Privacy Policy

Last updated: 12 June 2026

This Privacy Policy explains how Rosárium ("the App", "we", "us") collects, uses, and protects your information. It applies to both the Rosárium mobile app and the website at rosarium-app.base44.app. Rosárium is operated by Hugo Cardoso, an individual based in Denmark, who is the data controller for your information. For any question or request, contact h2rc.contact@gmail.com.

Summary

We collect the location you record as prayer walks, your account details, and basic technical information, to provide the core features: recording walks, showing them on a map, and your coverage. We do not sell your data, show advertising, or use any analytics or tracking. You can anonymize your walks at any time, and delete your account and data whenever you want.

Information we collect

Account information. An email address and password, or — if you sign in through Google, Apple, Facebook, or Microsoft — your email and basic profile name from that provider. Authentication and account storage are provided by Base44.

Location data. When you record a prayer walk, we collect your device's GPS location to draw your route. On the mobile app, with your permission, recording can continue in the background until you stop it. Recorded walks (coordinates, timestamps, distance, duration) are stored in your account. By default, Enhanced privacy mode trims a random portion from the start and end of each walk before it is saved, so stored routes don't begin or end at sensitive places like your home. You can adjust the strength or turn it off in Settings.

Approximate place names. For Coverage, walk coordinates are sent to a geocoding service to determine the city and country; results are cached on your device.

Payment information (donations). Donations are processed by Stripe. Card details are handled by Stripe — we never receive or store your full card number.

Technical information. Basic information needed to run and secure the service, such as app/browser type, language, and approximate connection data. We do not use analytics, advertising, or third-party tracking.

How we use your information

To record, display and store your walks and coverage; to manage your account and sign you in; to process donations you choose to make; to send reminders you enable; and to keep the service secure and comply with the law. Our GDPR legal bases are performance of our agreement with you, your consent (e.g. background location, notifications, donations), and our legitimate interests (security).

How your information is shared

We do not sell your personal data. We share data only with providers that help us run the service: Base44 (backend, database, authentication); OpenFreeMap / OpenStreetMap (website) and CARTO / OpenStreetMap (app) for map tiles; OpenStreetMap / Nominatim / Mapbox for place names; Stripe for donations; and the sign-in provider you choose (Google, Apple, Facebook, Microsoft). We may also disclose information where required by law. When you keep walks on the shared map (including via "Anonymize"), route geometry may be visible to other users without your name or account details.

Map data attribution

Map content is © OpenFreeMap © OpenMapTiles and © OpenStreetMap contributors (website) and © CARTO and © OpenStreetMap contributors (app). Place-name data is © OpenStreetMap contributors.

Data retention

We keep your account and walk data until you delete them. You can anonymize your walks at any time — detaching them from your identity while keeping them on the shared map — and delete your account and data whenever you wish. With "Anonymize & Delete", your walks remain on the map anonymously and the rest of your account is deleted.

Your choices and rights

Enhanced privacy mode trims the start and end of each walk before saving, on by default — adjust or disable it under Settings. Anonymize your walks at any time under Settings. Delete your account and data under Settings → Delete Account, by emailing h2rc.contact@gmail.com, or via our account-deletion page. You can also access, correct, port, object to or restrict processing — contact us to do so — and withdraw location/notification permissions anytime in your device or browser settings.

EU/EEA & UK (GDPR). The data controller is based in Denmark; you have the rights above and may complain to your supervisory authority (in Denmark, Datatilsynet).
California (CCPA/CPRA). We do not sell or share your personal information; you may request access or deletion without discrimination.
Brazil (LGPD). You have rights of access, correction, anonymization, portability and deletion.

Children's privacy

Rosárium is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

Security & international transfers

We use reasonable technical and organizational measures to protect your data; no method of transmission or storage is completely secure. Your data may be processed in other countries, including by the providers above, with appropriate safeguards where required.

Changes & governing law

We may update this policy and will post the new version here with an updated date. This policy is governed by the laws of Denmark and applicable EU law.

Contact

Hugo Cardoso (individual), Denmark — h2rc.contact@gmail.com · @rosarium_app