Privacy policy

Effective 9 October 2026. This policy describes the Arah mobile app and the service at arahmap.online.

Who we are

Arah is published under the package name com.arahmap.socilet. This policy covers the Arah app and the Arah account service.

Account

If you create an account, Arah stores your email address, a display name, and the time the account was created. A password account also stores a password hash. The password itself is not stored. If you continue with Google, Arah receives your Google account email, name, and Google account id, and stores them with the Arah account.

Notifications

If you allow notifications, Arah stores this phone's Firebase Cloud Messaging token so the server can send a message to this device. You can turn notifications off in the phone's system settings. Deleting the account removes the token.

Location

Arah uses location only while the app is open. It does not collect location in the background. Location is used to show where you are, find nearby places, calculate a route, and record a trip after you start navigation.

Trip history, route choices, and recent places stay on your phone unless you delete them there. Arah does not upload that trip history to its server.

What is sent to Arah

• Your email and password when you register, sign in, or delete the account.
• Your current coordinates when you ask for weather. The server asks OpenWeather and keeps a short cache of the weather result, not a location history tied to your account. The cache expires within about 10 minutes.
• The message you type or speak to the assistant, recent chat text, and, if location is on, your coordinates, speed, heading, destination, and route progress. This is sent so the assistant can answer. Google Gemini processes the request. If Gemini cannot answer, the same request is sent to Relay Models, which answers with the DeepSeek model deepseek-v4-flash. If you turn on saved chats, Arah keeps the recent text on the server until you delete it or delete the account. Spoken audio is sent to ElevenLabs to turn speech into text and text into speech, and Arah does not keep the recording.
• If you ask about traffic and a traffic provider is available, the coordinates for that request are sent to TomTom. Arah does not keep a traffic history.

Services the phone contacts directly

• OpenFreeMap, for the map tiles.
• OpenStreetMap Nominatim, for place search and the name of where you are. Search text and coordinates are sent to Nominatim.
• The public OSRM routing service, for the route line. The start and destination coordinates are sent to OSRM.

What we do not do

Arah does not sell personal information. The app does not show ads and does not include an advertising or analytics SDK. Arah is not directed at children under 13.

How long data is kept

The account is kept until you delete it. Sign-in rate limits expire after 15 minutes. Weather cache entries expire after about 10 minutes. Assistant messages are sent to produce a reply and are not stored, unless saved chats are on. Saved chats keep recent assistant text on the server for up to 30 days, or until you turn saved chats off or delete the account. Spoken audio is not kept. Data on your phone stays there until you delete it or uninstall the app.

Deletion

You can delete the account in the Arah app under Profile, or on the account deletion page. A password account is deleted with its email and password. An account created with Google is deleted on that page with Google, or in the app while you are signed in. Deletion removes the account and any trips, routes, saved places, or notification tokens stored for that account on the server. It also removes the trip history stored on the phone that performs the deletion from the app. Copies already sent to OpenWeather, Nominatim, OSRM, TomTom, Gemini, Relay Models, or ElevenLabs for a single request are not pulled back. Saved assistant text for the account is deleted with the account.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date.