Privacy Policy

Last updated: September 17, 2026

Pegasus Coders LLC ("we", "us", or "our") operates Mappu (the "Application"), available on the App Store for iOS and on Google Play for Android. This Privacy Policy covers both versions; where they differ, the platform is noted.

We are committed to protecting your privacy. We do not sell or rent your personal information, we do not require an account, and we do not keep your saved locations or search history on our own systems. Those stay on your device (Section 1). To return search results, the Android version routes your typed query and the map's center coordinate through search services we operate; they are used only to generate results and are not logged or retained (Section 2). The Application also uses trusted third-party services that automatically collect data to enable core functionality, performance monitoring, and advertising, as described below.

1. Saved locations and search history

The Application lets you save favorite locations and view your past searches.

• Local storage. When you save a location (a custom place name and its MapCode) or perform a destination lookup, this data is stored locally on your device — using a Realm database on iOS and a Room database on Android. Your saved locations and search history stay on your device and are kept private to you.
• iCloud sync (iOS only). On iOS, to sync your saved favorites across your personal Apple devices, the Application uses Apple's CloudKit framework, which transfers the data to your own private iCloud account. Search history is never synced and remains only on the device where the search was made.
• Cloud sync (Android, optional). On Android, you can optionally sign in with your Google account to back up your favorites and keep them in sync across your devices. When enabled, your saved favorites (place names, addresses, coordinates, MapCodes, and folder structure) are stored in a cloud database we operate (Google Firebase / Cloud Firestore), keyed to your account so that only you can read them. We receive your Google account email address and an account identifier for account management; we never see your Google password. Search history is never synced. If you don't sign in, everything stays on your device as before.
• Deleting your synced data (Android). You can permanently delete your sync account and all synced favorites at any time in the app (Maps Settings → Favorites Sync → Delete account & synced data). Deletion is immediate and irreversible; favorites stored locally on your devices are kept, and all your devices are signed out. See Account & Data Deletion for details and for requesting deletion without the app.
• Developer access. Data stored on your device and in your private iCloud database is not accessible to us, and we never receive your Apple or Google account credentials. Favorites you sync on Android are stored in a database we operate with owner-only access rules; we do not access their contents except as necessary to fulfill a verified deletion request or as required by law.

2. Maps and search

The Application shows a map and turns the place you choose into a MapCode. Depending on your platform and the map source you select, the following services may be involved:

• Apple Maps. Used as a map source on iOS (native MapKit) and on Android (Apple Maps via MapKit JS). Apple processes your map interactions and coordinate lookups; per Apple's Maps Privacy Policy, Apple does not link these to your identity or Apple ID. On Android, Apple-map searches are relayed through a proxy we operate (see "Search services we operate" below) so that no Apple key is embedded in the app.
• Google Maps and Places. When you choose the Google map source (available on both iOS and Android), your search text and the map's location are sent to Google Maps Platform (the Maps SDK and Places API) to return results, governed by Google's Privacy Policy.
• Protomaps / OpenStreetMap (Android). A free map source rendered from OpenStreetMap-based vector tiles that we serve from our own infrastructure (below).
• Search services we operate (Android). To return search results, we route your typed query and the map's center coordinate through servers we operate. These requests are processed solely to generate results and are not logged or retained on our systems. One of these servers also relays Apple-map searches to Apple and signs the token the map needs to load.

We do not track, broadcast, or store your real-time GPS movements.

3. Advertising, analytics, and purchases

To show advertisements and monitor app stability, the Application integrates services provided by Google LLC; subscriptions are processed by the store you obtained the Application from (Apple or Google). These third parties may automatically collect pseudonymized device data:

• Google AdMob (advertising). Displays advertisements in the free version. AdMob may collect and process your device's advertising identifier (the IDFA on iOS, the Advertising ID on Android), IP address, and basic device properties to serve relevant ads. In the EEA, the UK and Switzerland, Google and its advertising partners may also store or read information on your device and use it to measure and personalize ads, as described in the consent message the Application shows (which lists these partners). See also How Google uses information from sites or apps that use our services.
• Google Firebase (Analytics, Crashlytics, Authentication & Cloud Firestore). Monitors app performance — collecting crash logs, device models, operating-system versions, and anonymized app-interaction trends, used strictly to identify software bugs and improve the experience. On Android, Firebase Authentication also powers the optional "Sign in with Google" for Favorites sync, and Cloud Firestore stores the synced favorites (see section 1).
• In-app purchases (Apple App Store and Google Play). Mappu offers two optional purchases: Mappu Pro, a subscription that unlocks search, coordinate search, and MapCode reverse lookup when using Google Maps as the map source (these are free on Apple Maps) and removes advertisements; and Remove Banner Ads, a one-time purchase that removes banner advertisements only. Both are processed by Apple's App Store on iOS and by Google Play on Android. Your payment is handled entirely by Apple or Google; we receive only confirmation that your subscription or purchase is active, and never see or store your payment-card details.

4. Ad personalization controls

• Consent in the EEA, the UK and Switzerland. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the Application asks for your consent before any ad is requested, using Google's consent message (a Google-certified consent management platform that follows the IAB Transparency & Consent Framework). In that message you can consent, decline where that option is offered, or choose purpose by purpose and partner by partner under "Manage options", including objecting to processing that partners base on legitimate interest. Your choice is stored on your device.
• Changing your choice. You can review, change or withdraw your consent at any time in Maps Settings → Privacy Choices. This option appears only where the consent message applies. Withdrawing consent does not affect processing that took place before you withdrew it.
• If you don't consent. You can still use every feature of the Application. Google may then show limited or non-personalized ads, or no ads.
• iOS — App Tracking Transparency. On iOS, the Application follows Apple's App Tracking Transparency (ATT) framework: you are asked whether to allow tracking across other companies' apps and websites (via your IDFA). If you allow it, AdMob may use your IDFA to show personalized ads; if you decline, AdMob cannot use your IDFA, and the ads you see are not personalized based on your activity in other companies' apps and websites. In the EEA, the UK and Switzerland, the consent message above applies as well.
• Android — Advertising ID. On Android, ad personalization uses Google's Advertising ID. You can reset or delete the Advertising ID and opt out of personalized ads at any time in your device settings (Settings → Google → Ads).
• None of these choices affects the core features of the Application.

5. Your rights in the EEA, the UK and Switzerland

If the EU or UK General Data Protection Regulation (GDPR) or Swiss data protection law applies to you:

• Who is responsible. Pegasus Coders LLC is the controller of the personal data processed through the Application. Google is an independent controller of the data it processes to provide and personalize ads, under Google's Privacy Policy.
• Legal bases. Storing or reading information on your device for advertising, and personalized advertising, rely on your consent. Some ad measurement and delivery by Google and its partners relies on their legitimate interests, which you can object to in the consent message. Crash reports and usage statistics rely on our legitimate interest in keeping the Application reliable, and optional Favorites sync on Android is necessary to provide the service you choose to use.
• Your rights. You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise these rights, contact us via our contact form; for data held by Google, you can also use Google's own controls. You also have the right to lodge a complaint with your local data protection authority.
• International transfers. We are based in the United States, and Google and its partners may process data in the United States and other countries. Where required, these transfers rely on safeguards such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. Location data

The Application uses your device location only to center the map on you and to translate coordinates into MapCodes for navigation. We do not track, broadcast, or store your real-time live GPS movements. Coordinate lookups are handled on your device or by the map and search services described in Section 2, which process them only to return a result.

7. Children's privacy

Our Application is a general utility tool and does not knowingly collect data from children under the age of 13. Apart from the optional Android sync account described in Section 1, we do not collect personal data directly, and we do not knowingly store any information that would require parental consent under COPPA or similar international regulations.

8. Third-party links and services

Our privacy policy applies strictly to our Application. Once you transmit a MapCode into your vehicle's physical navigation system, or click an advertisement that redirects you to an external website, your data is governed entirely by the privacy practices of those respective third-party hardware manufacturers or web domains.

9. Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

10. Contact us