1. Who we are and scope
Ape Technology LTD (“Ape Maps”, “we”, “us”) is the controller for the personal information described here. Address: 21, 21-vi vek Street, Studentski District, Sofia 1700, Bulgaria. Company registration number (UIC/EIK): 208807720. Contact: support@apemaps.com.
This policy covers the Ape Maps mobile and immersive applications and website where it is linked. App stores, headset platforms and third-party services also process information under their own notices for their own purposes.
This policy explains processing; it does not ask you to consent to all processing by using the Service. Optional processing requiring consent uses a separate choice.
2. Account and optional profile information
To register and sign in, you provide either an email address or a telephone number, together with a password. You may provide both contact methods, but both are not required. We use Supabase Auth for account authentication.
You may optionally add your first name and surname for personalization and to help us address you by name in communications. You may also optionally add your date of birth to your profile after registration. Date of birth is not requested as a required registration field and is not necessary to create an account. Where you provide it, we use it to help assess eligibility for our 18+ Service.
If you do not provide optional profile details, you can still register, but personalization based on those details is unavailable. Optional names are not presented as proof of age or identity.
3. Saved portfolio, analytics and diagnostics
Account and portfolio: We store account and optional profile information in Supabase. We save the portfolio as an account-linked list of selected stocks so you can retrieve it later. This does not imply access to brokerages, trading history, quantities or purchase prices.
First-party app analytics: We use basic app analytics to understand use of our applications and improve them. These are separate from Google Analytics on the website.
Website analytics: We use Google Analytics only when a visitor has opted in to optional analytics. See Section 8.
Crash reporting: Meta, Apple and Google Play provide diagnostics for relevant app releases under their platform terms; some reports may be made available to Ape Maps.
Authentication: Supabase Auth handles account authentication and hashes passwords. Authentication infrastructure processes information necessary to operate and secure user accounts.
Support: When you contact us, we use your contact details and request to respond.
We currently do not charge subscriptions or collect payment cards through the confirmed account flow.
4. Camera, AR, XR and user-directed sharing
Mobile Ape Maps offers an optional camera experience that places a 3D map in a real-world camera view. Immersive versions use device-supported spatial interaction and may use passthrough depending on settings.
Photos and AR/XR data used by these features remain on the user's device; Ape Maps does not upload those data to its servers as part of these features, according to the owner-confirmed implementation. We distinguish this local processing from account and portfolio information stored in Supabase.
Your operating-system and platform providers may separately process information under their own rules and settings. This policy does not promise that they never process sensor information.
You can manage permissions in device settings. Turning off a relevant permission may disable that feature. Any saved local captures remain under your device's storage and deletion controls.
When you deliberately share a capture or map through another service, that recipient service processes the material under its own policy. Captures may reveal your surroundings, other people or selected instruments. Review material before sharing.
5. Purposes and legal bases
Registration details are used for registration and service contact, not as permission for promotional messages.
Where the GDPR or UK GDPR applies, the purposes and legal bases described here are:
- Registration, authentication and saving/retrieving your chosen stock list: performance of a contract, limited to information necessary to provide these requested account features.
- Optional names for profile personalization: provision of the optional profile feature you request. Optional provision is not blanket consent to marketing or unrelated uses.
- Optional date of birth to assess the 18+ rule: legitimate interests in maintaining an adult-only service. We do not use it for birthday marketing without a suitable legal basis.
- Requested support and necessary service communications: contract where necessary to provide the requested service; legitimate interests for proportionate administration and account security where appropriate.
- Basic first-party analytics and diagnostic reports: legitimate interests in understanding use and improving reliability, where this basis applies. Obtain consent where required for non-essential device storage/access or tracking.
- Website analytics through Google Analytics: your opt-in consent for optional analytics storage and measurement.
- Compliance with a specific applicable legal duty: legal obligation.
Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing. You can object to legitimate-interest processing as described in Section 12.
6. Who receives information
Supabase: provides our account database, Supabase Auth and storage of the account-linked stock list. It processes this customer data for the provision of those services under the applicable arrangements. Its handling of customer application data is distinct from its privacy notice for its own website and customer relationships.
Google Analytics: when you opt in, Google receives website measurement information, as explained in Section 8.
Meta, Apple and Google Play: provide store/platform services and platform crash reporting for the relevant versions. They may act independently for their own platform purposes; reports made available to us are handled for diagnostics.
Information may be disclosed to competent authorities where legally required, or to professional advisers where reasonably necessary and lawful. A lawful corporate transaction may involve limited disclosure or transfer, with safeguards and notice where required.
User-directed disclosure through a supported sharing feature is separate from advertising-related disclosure.
7. Financial Modeling Prep and other platforms
Market data and issuer logos displayed in Ape Maps come from Financial Modeling Prep. Public market data are distinct from the registration information you give us. A saved instrument selection or portfolio associated with you may itself be personal information.
Apple, Meta and other relevant platforms process data for their own services under their own policies. Platform processing does not remove Ape Maps' responsibility for any information it receives or processing it determines.
8. Website analytics, cookies and similar technologies
On the Ape Maps website, we use Google Analytics 4 (measurement ID G-RRQ3KS0BV2) to understand website visits, pages viewed, engagement and how people find the site. This is separate from basic analytics in our apps.
Your choice: Google Analytics is optional and is not loaded until you select “Accept analytics” in our cookie notice. You can select “Reject optional” instead. Both choices let you use the website. To change or withdraw your decision, select Cookie settings on any page.
We save your choice in browser local storage under apemaps_analytics_consent_v1 for up to 180 days. This is preference storage and is not used to track your visits across sites. If you decline, Google Analytics scripts and analytics cookies are not loaded by our consent implementation.
If you accept, Google Analytics may use cookies such as _ga and _ga_* to recognize browsers and measure visits. Depending on settings, Google may receive page interactions, device and browser details, referral sources, approximate location and online identifiers. You can withdraw consent at any time; we stop subsequent measurement and attempt to remove accessible Analytics cookies. This cannot undo information already processed while consent was active.
Google processes website analytics data under its own applicable terms. See How Google uses information from sites or apps and Google's Privacy Policy.
We do not use this consent choice as consent for personalized ads. Accepting our Terms, registering an account or using the camera does not grant permission for website analytics. For applicable privacy requests, contact support@apemaps.com.
9. Retention and account deletion
We keep personal information only for as long as necessary for its stated purpose and applicable legal requirements. Account/profile information and the selected stock list are retained to provide your account and saved-portfolio features.
You can delete your account through the in-app account-deletion feature. You may also contact support@apemaps.com for deletion assistance or other data-rights requests.
When you delete your account, we delete the profile and all associated user data held by Ape Maps, including the authentication account and saved stock list in Supabase, according to the owner-confirmed deletion scope. If applicable law requires us to retain a specific record, that exception must be limited to the required purpose and period and explained where relevant.
Any retention for law, security or legal claims must be limited in scope and duration. Pseudonymized data are not automatically anonymous.
Deleting your account does not automatically remove photos or other captures stored on your device, or copies you independently shared through another service. You control local file deletion through the device.
There are currently no Ape Maps payments or subscriptions to cancel.
10. Security
We must apply technical and organizational safeguards appropriate to the risks. No system guarantees absolute security.
If a personal-data breach occurs, we will make notifications to authorities and affected people where required by applicable law.
11. International transfers
Where relevant law requires a transfer mechanism, use an applicable adequacy decision, valid standard contractual clauses or another lawful mechanism, together with necessary assessments and supplementary safeguards. Identify the mechanism actually used and explain how users can request information or a copy, subject to lawful redactions.
12. Your rights and requests
Depending on applicable law, you may have rights to access, correct or delete personal information, restrict processing, object to processing based on legitimate interests, and receive portable data where the legal conditions apply. You can object to direct marketing at any time.
Send requests to support@apemaps.com. We may request proportionate information to verify identity where necessary; do not send identity documents unless specifically requested through an appropriate channel.
For GDPR requests, we respond without undue delay and normally within one month of receipt. If a lawful extension is necessary, we will notify you within that month and explain the reason. Rights are subject to applicable conditions and exemptions.
You may complain to your competent data-protection supervisory authority, including in the place of your habitual residence, work or alleged infringement. For our Bulgarian establishment, the relevant authority is the Commission for Personal Data Protection (CPDP / КЗЛД). Its official website is https://cpdp.bg. Your right to complain to another competent authority is preserved.
13. Children and age eligibility
Ape Maps is intended for people aged 18 or over. We do not knowingly onboard or collect account information from people under 18.
If you believe an underage person has provided information, contact support@apemaps.com. When we become aware of an underage account, we will investigate, restrict access as appropriate and delete information not required for a limited lawful purpose.
You must be at least eighteen (18) years old to use the Service. By accepting our Terms, you confirm that you meet this requirement. Date of birth is optional and can be added after registration; we do not describe it as mandatory onboarding verification.
14. Automated decisions and new uses
Personalized views and AI content, if implemented, require their own accurate data-flow description. Their existence is not assumed here.
Before introducing materially different data collection or purposes, update the notice and obtain any consent required by law.
15. Updates and contact
We will update this notice when practices change, revise the effective date and provide additional notice where required. Continued use does not by itself constitute consent to a new purpose requiring consent.
Privacy and deletion requests: support@apemaps.com.
Controller: Ape Technology LTD.
Postal address: 21, 21-vi vek Street, Studentski District, Sofia 1700, Bulgaria.
Company registration number (UIC/EIK): 208807720.