Privacy Policy

1. Who We Are

The Service is provided by the LeapWay team ("LeapWay", "we", "us", or "our"). For the purposes of the EU/UK General Data Protection Regulation ("GDPR"), LeapWay is the data controller for the limited processing described in this Policy. You can reach us at any time at privacy@leapway.net.

2. Information the Software Processes (and Where It Stays)

LeapWay is a local, USB-connected tool. The following information is processed only on your Windows computer and your own Android device, and is never transmitted to us or any third party by the Service:

• Location coordinates and routes you select or plan in the desktop console, which are sent directly to your connected device over USB;
• Device connection state (for example, device model and connection status) shown in the console;
• Local configuration such as your preferred map view and window state, stored on your computer.

Uninstalling the desktop application and the Android assistant removes this information from your systems, subject to any backups you maintain yourself.

3. Information Processed When You Visit the Website

3.1 Server and download logs

The leapway.net website is a static site. When you load the site or download the installer, our hosting and file-distribution providers automatically process standard technical log data on our behalf:

• IP address and approximate region derived from it;
• Date and time of the request, pages or files requested, and bytes transferred;
• Browser type, version, and operating system (user-agent string);
• Referring page, if your browser provides one.

This data is used solely to deliver the website, keep it secure (for example, abuse and attack prevention), and understand aggregate traffic levels. Server logs are rotated and deleted by our hosting providers on their standard retention cycles, typically within 30–90 days.

3.2 Cookies

The website itself does not set first-party cookies for its own features. The only cookies in use are the first-party analytics cookies set by Google Analytics (see Section 4), such as _ga and _ga_*, which persist for up to 2 years to distinguish returning visitors. We do not use advertising, social-media, or third-party tracking cookies.

4. Analytics (Google Analytics 4)

We use Google Analytics 4 ("GA4"), a web analytics service provided by Google LLC ("Google"), to understand in aggregate how visitors find and use the website — for example, page views, approximate traffic sources, and clicks on the download buttons (sent as a custom download_click event). GA4 processes:

• Pages visited, session duration, and interactions such as download-button clicks;
• Device, browser, and operating-system characteristics;
• Coarse location (country/city level). GA4 does not log or store full IP addresses; IP-derived data is used for geolocation and then discarded by Google;
• Randomly generated client identifiers stored in the first-party cookies described in Section 3.2 — not your name, email, or any account identifier.

Google acts as our data processor under the Google Ads Data Processing Terms, and information may be processed on Google servers in the United States. We use GA4 strictly for measurement: advertising features, ad personalization, and Google signals are not enabled, and analytics data is not combined with Google advertising products. We retain GA4 event-level data for a maximum of 14 months, after which Google deletes it automatically; only aggregated reporting is kept longer.

Your choices. You can prevent GA4 collection at any time by installing the Google Analytics Opt-out Browser Add-on, by blocking analytics scripts in your browser (the website remains fully functional when GA4 is blocked), or through your browser's cookie settings. Where applicable law requires consent for analytics cookies (for example, in the EEA/UK), GA4 cookies are used only where that consent requirement has been met.

5. Information You Send Us Voluntarily

If you contact us by email (for example, for support or privacy requests), we process your email address and the content of your message in order to respond. We keep support correspondence for up to 24 months and then delete it, unless a longer retention is required by law or needed to resolve an ongoing matter.

6. Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR): operating, securing, and delivering the website and downloads, and responding to inquiries. Our interests in running a secure, reliable service do not override your fundamental rights, given the minimal data involved;
• Consent (Art. 6(1)(a) GDPR): analytics cookies and measurement where required by applicable law (see Section 4 for how to withdraw consent at any time);
• Steps at your request / contract (Art. 6(1)(b) GDPR): providing the download and support you ask for;
• Legal obligation (Art. 6(1)(c) GDPR): retaining records where the law requires it.

7. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose limited information only to:

• Service providers / processors that host the website, distribute the installer, or provide analytics (Google LLC for GA4), each acting under its own data-processing terms and only for the purposes described in this Policy;
• Authorities, where disclosure is required by applicable law, regulation, legal process, or enforceable government request;
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

8. International Data Transfers

Our infrastructure providers and Google may process data in countries other than your own, including the United States. Where personal data protected by the GDPR is transferred internationally, it is covered by an adequacy mechanism such as the EU–U.S. Data Privacy Framework (for certified recipients, including Google LLC) or the European Commission's Standard Contractual Clauses incorporated in our providers' terms.

9. Data Retention

We retain personal data only for as long as needed for the purposes described above: website logs for the providers' standard rotation periods (typically 30–90 days), GA4 event-level analytics data for a maximum of 14 months, and support correspondence for up to 24 months. Data processed locally by the software remains on your devices and is deleted when you uninstall the software or remove it yourself.

10. Your Rights

10.1 Rights under the GDPR (EEA, UK, and similar jurisdictions)

Subject to legal conditions, you have the right to:

• Access the personal data we hold about you and receive a copy;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing, including processing based on legitimate interests;
• Data portability for data you provided to us;
• Withdraw consent at any time where processing is based on consent, without affecting prior processing;
• Lodge a complaint with your local data protection supervisory authority.

10.2 Rights under the CCPA/CPRA (California, United States)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, purposes, and categories of third parties involved;
• Delete personal information we hold about you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of sale or sharing of personal information — we do not sell personal information, and our measurement-only use of GA4 (with advertising features disabled) is not a "sale" or "share" under the CPRA;
• Limit the use of sensitive personal information — we do not collect sensitive personal information;
• Non-discrimination for exercising any of these rights.

In the preceding 12 months, we have collected the following categories of personal information, in each case automatically from your browser and for the operational purposes described in Sections 3 and 4: identifiers (IP addresses in server logs; randomly generated analytics client IDs) and internet or other electronic network activity information (requests, page views, and download-button clicks). We disclose these categories only to the service providers listed in Section 7. You may exercise your rights yourself or through an authorized agent by contacting us as described below; we will verify requests as required by law and respond within the statutory timeframes.

10.3 How to Exercise Your Rights

Email privacy@leapway.net with the subject line "Privacy Request". Because we hold so little data, the fastest way to exercise control is often on your own devices — for example, uninstalling the software removes all locally processed information.

11. Children's Privacy

The Service is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK, where the higher digital-consent age applies), and the Service is intended for adults as described in our Terms of Service. If you believe a child has provided us personal information, contact us and we will delete it promptly, consistent with the U.S. Children's Online Privacy Protection Act (COPPA) and Article 8 GDPR.

12. Security

We apply reasonable technical and organizational measures appropriate to the limited data we handle, including encrypted transport (HTTPS) for the website and access controls on our infrastructure. No method of transmission or storage is 100% secure; if a personal-data breach creates a risk to your rights, we will notify you and the competent authorities as required by law.

13. Third-Party Services

The desktop console may display map data and interact with the Android platform and USB drivers provided by third parties, and website analytics are provided by Google (see Section 4 and Google's Privacy Policy). Those components are governed by their own providers' privacy policies, which we encourage you to review. We are not responsible for third-party practices.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date and, where required by law, announced through additional reasonable means. The Policy in effect at the time you use the Service applies to that use.

15. Contact Us

For any privacy question, request, or complaint, contact us at privacy@leapway.net. We aim to respond within 30 days (or the shorter period required by applicable law).