Privacy policy

Overview

Contour is an offline map app from Rimu Apps in New Zealand.

Rimu Apps is responsible for the information described in this policy. Contour uses a shared Waypoint account to authorise new map downloads and updates. Installed maps remain usable offline, including after you sign out. Contour has no advertising or analytics SDKs. Rimu Apps does not sell personal information or use it for advertising.

Your shared account

One Waypoint account for map downloads.

You can create or sign in to a shared Waypoint account using a verified email address and password, or Google sign-in. Google Firebase Authentication processes your email address, account identifier, verification and account status, authentication credentials and any profile information supplied by your sign-in provider, such as a display name. Rimu Apps does not receive your Google password.

Authentication services also process IP addresses, user-agent strings and app, SDK and device information to authenticate accounts, prevent abuse and operate the service. Contour sends a sign-in token, the requested pack and app-release identifier to its access API. That API verifies the account and checks whether the pack is available to it.

Contour keeps account-access metadata under your shared account identifier. Authorised Contour administrators can view basic account details and set map-access overrides. These changes have an audit record containing the administrator, affected account, pack or scope, reason and time. Contour does not read your Waypoint trips. There are no map purchases or payment details in the current release.

Your location

GPS is off until you turn it on.

Location is off by default. You can choose a different GPS-on-launch setting; a mode needing location also requires a previously granted Android permission. While GPS is off, Contour makes no location requests and shows no position on the map. You can still browse installed maps and routes.

If you turn location on, Android asks for permission the first time. You can choose battery saver mode, which requests occasional fixes, or precise mode, which requests frequent fixes. Contour uses each fix only to draw your position and related details, such as distance along a route, on your device. Location is never sent to Rimu Apps, never sent to any third party by Contour, and is not used for analytics or advertising.

Contour asks for location only while you are using it. It does not request background location. On Android Auto, the car display follows the same setting you chose on your phone.

Map pack downloads

What happens when you download a pack.

The app includes a map catalogue matching its release. Before a new download or map update, its authenticated access check uses the account information described above. Finished island map files are delivered through Google Play Asset Delivery. Some older packs and published routes use HTTPS downloads from Rimu Apps’ Google Cloud/Firebase services. Contour does not send GPS fixes with these requests.

The services handling sign-in, access checks, catalogue requests and downloads process standard technical information such as IP address, request time, requested resource and app or browser version. Rimu Apps uses server logs to operate and secure the service and diagnose faults. Google Play also processes installation, asset-delivery and update information under Google’s privacy terms.

Downloaded packs are stored in Contour’s private storage on your phone until you remove them or uninstall the app.

Routes and files you open

Your files stay on your phone.

The current app downloads routes from a published library and stores them in private app storage for offline use. Legacy files already imported by older versions also remain on the device. Contour does not upload your live location, route progress or locally stored map files. Map-layer visibility, opacity and other app settings are stored on your device.

Uninstalling Contour, or clearing its storage in Android settings, removes its downloaded packs, routes and settings from the phone. Signing out does not remove installed maps. Removing local app data does not delete your shared Waypoint account.

Account deletion and retention

You can request deletion of your shared account.

Use Manage account in Contour’s Packs screen, or open the Waypoint account page, sign in and choose Delete account permanently. This is a shared account: deletion can also remove Waypoint trips you own and your access to shared trips. Read the confirmation before proceeding. See our account deletion instructions if you cannot sign in.

Authentication/profile data is kept while the shared account exists. Contour routinely checks for deleted accounts and removes their Contour user, map-access and administrator metadata. Limited security logs and access-change audit records may be retained to investigate abuse, protect the service or meet legal obligations. You can contact the privacy address below about access, correction or deletion of Contour data.

Downloaded map files remain on your phone until you remove them or clear/uninstall Contour, including after account deletion. Contour excludes its private app data from Android backups.

Permissions

Only what the app needs.

• Location (approximate or precise): requested only when you first turn GPS on, and used only while Contour is in use.
• Internet and network state: used for sign-in, access checks, map and route downloads and app-update checks.
• Notifications and data-sync foreground services: used to show map-download and preparation progress. Notification permission is optional and does not enable GPS.

Contour does not request access to your contacts, camera, microphone, calendar or photos, and it does not collect advertising identifiers.

Google and Android Auto

Services provided by others.

Google Firebase Authentication provides the shared Waypoint identity service. Google sign-in is optional; verified email/password sign-in is also supported. Google Cloud/Firebase hosts Contour’s metadata and access API. These services process account and technical information on Rimu Apps’ behalf. See Firebase’s privacy information and Google’s privacy policy.

Google Play handles installing and updating Contour under Google’s own terms. If you have chosen to share usage and diagnostics with Google on your device, Google may provide Rimu Apps with aggregated, de-identified crash and performance reports through the Google Play Console. Contour does not add its own crash reporting or analytics.

When you use Contour on Android Auto, Android Auto on your phone and your car’s display show the map that Contour draws. Google and your vehicle manufacturer handle Android Auto under their own privacy terms. Contour does not send your location or routes to either of them.

Overseas processing

Where service information is processed.

Rimu Apps operates from New Zealand. Contour’s backend is hosted in Sydney, Australia. Authentication, Google Play delivery and supporting Google services operate across a global network, so account information and technical logs may also be processed in the United States or other countries where Google and its service providers operate. Those countries may have different privacy laws. Sign-in and Contour API/download requests use encrypted HTTPS connections.

Your rights

Access, correction and complaints.

You can ask Rimu Apps for access to, correction of or deletion of personal information it holds about you. Depending on the law that applies to you, you may also have other rights. Use the shared account page for account management or contact the privacy address below. We may need to verify your identity before acting on a request.

New Zealand users may complain to the Office of the Privacy Commissioner. Users elsewhere may contact their local privacy authority. Please contact Rimu Apps first if you can, so there is an opportunity to resolve the concern.

Contour is a general-purpose map app and is not designed for children under 13. Contact Rimu Apps if you believe a child has provided account information that should be removed.

This website

No cookies, analytics or advertising.

The public pages at contour.rimuapps.com do not use advertising or analytics. Firebase Hosting processes ordinary request logs to deliver and protect the pages. The separate administration portal uses authenticated browser storage to manage its sign-in session and is restricted to authorised administrators.

Changes to this policy

Keeping this page current.

Rimu Apps reviews this policy when Contour’s features, providers or legal obligations change. The effective date changes when an update is published. Rimu Apps will give additional notice, and seek consent where required, before any new use of information that you would not reasonably expect, such as collecting location on a server.