Privacy policy
Explained in plain words, not in legalese.
This is a translation of the Italian original. If the two versions differ, the Italian text prevails.
There is no account, we don’t profile you and we don’t sell anything to anyone. But we do have a server of our own, and some features — which you switch on — send it data. Everything is written below, feature by feature: what leaves the phone, who receives it and how long it is kept.
What stays on the phone and never leaves it
- Preferences: theme, language, units of measurement
- Your vehicle’s dimensions — height, width, length, weight, fuel consumption
- Saved places: where you parked and your favourites
- Your private notes on places, your rating and the photos you attach: the photos stay in the app’s storage and are not uploaded anywhere
- The travel notes you dictate or type
- The active route, the downloaded maps and the fuel price list
If you uninstall the app, they all disappear, together with the app.
Our server, and why it exists
Maps and routes come from paid services, and the key to use them cannot be kept inside the app: anyone could extract it and spend it in our name. That is why requests go through a server of ours, which holds the key and counts how much is used.
What passes through it: the start and destination coordinates when you calculate a route, your position during navigation, the area of map you are looking at and the terms you search for. These are the same data the external services would need anyway: the difference is that they go through us instead of directly from your phone.
What it keeps: a random identifier of your installation — not your name, not your phone number, no account — with the date of first launch and of last use, the platform and the app version; and counters of how many requests you have made, which are there to stop a malfunctioning copy from using up the service for everyone. It also keeps, for seven days, the results of searches for stopovers by area, so that the same area isn’t requested twice: that memory is tied to the area, not to you.
The phone fingerprint. The free trial week is tied to the
phone, not to the installation: otherwise reinstalling the app would be enough to get
another one. The starting point depends on the phone. On Android the app
takes the identifier that the system assigns to each app (ANDROID_ID, different
for every app and every phone). On iPhone that identifier does not
exist in a stable form, so the app generates a random number on first
launch and stores it in the phone’s keychain, where it survives
uninstallation: it does not come from Apple and is not linked to your Apple ID. In both
cases the starting value is
transformed with a one-way function and only the result reaches us: from
that result the identifier cannot be traced back, it cannot be linked to any other app and it does not
say who you are. We keep that value with the date we first saw it and
how many installations it has made.
Subscriptions. If you buy Rino Pro or Rino Max, it is the store that confirms the purchase to us — Google Play on Android, App Store on iPhone — and we keep, tied to your installation, the plan, the expiry date and the receipt code, which we need to verify renewals. We neither see nor keep cards, IBANs, your Google account or your Apple ID: payment is handled by the store, as for any app.
What it doesn’t keep: the history of your routes, your positions and your searches. They pass through, are used to answer, and are not written down anywhere — unless you switch on one of the features in the section further below.
Who data is sent to, and which data
The complete list of external services. Unless stated otherwise, it is our server that contacts them on your behalf, and they do not see your phone.
*.hereapi.com)
Receives the start and destination coordinates, your position during navigation, and the terms you search for. It is used to calculate motorhome routes, draw the maps, search for places and addresses, and report roadworks and closures.
valhalla1.openstreetmap.de)
Receives start and destination when you calculate a route by car, on foot or by bike. Those modes do not go through HERE.
Receives the area of map for which you are requesting points. It is used to find stopovers, campsites, waste disposal points and car parks. They are public, free servers, and we query more than one at a time because they take turns not responding.
api.transitous.org)
Receives start and destination when you ask for a public transport route.
api.openweathermap.org)
Receives the coordinates of the destination. It is used to show the weather on arrival.
googleapis.com)
Three separate uses. Street view: it receives the coordinates of the point, only when you press “Look at the street”. Notifications: if you leave them on, the phone registers with Google’s service and we keep the code that results, so that we can deliver an alert to you. That code identifies the app installation, not you. Purchases: on Android, subscriptions are bought on Google Play, which processes the payment under its own privacy policy; all we receive is confirmation of the purchase, with the expiry date.
Only on iPhone, and only for purchases: subscriptions are bought on the App Store, which processes the payment under its own privacy policy. We receive confirmation of the purchase with the expiry date, and we ask Apple to confirm renewals. We do not receive your Apple ID, and the phone fingerprint described above does not come from Apple: it is generated by the app.
Receives nothing from you: it is we who download the public file with fuel prices, once a day.
They host our server and the maps. They see requests in transit because they are the infrastructure the service runs on, and they process them on our behalf. The database is on servers in the European Union; the maps go through Cloudflare’s network, which by design serves the file from the node closest to you.
Does data leave the European Union?
Partly, yes, and it is right to say so rather than leave you to guess. Some of the recipients above — Google, Apple, Cloudflare — are companies that also have infrastructure outside the Union, and a request may be processed on one of their servers outside Europe.
When that happens, the transfer relies on the tools provided for in Chapter V of the GDPR: the European Commission’s adequacy decision for the United States (Data Privacy Framework), where the provider has signed up to it, and in any case the standard contractual clauses approved by the Commission, which are part of the contracts we have with them.
It is worth remembering what would leave, because that matters more than geography: not your destination, not the history of your trips, not your name. What travels is the phone fingerprint, the code of a purchase, the position that is needed at that moment to calculate a route.
The features you decide on, which send a little more
They are all off by default. Until you switch them on, nothing of what follows leaves the phone.
If you switch it on, the app records the route — position, speed and time, one point per second — and sends it to us the next time the app is opened, never while you are driving. It helps us understand how navigation behaves on real roads: it is what has made it possible to find faults that can’t be seen at a desk. If you took notes during that trip, a copy travels with the log.
Along with the trip we receive its duration, the kilometres, how many times the route was recalculated, and the rating and comment you give on arrival, if you give them.
If you switch it on, other CampeRino users can see you on the map. What they see of you is the nickname you choose, the type and length of your vehicle, how long you have been travelling and an approximate position, never your exact one: to within about fifty metres while you are on the move — you are on a public road, and it is there so you can meet up — and a one-kilometre cell as soon as you stay stopped for more than five minutes. The position is updated every few minutes and expires on its own: if the app goes quiet, or if you stay stopped for more than half an hour, you disappear without having to think about it. This is intentional: at night, in an isolated area, “a motorhome parked here” is a piece of information we don’t want to give out.
Your destination is never published. When you look for who is where you are going, the destination leaves your phone, the server answers and does not keep it: you see who is there, they don’t know you are heading there.
You can write to anyone who is visible, and they decide whether to reply. The text goes through our server so it can be delivered, and it stays until you delete it or ask for the deletion of your data. You can block anyone, and once blocked they can no longer write to you.
How long they are kept
- Trip logs and notes you have sent us: one year, then they are deleted automatically
- Trip summaries (duration, kilometres, rating): until you ask us to delete them
- Presence on the map: minutes — it expires on its own and leaves no history
- Area searches kept in memory: seven days, and they are tied to the area, not to you
- Request counters: day by day, to keep an eye on costs
- Phone fingerprint and subscriptions: for as long as you use the app; we delete them on request together with everything else
What we don’t do
- No account, no sign-up, no password
- No advertising, no analytics service, no advertising profile
- No data sold or handed over to third parties
- We don’t collect traffic data: it is not what we do, and it won’t become what we do
- We don’t record your position when the app is not in use
- We don’t publish where you are going
Permissions
Location
Needed to navigate and to show you on the map. Without it, the app cannot do its job.
Microphone
Used when you press the button to dictate an address or a note. Speech recognition is done by the phone’s operating system.
Photos
Only when you attach a photo to a note about a place, and through the system app: it is the system app that hands us the photo you chose. The photos stay on the phone.
Notifications
For service alerts and for messages from other motorhomes. You can refuse it, and the rest of the app works just the same.
Who processes the data
The data controller is Fabio Antonio Zaccaria, a natural person and not a company, the same person named in the terms of use: CampeRino is developed by one person alone, and there is no one else behind it. You can reach him at privacy@camperino.app.
Why we are allowed to process them
To make the app work, the legal basis is performance of the service you asked for (Art. 6(1)(b) GDPR): without your position a route cannot be calculated nor can you be shown on the map, which is exactly what you installed it for. For the request counters and the phone fingerprint it is our legitimate interest (Art. 6(1)(f)) in not having the service used up by a malfunctioning copy and in not giving the same trial away several times to the same phone. For subscriptions it is again performance of the contract (Art. 6(1)(b)): without knowing that you have paid we cannot give you what you have paid for.
For the features in the section “The features you decide on”, the basis is instead your consent (Art. 6(1)(a)): they are off by default, you switch them on, and you can switch them off whenever you like in the settings. Switching them off stops the collection immediately.
Your rights
What is on the phone you can delete by uninstalling the app or clearing its data in the Android settings.
For what has reached our server — trip logs, notes, summaries — write to privacy@camperino.app: we will delete it. We don’t know who you are and we don’t want to know, so in our reply we will tell you the simplest way to let us recognise which data is yours, without you having to give us a name.
You have the right of access, rectification, erasure, restriction of and objection to processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority).
Changes
If this policy changes, the date below changes too.
Last updated: 5 October 2026
← Back to the home page