Nederlands

Versie-ontwerp 2.0-draft — 20 september 2026.

Controller: Brian Vanderheyden, Belgium. brianvanderheyden.bv@gmail.com. Postal address: *to be filled in*. Company number: *to be filled in*. Brand: Mayley (formerly Reisgenoot). Public site (canonical): https://mayley.app — not mayley.be as the store URL, not mayley.com (taken). Temporary: https://nieuwevloer.be/mayley/

In one paragraph. Mayley collects as little as possible. An account is your name, email and a password we never store in the clear (scrypt only). Trip plans are stored to keep them for you. We do not sell data, we do not follow you for ads, and deletion is always instant. The EU GDPR is our worldwide baseline, including if you live outside the EEA.

What we process

• Account (optional): name and email. Without an account,

everything stays on your device.

• Trip plans: destination, dates, number of adults and children,

preferences, whether the dog comes. On a saved plan also: members (name, email, role), expenses, bookings (no photo), packing list.

• Stays on the device: children’s ages and heights, departure

point, car size, journal and photos, child-mode PIN.

• Clicks and bookings: random click ID, time, search term; with

an account also the trip and the item. No email in the partner link.

• Waitlist: email only, one launch message.
• Partner request: business details + VAT (VIES).
• Live updates: which trip, when, who — no content, no GPS.
• Location: the app never asks for GPS.

What we do not do

No advertising or tracking cookies. No sale or “sale/share” of personal information (CCPA/CPRA). No child accounts. No crash reporting service.

Children

Mayley is rated 18+ in the stores. Child mode is a parent’s screen. We do not process children’s data.

Legal basis, retention, rights

Contract (account, plans) and consent (waitlist). Kept while the account exists. DELETE /account with the Bearer token erases immediately and answers 204 with an empty body: the account, trips, tasks on those trips and any task that carries your address, the Pro entitlement, store and web receipts, forwarded booking items that were not yet confirmed, share links, memberships, invites, the waitlist, a partner request, a partner login with the same address, and click and booking rows tied to this address. In the app: Wij → Account verwijderen (Us → Delete account). Without the app: /verwijderen (that form keeps the address until the request is handled). What remains: the earnings line in the books (date, amount, channel, no address) and the daily backup, sixty days, on our own equipment. After that the copy is gone too.

Rights: access, rectification, erasure, restriction, portability, objection. Complaint: Belgian DPA. UK GDPR, CCPA/CPRA and LGPD follow the same line — GDPR is the stricter bar.

External services

Destination coordinates + IP go to the service, never with your name or email. Weather: Open-Meteo (DE). Places: Overpass (DE/FR). Photos: Wikimedia (US). Search: Nominatim via our server (BE). Map: our server (BE); fallback OSM tile (NL/DE). Demo: OSRM (DE), Frankfurter (DE), unpkg (US).

Not live — do not add until it is: RevenueCat (US) as processor for rg_pro (purchase status, app user id). DPA + SCCs required before the first IAP (iap-pro-placeholders.md).

Booking buttons

Redirect through our server with a random click ID. No name, no email to the partner. On their site, their terms apply.

Demo phase

Data sits on our own server in Belgium, at the controller’s home. Daily copy, sixty days, own equipment. A move to a host updates this policy first and needs an Art. 28 DPA.

---

Handtekening Brian: ________________ datum: __________ (niet live tot hier ingevuld)