Privacy Policy

Effective date: 29 March 2026

Introduction

Leafy Code International (Pvt) Ltd ('we', 'our', or 'us') operates the Ridura mobile application. This Privacy Policy explains how we handle information when you use our app. By using Ridura, you agree to the practices described in this policy.

Data Storage

Ridura stores your personal data — including vehicle details, fuel records, and QR code images — locally on your device only. We do not have access to this data.

To power the fuel availability map and community features, the app communicates with our servers using an anonymous device identifier. This identifier is a randomly generated ID that is not linked to your name, email, Apple ID, Google account, or any other personal identity. We do not require account creation.

Information We Do Not Collect

Ridura does not collect any personally identifiable information. We do not ask for your name, email address, phone number, or any other identifying information.

The anonymous device identifier used for server communication is a random ID generated on your device. It cannot be used to identify you personally.

Data Sent to Our Servers

When you use the fuel map, the app sends the following to our servers:

  • An anonymous device identifier for authentication
  • Device platform (iOS or Android) and OS version for compatibility
  • Fuel availability reports you submit (fuel status, queue length)
  • Station edit suggestions and location corrections you submit

If you grant location permission, your approximate location is sent with fuel reports and corrections for proximity validation. Location access is entirely optional — the app works without it, and reports submitted without location skip proximity checks.

Your QR codes, vehicle details, fuel records, and registration numbers are never sent to our servers.

Error Monitoring

We use Sentry, a third-party error monitoring service, to collect crash reports and basic performance data. This helps us identify and fix bugs. We do not send your name, email, IP address, location, vehicle details, or any data that could identify you to Sentry. Only technical error data (stack traces, device model, OS version, app version) is collected. No analytics, behavioural tracking, or usage profiling is performed.

Third-Party Services

The app uses the following third-party services:

  • Sentry (Functional Software Inc.) — receives crash reports and technical error data. No personally identifiable information is sent.
  • OpenFreeMap — provides map tiles. When you use the fuel map, the tile server receives your device's IP address and the map area you are viewing. No other data is shared.
  • Apple App Attest / Google Play Integrity — used during device registration to verify your device is genuine. Only a platform-generated integrity token is sent; no personal data is shared.

We do not sell or transfer your data to any third party for advertising, marketing, or profiling purposes.

Device Permissions

Ridura may request access to the following device features:

  • Photo library — for importing QR code images, which are stored locally on your device only and never transmitted externally.
  • Location — optional, used for the fuel map, station distance sorting, and proximity validation when submitting reports. You can deny location access and still use all app features.
  • Notifications — optional, used for fuel day reminders and edit suggestion updates.

Data Retention and Deletion

Your personal data (vehicles, fuel records, QR codes) is stored locally on your device. Deleting the app permanently removes this data.

Data sent to our servers (fuel reports, corrections, edit suggestions) is retained to support the community fuel map. Expired reports are excluded from active queries but may be retained in storage.

You can delete your account at any time from Settings. When you delete your account:

  • Your device registration and identity are permanently removed from our servers.
  • Your fuel reports and location corrections are de-identified by removing the device association and your GPS coordinates. The fuel availability data remains visible to the community but cannot be linked to you.
  • Your edit suggestions, notifications, and other device-linked data are permanently deleted.
  • All local data on your device is erased.

After deletion, you can re-register at any time. A new anonymous identifier is created with no link to your previous account.

Data Residency

All server-side data is stored and processed on DigitalOcean infrastructure in Bangalore, India. As Leafy Code International (Pvt) Ltd is incorporated in Sri Lanka, this constitutes a cross-border data transfer. We ensure that appropriate safeguards are in place and that your data is handled in accordance with applicable data protection standards in both jurisdictions.

Future Changes

We may update this Privacy Policy from time to time. If we make material changes, we will update the app and notify users. Any changes will continue to prioritise your privacy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at hello@leafycode.com or visit leafycode.com.