Privacy

Last updated: 26 September 2026

Who is responsible

Fietsert (cycling app for iPhone and Apple Watch, coming soon to Android) and Streamert (internet radio for iPhone, Apple TV and Android) are apps by Joost Wellen (AppertLabs). Joost Wellen is the controller under the GDPR. This privacy policy covers both apps and this website (appert.nu).

Contact: support@appert.nu

No tracking and no ads

Our apps show no advertising and contain no third-party analytics or tracking software. We don’t build a profile of you and we don’t sell or share data with advertisers. There is no automated decision-making or profiling.

Fietsert: data on your device

• Location – to centre the map on your position, load nearby junctions and guide you. Only with your permission in your phone’s settings. On iPhone, the app uses your location in the background only while you are navigating a route. Location is optional: without it you choose your free area by searching for a place name, and you can still view the map, plan routes by tapping junctions, build a loop around the centre of the map, search, make photo routes and save and share routes. What doesn’t work without location: centring the map on your position, “Use my current location”, guidance that follows your position (arrow, distance and arrival at the next junction) and break spots during a ride.
• Routes and settings – stored on your device. On iPhone and Apple Watch, if iCloud is on, they are synced through your own iCloud account with Apple (in your private iCloud database). We have no access to it. On Android they stay on your phone.
• Apple Health (iPhone) – after a ride the app asks whether you want to save it as a cycling workout. Only if you choose to, the workout, distance, energy burned and the route you rode are saved in Apple Health. The app reads nothing from Health. This data does not come to us; it stays on your device and, if you have set this up in Health, in your own iCloud. Saved workouts stay in Health until you delete them there yourself. You can withdraw your consent at any time: choose “Don’t save” after a ride, or turn off Fietsert’s access in the Health app (your profile picture > Apps > Fietsert) or in Settings > Apps > Health > Data Access & Devices > Fietsert.
• Apple Watch – the Watch app uses your location for the map and navigation, and while navigating it starts a cycling workout session so the app stays on screen; that session is discarded when you stop and is not saved in Health. Routes and the state of an ongoing navigation reach your Watch through your own iCloud.
• Photos for a photo route – only the photo you choose or take. The junction numbers are read from the photo on your device (on iPhone with Apple’s text recognition). The photo is not sent anywhere.
• Sharing a route – when you share a route, the app creates a route file that you send yourself through your phone’s share menu.
• Usage counters – the app keeps a few simple counters on your device. They are not sent anywhere.

Fietsert: services the app uses

Fietsert has no server of its own. For maps, search, routes and weather the app connects directly to the services below. With every connection the service receives your IP address and technical details of the request (such as the time and the name of the app). These parties are responsible for what they do with that data themselves; their own privacy policy applies.

• Apple Maps (iPhone and Apple Watch) – the map and, when you need to cycle to the junction network, the cycling route there. Apple receives the map area you view and, for directions, the start and end point (coordinates). For users in the EEA, Apple Distribution International Ltd. (Ireland) is the controller for Apple’s services. See Apple’s privacy policy.
• OpenStreetMap map tiles (Android) – the map on Android comes from the OpenStreetMap Foundation’s tile servers (tile.openstreetmap.org). They receive which map tiles you load, and so the area you view. See the OpenStreetMap Foundation’s privacy policy.
• Nominatim (search, all platforms) – when you search for a place, address or junction, or choose your free area, your search text goes to the OpenStreetMap Foundation’s Nominatim (nominatim.openstreetmap.org). So please don’t type personal details there.
• Overpass API (junction network, all platforms) – junctions, cycle routes and break spots (such as cafés) come from OpenStreetMap through public Overpass servers: overpass-api.de and lz4.overpass-api.de (FOSSGIS e.V., Germany) and overpass.openstreetmap.fr (OpenStreetMap France, France). The app tries them in turn. For your free area the server receives the centre point (the coordinates of the place you choose, or your current location if you choose that) with a radius. For break spots during a ride the server receives your current position with a radius. To download a province the server receives only the province name. The Apple Watch also fetches junctions around your free area itself.
• OSRM (routes to the network, Android only) – on Android the cycling route to the junction network comes from the public OSRM demo server of FOSSGIS e.V. (Germany) (router.project-osrm.org). It receives the start and end point (coordinates). See FOSSGIS’s privacy policy.
• Weather: Apple WeatherKit (iPhone and Apple Watch) – for the wind when planning a loop, the app sends the location (coordinates) of the area where you plan the loop to Apple WeatherKit, which returns the forecast. The app shows Apple Weather’s attribution with it. Apple says the location is used only to provide the forecast, is not associated with any personally identifiable information and is never tracked between requests. Apple’s privacy policy applies. On Android Fietsert shows no weather and uses no weather service.
• iCloud (iPhone and Apple Watch) – syncing of routes, settings and your free area through your own iCloud account, only if iCloud is on. The state of an ongoing navigation (for example which junction is next) goes between your iPhone and your Apple Watch through iCloud key-value storage.

Purchases

Fietsert is free and currently has no in-app purchases. When we add the optional Fietsert Plus subscription, it will be handled entirely by Apple (App Store) or Google (Google Play). We will then receive no payment details (such as card or bank details), only sales reports without your name or payment details (they can contain an order number, date, country and, for Google Play, city and postcode), which we keep for 7 years for tax purposes. See Apple’s privacy policy and Google’s privacy policy. We will update this policy before Fietsert Plus becomes available.

Streamert

Streamert has no account, no ads, no analytics and no tracking. To work, the app connects to the services below; they receive your IP address when it does:

• Radio stations – the stream and the title of the current song come directly from the server of the station you pick.
• Cover art – to find a cover, the app looks up the artist and title of the playing song in music databases such as iTunes (Apple), Deezer, MusicBrainz and Cover Art Archive, or with the station’s own service (for example Radio Paradise). No account or login cookie is used for this.
• Your own Wi-Fi network – to keep your iPhone and Apple TV in sync and to find and control Sonos speakers. This traffic stays on your local network.
• Apple Music – only when you tap the Apple Music button yourself does the app open the song as a search in Apple Music.

Some of these services are outside the European Economic Area (EEA): MusicBrainz (MetaBrainz Foundation, United States), Cover Art Archive (a project with the Internet Archive, United States) and radio stations anywhere in the world, because the stream comes straight from the station’s own server. The app connects to them directly from your device when you play a station; they receive only your IP address and, for cover art, the artist and title of the song playing. No adequacy decision or other transfer safeguard applies to these connections. See also Data outside the EU.

Your settings and favourites are stored on your device. Streamert does not ask for access to your location, microphone, camera or contacts.

This website

This website is hosted on GitHub Pages (GitHub, Inc., US). Cloudflare (Cloudflare, Inc., US) sits in front of the website: it provides DNS and passes all traffic on to the site. As a result, Cloudflare receives every visitor’s IP address and the request details (such as the page requested, the time and the browser), plus any error reports your browser sends to Cloudflare automatically (Network Error Logging). Cloudflare does this on our behalf (as a processor). GitHub may log IP addresses on its own servers for security and operations. See Cloudflare’s privacy policy and GitHub’s privacy statement. The website itself uses no cookies, no analytics and no tracking, and loads no external fonts or scripts.

If you email us

If you email support@appert.nu, we use your email address, your name if you include it, and the content of your message only to answer your question. Our email is hosted by TransIP B.V. (the Netherlands).

Why we may do this (legal bases)

• Using your location and search text and sending them to the map, search, routing and weather services above – on iPhone and Apple Watch: necessary to provide the feature you ask for, under the licence agreement for the app (Apple’s standard EULA, an agreement between you and us) (Art. 6(1)(b) GDPR). On Android there are no terms of use for Fietsert yet, so for the free features on Android the basis is our legitimate interest in providing the feature you ask for (Art. 6(1)(f) GDPR), until Android terms exist. Your phone’s permission prompt for location, camera or photos is a technical switch that lets you decide what the app may do; it is not the legal basis.
• Syncing through iCloud (iPhone and Apple Watch) – necessary to provide the feature you turn on (Art. 6(1)(b) GDPR).
• Workouts in Apple Health – this is health data. It is saved only if you give Fietsert write access to Health and explicitly choose to save after the ride (consent and explicit consent, Art. 6(1)(a) and Art. 9(2)(a) GDPR). How to withdraw that consent is explained above under Apple Health.
• Purchase records (once Fietsert Plus exists) – we keep Apple’s and Google’s sales reports because tax law requires it (Art. 6(1)(c) GDPR).
• Emails to support – our legitimate interest in answering your question (Art. 6(1)(f) GDPR).
• This website – our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).

How long data is kept

• On your device – until you delete the routes or the app.
• In iCloud – until you delete it, for example in Settings > [your name] > iCloud > Manage Storage.
• In Apple Health – until you delete the workout in Health.
• Emails to support – 1 year after your question has been dealt with.
• Purchase records (sales reports, once Fietsert Plus exists) – 7 years, because of the Dutch tax retention obligation.
• At the services above – according to their own privacy policies. The OpenStreetMap Foundation says it keeps server logs only temporarily, for operations and security.

Data outside the EU

The apps send data from your device directly to the services above. This is where they are and, outside the European Economic Area (EEA), which safeguards apply:

• Inside the EEA (no transfer) – FOSSGIS e.V. (Germany), OpenStreetMap France (France), Deezer (France) and TransIP (the Netherlands).
• United Kingdom – the OpenStreetMap Foundation. The United Kingdom is covered by an adequacy decision of the European Commission (valid until 27 December 2031). Map tiles are delivered through a worldwide network of servers, so a request may also be handled outside the EEA.
• United States: GitHub and Cloudflare – GitHub, Inc. and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework. So is Google LLC, for purchases through Google Play once Fietsert Plus exists.
• Apple – for users in the EEA, Apple Distribution International Ltd. (Ireland) is the controller for Apple’s services. For transfers to Apple Inc. in the United States, Apple uses the European Commission’s standard contractual clauses.
• Streamert: music databases and radio stations – MusicBrainz (MetaBrainz Foundation, United States), Cover Art Archive (Internet Archive, United States) and radio stations worldwide can be outside the EEA. No adequacy decision or other transfer safeguard applies to these connections; see Streamert.

Children

The apps ask for no account, name, age or email address and are not specifically aimed at children. We don’t knowingly collect data from children.

Your rights

You have the right to access, rectification (correction), erasure, restriction of processing, objection and portability of your data, and the right to withdraw any consent you gave. Because we receive no data from the apps, there is usually nothing for us to show or delete. You manage and delete data on your device, in iCloud or in Apple Health yourself in your phone’s settings. For data held by Apple, Google or the other services above, please contact those parties. For a request to us, email support@appert.nu; we reply within one month.

Complaints

If you are unhappy with how we handle your data, please tell us first. You always have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If the apps start handling data differently, we update this policy and change the date at the top. We keep the Dutch and English versions the same.

Contact

Joost Wellen (AppertLabs) · email: support@appert.nu