Privacy
Last updated: 24 October 2026
Who is responsible
Pablo Daniel Bouzon, a sole trader (autónomo) operating under the trade name Bouzon Digital. Tax ID (NIF) Z0115635L. Avenida Gamonal, 4, esc. B, 3.º A, 29631 Benalmádena (Málaga), Spain. Contact: info@routetto.com. Routetto is a brand of Bouzon Digital.
The key points
- We don’t sell data or show ads. Neither this website nor the app has advertising or marketing analytics.
- Google doesn’t learn who you are through Routetto. When the app asks Google about a place or a journey, it sends what you searched for and the coordinates, not your name or email.
- Our servers are in the European Union (Germany).
What data we handle and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your account’s email and name; if you sign in with a password, its hash (never the password itself) | To let you in and know whose each trip is | Performance of the contract | For as long as you have the account |
| Your trips: cities, days, stops, notes, schedules and who you share them with | To provide the service: planning, working out the schedule and sharing | Performance of the contract | For as long as you have the account, or until you ask us to delete them. If you delete your account, the ones you share for editing go to the people who edit them |
| Tickets and documents you attach to a stop (PDFs or images) | To store them and let you open them on your phone, offline too | Performance of the contract | Deleted 15 days after the trip ends; files not attached to any trip, 15 days after upload |
| Your Atlas: places you’ve visited and places you want to visit | To show you your map and share it with whoever you choose | Performance of the contract | For as long as you have the account |
| Credit balance, packs, transactions and usage grouped by day | To keep your balance, charge what you use and handle refunds | Performance of the contract and legal obligation (invoicing) | Daily usage, 90 days; purchases, invoices and credit transactions, 6 years (accounting obligation, Spanish Commercial Code, art. 30) |
| Usage count per person: how many paid requests were made each day and from which feature, without their content | To measure what the service costs us | Legitimate interest in controlling costs | 24 months; after that, only anonymous totals with no person attached |
| Clicks to third-party sites: only the site’s name (for example, the ticket seller) and which part of the app it came from, never the address. An affiliate link carries a source code (which part of the app it came from and a trip fingerprint that can’t tell anyone which trip it is or whose), never your name or email | To know which links are used | Legitimate interest | 24 months; after that, only anonymous totals with no person attached |
| What you tick off in each trip’s ‘Your trip in N steps’ list, and a new trip you’ve half set up in the planner | So you find it the same on all your devices | Performance of the contract | For as long as you have the account (the ticks, for your 300 most recent trips; the half-done trip, until you create or discard it) |
| The AIs and tokens you connect to your account (stored as a hash) | So your AI or scripts can work on your trips, with your permissions | Performance of the contract | Until you disconnect or revoke them; they stop working if you change your password |
| Server logs: IP address, date and time, requested address and browser | Security, preventing abuse and fixing faults | Legitimate interest in the security of the service | 12 months |
This information website has no forms, accounts or analytics. Its server only keeps the technical log of each visit (IP address, date, page requested and browser) for security, for 12 months.
Who we share data with
- Hetzner Online GmbH (Germany): the servers that host the app and your data.
- Cloudflare (R2 storage, in Cloudflare data centres in Western Europe): keeps the encrypted backups of the app’s data.
- Google (Google Maps Platform): receives what you search for, the coordinates of places and the journeys you look up, but not your identity. Only when you use features that need credits. It handles them under the Google Privacy Policy and the Google Maps Additional Terms of Service.
- Open place data: to suggest a plan for a city, the server downloads open data for that area (Wikidata and Overture Maps). It only asks for the area, never who it’s for.
- Map and routing services: OpenRouteService (HeiGIT gGmbH, Germany) for walking and driving times; OpenStreetMap’s Nominatim and Overpass (OpenStreetMap Foundation) for finding places; CARTO for drawing the map, which receives your browser’s IP address when loading map tiles; Wikipedia and Wikimedia Commons for information about places, which receive your browser’s IP address when a place sheet loads their photos. They receive coordinates and place names, not your identity.
- Affiliate programmes (tickets, hotels and car hire), only if you open one of their links. What the link carries (the place or city and, on Booking, the dates and guests you choose) and the source code above reach the partner’s site, and the partner and its network process the click data (IP address, browser, their cookies, the source code) as independent controllers, to attribute the purchase and prevent fraud: CJ (Epsilon International UK Ltd), which runs the Booking.com links, may transfer it to the United States and India (CJ privacy policy); Booking.com, GetYourGuide, Viator and DiscoverCars, under the privacy policy each publishes on its site. When you open the link, your browser tells them you came from Routetto (only the domain, never the page). Routetto doesn’t give them your name, your email or your trip.
- Bouzon Digital Account: Bouzon Digital’s sign-in service. If you choose to sign in with Google, Google handles that data as an independent controller, under its own privacy policy.
- Payments: when you buy credits, the payment is processed by Stripe (Stripe Payments Europe, Ireland) through Bouzon Digital’s billing platform, which also issues the invoice. Stripe receives your card details and email; we never see or store your card details.
- Your AI, only if you connect one: the AI app you choose (for example, Claude or ChatGPT) receives what it asks for from your trips, with your permissions. Its processing is governed by your relationship with that provider.
Hetzner, Cloudflare, Google (for map requests), OpenRouteService, CARTO and Stripe (for what it does on our behalf) act as processors or service providers. We don’t share data with anyone else unless the law requires it.
Backups
So your trips aren’t lost if something fails, we make encrypted backups of the app’s data and keep them in Cloudflare R2, in Cloudflare data centres in Western Europe. How long each backup lasts:
- Hourly backups, 3 days.
- Daily backups, 40 days.
- Monthly backups, 400 days.
So a deleted item can remain in a backup for up to about 13 months, and disappears from them as they expire. Tickets and documents you upload are removed from the backups 40 days after they’re deleted in the app. If you delete your account, your data leaves the backups in the same way. Backups are only used to restore the service.
International transfers
Some providers process data outside the European Economic Area: Google, Wikimedia and Stripe (United States) and Cloudflare (a US company, though the backups are stored in Western Europe), under the EU-US Data Privacy Framework for certified companies and, in any case, the European Commission’s standard contractual clauses; and the OpenStreetMap Foundation (United Kingdom), covered by a European Commission adequacy decision. You can ask us for a copy of the safeguards.
Your rights
You can ask for access to, correction, deletion, restriction or portability of your data, or object to its processing, by writing to info@routetto.com. To delete your account and your data, see how to delete your account: trips you share for editing aren’t deleted, they go to the people who edit them. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Children
Routetto isn’t intended for children under 16. You must be an adult to buy credits.
Changes
If we make significant changes to this policy, we’ll tell you in the app before they apply.
This is a translation. If it differs from the Spanish version, the Spanish version prevails.