Privacy

What we collect, and what we don't.

A plain-language summary of how Citypedia handles your data, with the detail behind each claim. Suitable for users aged 13 and over.

Last updated 1 November 2026 · New Wave Mobile ApS, Esbern Snares Gade 3, 4tv, 1725 Copenhagen V, Denmark · CVR no. 37126624 · Data controller for the Citypedia app.

What we use your data for

Service delivery

Finding places, showing their details, and keeping your lists and ratings on your account.

Location services

Showing what is near you. Controlled by your device's permission, which you can revoke at any time.

Analytics

Understanding which screens and searches get used. Events carry a session id, your app version, OS and language, and the search term — never where you were.

Improving the map

Edits you submit are reviewed and, once approved, published to OpenStreetMap. Photos stay on our servers and appear straight away.

Direct marketing

Not used. We don't send you promotional messages.

Advertising

Not used. There are no ads in our apps, and no ad identifiers are read.

Selling your data

Not used. We don't sell or rent personal data to anyone.

Process payments

Not used. The app is free and takes no payments.

Data we collect (in detail)

Cyan check = collected. Grey cross = not collected.

Account details

  • Email address Only if you create an account. You can browse without one.
  • Display name and profile picture From your sign-in provider.
  • Mobile telephone number
  • Payment details

Device and network

  • App version, OS name and version
  • Language setting
  • Public IP address Nothing in the app looks it up or attaches it to what it sends. Any server sees the address a request arrives from — this is about what we add and keep.
  • Advertising identifier
  • MAC address

Your files

  • Photos you choose to add Only the ones you pick or take for a place or a walk. We never scan your library.
  • Browser history
  • Phone or text logs
  • Contacts
  • Messages
  • Installed apps

Location

  • The position you are searching from Sent to our Places API with each search, because that is how it knows what is near you.
  • Coordinates you look up an address for Sent to Nominatim, run by the OpenStreetMap Foundation, to turn a point into a street address.
  • The spot you pin when suggesting an edit Part of the suggestion, and published with it if the edit is approved.
  • A place's coordinates, when AI helps fill in an edit Sent to the AI provider you chose so it can tell which place you mean. Only happens if you set up a key.
  • A walk photo and where it was taken, if you ask AI about it The photo, the coordinates and the address go to the AI provider you chose; the coordinates also go to Wikipedia, for nearby articles. No copy comes to us.
  • Where you were when you searched, in our analytics Search events carry the search term and the kind of search, never the map's position. If you search by typing coordinates, the event says only that you did.
  • A continuous trail of your movements We never follow you between searches, and the walks you record are stored on your device — we get no copy of them.
  • Background or always-on location

Sensitive categories

  • Fingerprint or voice authentication
  • Health or medical data
  • Data knowingly collected from children under 13

Who else receives your data

Citypedia is built on services run by other companies. These are the ones it relies on, and what each one receives.

New Wave Mobile Places API
Our own backend. Receives the position you are searching from, your lists and ratings, submitted edits and uploaded photos.
Auth0 (Okta)
Sign-in. Receives your email address and the profile your provider returns.
Mapbox
Map tiles and search. Receives the coordinates of the area you are looking at.
Aptabase
Product analytics, running on our own server rather than a vendor's. Receives the events described above, with a session id.
OpenStreetMap, including Nominatim
Address lookup, which sends it the coordinates being looked up, and where approved edits are published.
Wikipedia and Wikidata
Descriptions and photos shown on a place, looked up by that place's identifiers — and, for a walk story, a search for articles near that spot's coordinates.
An AI provider you choose
Only if you add your own key in Settings. Receives the photo or website text, and usually the place's coordinates and address. See below.

Edits you submit become public, permanently

When you suggest an edit or add a place, most of what you write is reviewed and then published to OpenStreetMap, where it becomes part of a public database licensed to everyone under the Open Database License.

That step cannot be undone by us. Once an edit is in OpenStreetMap it is copied, mirrored and archived worldwide, and deleting your Citypedia account does not remove it. Please don't put anything in an edit that you would not want published under your contribution.

Photos you upload go to our own servers and appear on the place straight away — they are not checked first. Anyone can report a photo, whether it is offensive, a copyright or privacy problem, poor quality or simply not of that place, and we review what gets reported and remove what should not be there. If a photo shows you, or you uploaded it and want it gone, email us and we will take it down.

AI features use your own key

Citypedia can read a place's website, or a photo you take of a storefront or an opening-hours sign, and fill in an edit for you. It can also write a short story for a photo on one of your walks.

None of that happens unless you add your own API key for Anthropic, Google or OpenAI in Settings. The key is kept in your device's secure storage, and the request goes from your device straight to the provider you chose. It does not pass through us, and we never see the key, the photo or the result. Your use of that provider is governed by your own agreement with them.

What travels with a request depends on the feature. Along with the photo or the website text, most of them send the place's coordinates and the address we hold for it, so the model can tell which place you mean. That applies when it guesses a category, hunts for a website or matches a place to Wikipedia, as well as to walk stories.

A walk story sends the most. The photo, the spot's coordinates and its address go to your AI provider, and the coordinates also go to Wikipedia, to find articles near that point for the story to draw on. That is the one moment a walk leaves your device — until you ask for a story, a walk sits in the app's own storage and never reaches us.

Separately, photos you take on a walk are also saved to your device's photo library unless you turn that off in Settings. If your phone backs that library up, your own backup service will have them too.

Your rights

Under the GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Email newwavemobileaps@gmail.com and we will answer within one month.

You can delete your account from inside the app, or through this page. That erases your account record, your saved places and lists, your ratings, the edits you submitted that are still waiting for review, and your photo likes and reports. It cannot be undone.

Two things outlive it. Edits already published to OpenStreetMap stay there, for the reason described above. And a photo of yours that is already shown on a place stays too: those photos are stored against the place, not against your account, so deleting the account does not find them. Email newwavemobileaps@gmail.com and we will remove them.

If you think we have handled your data badly, you can complain to your national data protection authority. Ours is the Danish Data Protection Agency, Datatilsynet.

Security and control

The security of your personal information is extremely important to us. We take reasonable technical and organisational precautions to make sure it cannot be accessed or altered by unauthorised parties.

Your device controls whether Citypedia can access your location, your camera and your photo library. You can revoke any of those permissions at any time from your device's settings, and the app keeps working without them.

Questions?

Email us at newwavemobileaps@gmail.com with any privacy questions or requests about your data.