacy Notice
- Last updated
- 6 May 2026
- Version
- 1.0
This Privacy Notice explains how LiveMap AG, Wilhelmshöhe 1, 6003 Luzern, Switzerland (“LiveMap”, “we”) processes personal data when you use LiveMap’s products and services, including the Ari Maps mobile application (Android and iOS) and related back-end services (together, the “App”).
It complements, and where they conflict prevails over, our Website Privacy Statement, which covers our website only. Together, both documents form our complete privacy notice.
This Notice applies in addition to our Terms of Service. Capitalised terms not defined here have the meaning given in the Terms.
Contact: privacy@livemap.ch · DPO: dsb@kertos.io
1. Who is responsible for your data
The controller under the Swiss Federal Act on Data Protection (FADP / nDSG) and the EU General Data Protection Regulation (GDPR) is:
LiveMap AG, Wilhelmshöhe 1, 6003 Luzern, Switzerland
For users in the EU/EEA, our representative under Art. 27 GDPR is:
Kertos GmbH, Email: dsb@kertos.io, Phone Number: +49 151 525 797 93
2. Categories of personal data we process in the App
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email, phone (optional), profile photo, password hash, language | You |
| Precise location data | GPS latitude/longitude, accuracy radius, altitude, speed, heading, timestamp | Your device |
| Coarse / network location | Wi-Fi access points and cell-tower IDs used to estimate location | Your device |
| Activity / motion data | Walking, cycling, in-vehicle classification (where you enable it) | Your device sensors |
| Connection graph | Who you have added as a Connection, with whom you share location, at what level (live, approximate, paused) | You |
| Usage data | App screens visited, features used, crashes, performance metrics, device model, OS version, app version, language, time zone | App telemetry |
| Communications | Support requests, feedback, in-app messages | You |
| Marketing preferences | Newsletter subscription status, topics you have opted into, marketing language, opt-in / opt-out timestamps | You |
| AI assistant inputs and outputs | Text of prompts you send to the AI assistant, the context we send alongside (e.g. the place you are looking at), and the assistant’s responses | You / the Service |
| Payment data (if applicable) | Subscription status, store transaction ID. No card numbers are processed by LiveMap; payment is handled by the App Store / Play Store | App Store / Play Store |
We do not knowingly process special categories of data (health, biometrics, religious beliefs, etc.). Location data combined with frequency and pattern can reveal sensitive aspects of your life. We treat it accordingly.
3. What we do with the data, and on what legal basis
| Purpose | Legal basis (GDPR) | Legal basis (FADP) |
|---|---|---|
| Sharing your live or recent location with your chosen Connections | Art. 6(1)(a): consent; Art. 9(2)(a) where applicable | Art. 6(6)–(7): express consent to high-risk profiling |
| Account creation, authentication, providing the contracted Service | Art. 6(1)(b): performance of contract | Performance of contract / lawful processing |
| Storing location history so you can review your own past trips | Art. 6(1)(a): consent (separate, opt-in) | Express consent |
| Crash reporting, performance, security monitoring | Art. 6(1)(f): legitimate interest in operating a stable, secure service | Lawful processing, overriding interest |
| Customer support | Art. 6(1)(b) / 6(1)(f) | Performance of contract / lawful processing |
| Aggregated, anonymised analytics for product improvement | Art. 6(1)(f): legitimate interest | Lawful processing |
| Sending service messages (security, billing, account, material changes to Terms or this Notice) | Art. 6(1)(b): performance of contract | Performance of contract |
| Sending newsletters and product news | Art. 6(1)(a): separate opt-in consent | Express consent; compliant with UWG Art. 3 lit. o |
| Asking active users for feedback on the Service | Art. 6(1)(f): legitimate interest in improving the Service, with right to object | Lawful processing, overriding interest |
| Processing your prompts in the AI assistant (“Ari brain”) | Art. 6(1)(b): performance of contract when you use the feature | Performance of contract; data sent to Infomaniak as processor in Switzerland; not used for model training |
| Compliance with legal obligations (e.g. accounting, lawful requests) | Art. 6(1)(c) | Legal obligation |
4. Consent and how to withdraw it
Where we rely on consent (Art. 6(1)(a) GDPR, Art. 6(6)–(7) FADP), you can withdraw it at any time:
- turn off location sharing in the App settings (stops live sharing immediately);
- turn off location history in the App settings (stops storage of new history);
- remove individual Connections to revoke their access;
- revoke OS-level location permission in your device settings;
- delete your account in App > Settings > Account > Delete account, which removes or anonymises your data as described in §8.
Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.
4a. Communications from us
We send two distinct types of message, with different rules:
Service messages are necessary to operate the Service: security alerts, password resets, account notices, billing, and material changes to the Terms or this Notice. They are sent on the basis of our contract with you (Art. 6(1)(b) GDPR) and continue as long as you have an account. You cannot opt out of service messages without closing your account.
Marketing messages (newsletters, product news, promotions) are sent only if you have given a separate opt-in consent (Art. 6(1)(a) GDPR; FADP express consent; UWG Art. 3 lit. o). Opt-in is not bundled with account creation or with acceptance of the Terms. Every marketing email contains a one-click unsubscribe link, and you can also manage marketing preferences in App > Settings. Withdrawal takes effect promptly.
Feedback requests (short surveys or invitations to give feedback on the Service) are sent to existing users on the basis of our legitimate interest in improving the Service (Art. 6(1)(f) GDPR / lawful processing under FADP). They are limited in frequency and you can object at any time without affecting your access to the Service.
We do not share your contact details with third parties for their own marketing, and we do not rent or sell our subscriber lists.
5. Recipients: who sees your data
5.1 Other users (Connections)
When you share your location with a Connection, that person sees the data you have chosen to share, at the precision level you have selected. You are responsible for choosing your Connections. From the Connection’s perspective, that data is personal data about you that we make available to them on your instruction.
5.2 Processors acting on our behalf
We use the following service providers, which process data only under our instructions and under written data-processing agreements:
| Category | Provider | Location | Role |
|---|---|---|---|
| Cloud hosting & databases | Exoscale | Switzerland | Processor |
| Map tiles, geocoding | MapTiler | Global tile serving & EU processing | Processor / independent controller for its parts |
| Push notifications | Firebase Cloud Messaging / APNs | EU / US | Processor |
| Crash & performance monitoring | Sentry | EU | Processor |
| Email & support | MailJet | EU / US | Processor |
| Authentication | Glasskube | Switzerland | Processor |
| AI assistant (“Ari brain”) | Infomaniak | Switzerland | Processor: prompts not used for training |
5.3 Third parties
We disclose data outside the categories above only where we are legally required to (e.g. in response to a valid Swiss court order or request from a Swiss authority) or where you give us specific consent.
5.4 External datasets we incorporate (not personal data about you)
The Service incorporates third-party content: map tiles and rendering from our map-display provider, static open datasets, and live APIs (such as weather and swim-spot occupancy). The current list of providers, their roles, and the licences or terms under which we use their content is published at https://livemap.sh/ari/data-sources and mirrored in the App under About > Data Sources.
Where this incorporation does not involve any sharing of your personal data with the third party, the provider is listed for transparency only and is not a recipient of your personal data. Where it does (for example, live API calls that include your location or a session identifier), the provider is also listed in §5.2 as a processor or independent controller, with the role and safeguards described there.
6. International data transfers
Some processors are based outside Switzerland and the EEA. Where the destination country does not benefit from a Swiss / EU adequacy decision, we rely on:
- Swiss Federal Council adequacy decisions and EU Commission adequacy decisions where they exist;
- EU Standard Contractual Clauses (with the Swiss Addendum issued by the FDPIC) plus, where relevant, supplementary technical and organisational measures;
- in narrow cases listed in Art. 17 FADP / Art. 49 GDPR, your explicit consent for the specific transfer.
You can request a copy of the safeguards in place by contacting us.
7. Children
The Service is not directed at children under 16. We do not knowingly create accounts for users under 16. If a user is between 16 and 18 in a country where parental consent is required for the processing of their personal data, we rely on the consent of the holder of parental authority. If you believe a minor has created an account without proper consent, contact us at privacy@livemap.ch and we will delete the account.
Special caution for parents using the Service to share location with minors: tracking a minor requires the consent of all relevant holders of parental authority. The minor should be informed in an age-appropriate way.
8. How long we keep data
| Data | Retention |
|---|---|
| Account data | Until you delete your account, then deleted within 30 days (subject to legal retention) |
| Live location (in transit) | Not stored beyond what is needed to deliver it to your Connections |
| Location history (if you enable it) | Default 365 days; deleted automatically thereafter |
| Connection graph | Until you remove the Connection or delete your account |
| Crash & performance logs | Up to 90 days, then deleted or anonymised |
| Support correspondence | Up to 3 years after closure of the request |
| AI assistant conversation history | 90 days, or until you delete it in App > Settings > AI assistant, whichever is earlier. Infomaniak does not retain prompts beyond what is needed to serve the request. |
| Marketing preferences and opt-in / opt-out logs | For the lifetime of your account, plus 3 years after withdrawal or account closure, as proof of consent under UWG and GDPR |
| Invoicing / accounting data | 10 years (mandatory under Swiss CO Art. 958f) |
9. Your rights
Under FADP and GDPR, you have the right to:
- access the personal data we hold about you;
- rectification of inaccurate or incomplete data;
- erasure (“right to be forgotten”) in the cases permitted by law;
- restriction of processing;
- data portability: receive your data in a structured, commonly used, machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent at any time, with effect for the future;
- not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. We do not currently make such decisions in the App.
You can exercise most rights directly in the App (Settings > Privacy > My data). For everything else, contact privacy@livemap.ch. We respond within 30 days under FADP and within one month under GDPR (extendable by two further months for complex requests, with notice).
You may also lodge a complaint with the competent supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, https://www.edoeb.admin.ch
- EU/EEA: the supervisory authority where you live, work, or where the alleged infringement took place.
10. Security
We apply technical and organisational measures appropriate to the risks of processing location data, including:
- TLS encryption in transit;
- encryption at rest for location and account databases;
- access controls based on the principle of least privilege;
- separation of production and analytics environments, with location data minimised in analytics;
- regular vulnerability scanning and penetration testing;
- a documented incident-response process, including notification to the FDPIC and affected users without undue delay where required by Art. 24 FADP / Art. 33–34 GDPR.
No system is completely secure. We urge you to use a strong, unique password, enable any two-factor option we offer, and keep your device’s operating system up to date.
11. Automated decision-making, profiling, and area-quality scores
We process location data continuously, which under FADP qualifies as profiling. Where this profiling reaches a level of risk that the FADP treats as “high-risk”, we rely on your express consent (§3 of this Notice).
The Service also computes area-quality indicators (for example, route suggestions, lighting scores, tree-coverage scores, traffic-accident exposure, or transit-accessibility scores) using the third-party datasets listed in §5.4 combined with your location data. These indicators are about places, not about you, but the suggestions you see and the routes the Service highlights to you are personalised by where you are. We design these indicators to be:
- transparent: the App’s About > Data Sources screen and the published Data Sources & Attributions document name every data source and explain, in plain language, what each score is based on;
- non-stigmatising in their presentation: scores are shown as ranges or qualitative bands rather than precise numbers that would invite over-interpretation;
- not a substitute for human judgement: scores are not advice and must not be used as the sole basis for decisions about personal safety, where to live, employment, lending, or insurance.
We do not use this profiling to make decisions about you that produce legal or similarly significant effects (Art. 22 GDPR / Art. 21 FADP).
11a. AI assistant (“Ari brain”)
Ari Maps includes an optional AI assistant powered by a large language model running on Infomaniak’s AI Tools platform in Switzerland.
When you use the assistant, we send your prompt and the minimum context needed to answer it (e.g. the place you are looking at). We do not send your contact list, full location history, or account credentials. Under our contract with Infomaniak, prompts and responses are not used to train the model and are processed and stored in Switzerland.
AI responses can be incorrect, incomplete, or out of date. They are not advice. The assistant is optional, and you can delete your conversation history at any time in App > Settings > AI assistant.
12. Changes to this Notice
We may update this Notice. If we make material changes (for example, new categories of data, new purposes, new processors in non-adequate countries, or changes to retention), we will notify you in the App or by email at least 10 days before the change takes effect, and ask for fresh consent where the law requires it.
13. Contact
LiveMap AG, Wilhelmshöhe 1, 6003 Luzern, Switzerland
Privacy: privacy@livemap.ch
Data Protection Officer: dsb@kertos.io
EU representative (Art. 27 GDPR): Kertos GmbH, Email: dsb@kertos.io, Phone Number: +49 151 525 797 93