PitStopper On-the-go Privacy Policy
Last Updated: 2 October 2026
The Short Version
No account, no analytics, no ads. Your routes and your location stay on your phone. The app only sends a position to a server when it needs to look something up for you: places near you, a road distance, or the map around you. Nothing is sold or shared for advertising.
This policy covers PitStopper On-the-go, the Android companion app to PitStopper.net. The website has its own privacy policy.
What We Don't Collect
- No accounts - there is no sign-up, login or profile.
- No analytics or tracking - the app sends no usage statistics, has no tracking SDKs and uses no advertising identifiers.
- No ads - and nothing is shared with advertisers or sold.
- No location history - we do not keep a record of where you have been, beyond the short-lived server logs described below.
Location
The app uses your phone's location to show how far along your route you are, what stop is coming up next and on which side, and what is nearby. That work happens on your phone.
With the screen off. While you are following a route, the app keeps a notification on screen and goes on using your location with the phone locked or in your pocket, so it can tell you about the next stop before you reach it. It stops when you stop following the route. The app does not ask for Android's "Allow all the time" location permission, and does not use your location when you are not using it.
Your position leaves the phone only in the cases listed under What Leaves Your Phone.
Camera
The camera is used only to scan a Send to Phone QR code from PitStopper.net. The camera image is read on your phone to find the code; no picture is saved or sent anywhere.
What Leaves Your Phone
The app talks only to these services, and only when you use the feature named:
Your current position and the search radius are sent to PitStopper's own POI servers (poi01 and poi02.pitstopper.net), which answer from OpenStreetMap data. If both are unavailable, the same request goes to Geofabrik's public Postpass service.
Geofabrik Privacy PolicyWhen you ask for the distance by road to a hospital or other emergency place, your position and the destination are sent to PitStopper's routing servers (btr01 and btr02.pitstopper.net), with the public BRouter service (brouter.de) as a fallback.
Map tiles for the area you are looking at are downloaded from PitStopper's own map servers (ofm01 and ofm02.pitstopper.net), with OpenFreeMap (tiles.openfreemap.org) as a fallback. Tiles you have viewed are kept on your phone so they work offline.
OpenFreeMapIf you switch on hill shading or contour lines in Settings, elevation tiles for the area you are looking at are downloaded from the public Terrain Tiles dataset on Amazon Web Services (s3.amazonaws.com). Like any web request, that shows which area's tiles were fetched.
Terrain Tiles on AWSA project sent from PitStopper.net arrives encrypted end to end. It is encrypted in your browser before it leaves your computer, passes through a short-lived relay on Cloudflare Workers, and is decrypted only on your phone, using the key in the QR code. The relay never has the key, holds the encrypted copy for about 10 minutes, and deletes it once your phone has collected it. More detail is in the website privacy policy.
Cloudflare Privacy PolicyThe Navigate button opens the stop in your navigation app, for example Google Maps. A stop's Street View and OpenStreetMap page links open in your browser or the matching app. Each only happens when you tap it, and what that service does with the request is covered by its own privacy policy.
Settings has a "Report a problem" button that opens an email to us in your email app. It is filled in with the app version, your Android and web engine versions, and the last few error messages the app recorded on your phone - never your location (anything that looks like a coordinate is removed). You see it before sending, and nothing is sent unless you send it.
Requests to PitStopper's own servers carry a small tag naming the app and its version (for example app/2026.10.01.1), so we can tell the app's traffic apart from automated scripts. It identifies the app, not you.
Server Logs
Like any web server, PitStopper's servers record each request: the time, the IP address it came from, the request itself (for a road-distance lookup this includes the coordinates), the app version tag and whether it succeeded. We use these logs only to keep the services running, to find faults and to stop abuse. They are not used to build a picture of you, and are not shared or sold.
Logs on the POI and routing servers are deleted after 52 days. Map tile logs are kept for 7 days and do not include IP addresses.
Stored on Your Phone
The app stores these in its own private storage on your phone, where other apps cannot read them:
- Projects you open or receive, and your list of recent projects
- Map tiles you have viewed, for offline use
- Your settings: travel mode, units, theme, alert options
You can remove projects and offline maps in the app's settings, or remove everything by clearing the app's storage or uninstalling it.
Google Play
The app is distributed through Google Play. Google collects some information when you install and update apps, under Google's privacy policy. If the app offers in-app purchases, payment is handled entirely by Google Play; we never see your payment details.
Children
The app is not directed at children under 13, and we do not knowingly collect information from them.
Your Rights
Because there are no accounts, we hold almost nothing that can be linked to you: at most, server log entries for a limited time. Under UK and EU data protection law you can ask about, or ask us to delete, any information we hold about you. Email us at the address below.
Changes to This Policy
If the app starts doing something new with your data, this page will be updated first and the date at the top changed. As there are no accounts, we cannot notify you directly.
Contact
Questions about this policy or about your data: [email protected].