Privacy Policy for Vegferd
You do not need an account. We do not store where you have driven, and we sell no data.
Last updated: 29 October 2026.
1. Who we are
Vegferd is provided by Millingly AS (organisation number 937 731 760) in Bergen, Norway, under the brand name Viti Geo. Millingly AS is the controller of the personal data described here. “We” and “us” mean Millingly AS.
Questions about privacy go to personvern@vitigeo.com.
2. In short
- You do not need an account, except to buy Vegferd Pluss. Without one, we do not know who you are. If you sign in, we have your email address, a user identity and what you yourself put in the account (section 3.5).
- We do not store where you have driven. Your position and route are used to calculate the route and fetch road information. In a car, the position comes from the car. A planned route is kept for up to one day, with nothing linking it to you, and is then deleted (3.1).
- Searches are not stored. What you type goes to our own search service, no one else’s. If you say your destination, the speech is interpreted on the phone; on Android phones that cannot interpret Norwegian speech themselves, Google does it and may receive the audio (3.2).
- Without an account, everything stays on your phone. If you sign in, we store your vehicles, some settings and your profile photo in your account, so they follow you to your next phone. A number plate is sent to the Norwegian Public Roads Administration only for lookup (3.3, 3.5, 4).
- We do not sell data, and show no advertising. The app has no analytics, tracking or crash-reporting tools from others. If the app crashes, it sends the phone’s own crash report to us the next time it starts, without your location and without anything that points to you (3.10).
- Notifications are made on the phone. We send no push notifications, and hold no address for your phone (3.10).
- Our own logs contain neither your IP address nor where you are. Your IP address exists only in the cloud provider’s request log, for 30 days, for troubleshooting and against abuse (5).
- The services the app talks to, such as maps from Mapbox or Kartverket and weather from the Norwegian Meteorological Institute, receive the area you are looking at or coarse points along the route, never who you are (7).
- Subscriptions, the ChatGPT connection and the Nybrott beta programme are optional, and described in 3.6–3.8. We never see your payment details.
- Your rights, and where to complain, are in section 9.
3. What we process, and why
3.1 Position, destination and route
To plan and navigate, the app sends our servers:
- the start, the destination and any stops (as coordinates and place names),
- the departure or arrival time you want,
- while driving: your position and heading, and the route ahead of you,
- the properties of your vehicle that matter for the route: whether it is electric, its range, length, height and weight.
We use this to calculate the route and fetch what applies to it: traffic messages, closed roads, ferries, charging stations, weather, elevation and toll stations.
A planned route is cached for up to one day, so the app can fetch road data for each route alternative after the routes have been shown. It is stored under a random number for the plan, with nothing that identifies you or your phone, and is deleted automatically. Your position while driving is not stored, unless you share the trip yourself:
If you share the trip with a link, we store the latest position for that trip while the sharing is on, so that those who have the link can see where the car is. Only the newest position exists, it is overwritten every 10 seconds, and everything is deleted when you stop sharing, when the trip is over, or at the latest two days after you shared it. We do not log the positions. Everyone who has the link can follow the trip; share it only with those you want to see it.
The weather forecast for the route comes from the Norwegian Meteorological Institute, for points along the route rounded to about one kilometre and with nothing about you.
When a route has to be recalculated on the way, we write the start and destination to the operations log with reduced precision — two decimals, about one kilometre — to detect routing errors. See section 5.
The map fetches map tiles for the area you are looking at. That reveals which area is shown, but is not linked to you.
In a car (CarPlay and Android Auto) the position and speed come from the car instead of the phone, and are used the same way: to follow you on the map, in tunnels too, and for nothing else.
3.2 Place search
What you type in the search field, together with your approximate position to rank nearby results, is sent to our search service. The same applies when you drop a pin on the map and the app looks up the name of the place. The searches are not stored with us.
The search is our own and is built on public registers; no other search provider receives what you type. The app remembers your latest destinations, locally on the phone.
Voice search. If you tap the microphone, what you say is turned into text, and the text goes into the search as if you had typed it. On iPhone this happens on the phone; the audio is sent nowhere. On Android it happens on the phone when the phone can interpret Norwegian speech itself (Android 12 and newer with Norwegian downloaded). Otherwise the app uses the phone’s speech recognition, which on most Android phones is Google’s, and the audio may then be sent to Google and processed under Google’s privacy policy. We never receive the audio, only the text, and we do not store it.
3.3 Vehicles and number plate lookup
Without an account, you choose among the general vehicle types (electric car, petrol car and so on), and the choice is stored only on your phone.
With an account, you can add your own vehicle — name, dimensions, weight, charging equipment and optionally the number plate — and it is stored in your account with us, together with which vehicle you have chosen. If you look up a number plate, we send the number to the Norwegian Public Roads Administration’s vehicle register to fetch the vehicle’s technical data. The number plate is not sent along when you plan a route; only the vehicle’s properties are.
3.4 Protecting the service
To make sure it is a genuine Vegferd app using the service, and not a script draining it, the app attests itself:
- On iPhone with Apple’s App Attest. That gives a key belonging to this installation on this phone — not a device ID and not your Apple ID.
- On Android with Google Play Integrity. We create a random session identity that lasts for up to 24 hours.
This identity is in the access token the app sends with every request. We use it to limit abuse (too many requests). It is written to the operations log only when something is refused. Your subscription is linked to your account, not to this identity (3.7).
3.5 Account (optional)
If you choose to sign in, we process:
- your email address,
- a user identity that links your sign-ins together,
- your vehicles and which one you have chosen (3.3),
- settings that follow you, today the ferry margin,
- your profile photo, if you add one. It is stored as a small, cropped image and shown only to you, and
- your subscription, if you have bought Vegferd Pluss (3.7).
The phone keeps a copy of the vehicles, settings and photo, so the app works without coverage. If you sign out, the copy is removed from the phone; what is in the account stays there.
You sign in with a code we send by email, in the app and when you connect Vegferd to ChatGPT (section 3.6).
Once you have created the account, we send you one welcome email at the same address. It tells you what the account does and where to get help.
You get news by email only if you turn it on in the app, under your account: «News by email». We then send news about new features and tips, a few times a year, in the language the app was in when you said yes. We store when you said yes and which text you saw. You can turn it off again in the same place, or with the link at the bottom of every such email, and it stops at once. Sign-in codes and messages about your account are not news and arrive regardless. We send no other marketing.
The sign-in service also records when you signed in, and the IP address and device type (browser or app identification) for each sign-in session. That is used to keep the session secure.
The sign-in session is stored encrypted on the phone (Keychain on iPhone, Android Keystore on Android). Signing out deletes it from the phone, but not the account.
You delete the account in the app, under your account: “Delete account”. That permanently deletes the account, the email address, the sign-in sessions, the vehicles, the settings, the profile photo and what we have stored about the subscription with us. A subscription is not cancelled by this — you do that where you bought it.
3.6 Vegferd in AI assistants (optional)
You can connect Vegferd to an AI assistant, such as ChatGPT or Claude, and ask for routes, road conditions and ferry status there. You then sign in with your Vegferd account and approve the connection. What you ask about — places, destinations and routes — passes between the assistant provider (OpenAI, Anthropic) and us, and the provider processes the conversation under its own terms. With us, the same applies as in the app: we do not store what you ask. Your user identity may appear in the operations log if a request is refused. You can revoke the connection at any time in the assistant’s settings, where connected apps are listed. If you delete your Vegferd account, the connection disappears too. Everything about this is in Vegferd in AI assistants — Privacy.
3.7 Subscription
Vegferd Pluss is bought in the App Store, and you must be signed in. The subscription follows your account, so it also applies on a new phone and when you use Vegferd in an AI assistant (3.6). We use RevenueCat to verify the purchase. RevenueCat receives your user identity from the account (3.5) and the purchase history from Apple, but not your email address. We store your subscription level and when it expires, linked to the account, and only if you have bought something. We never see your payment details.
3.8 Vegferd Nybrott (the beta programme)
If you sign up as a test driver on vegferd.no, we store your name, email, which phone you have (iPhone or Android), car display and county, with your consent in the form. We use it to invite you and to keep you informed about the beta. Your email address is shared with Apple (TestFlight) or Google (a Google group and Google Play), because that is how they give access to an app in testing. The data is kept until the beta is over, or until you ask to be deleted. You unsubscribe through the contact form.
3.9 The websites vegferd.no and vitigeo.com
The websites are static and served by Firebase Hosting (Google). It sets no cookies and loads its fonts from its own domain. Google keeps an access log with IP addresses for the hosting service, under its standard rules.
The contact form uses Cloudflare Turnstile to check that you are human. The message goes through our own server, which does not store it, and arrives as email in our inbox at Proton. We keep it for as long as we need to answer you and follow up on the enquiry.
3.10 Phone permissions
The app asks for these permissions. You can turn each of them off in your phone’s settings; what then stops working is stated here.
- Location, only while the app is in use. To plan from where you are and to navigate. During navigation the app continues with the screen locked; on Android that shows as a notification you cannot swipe away while driving. Without location you must enter the start yourself, and navigation cannot follow you.
- Microphone. Only while you use voice search (section 3.2). Without it, you type in the search field.
- Notifications. To show the navigation on the lock screen, and to tell you about events on your route, such as a cancelled ferry. The notifications are made on the phone: we send no push notifications and hold no notification address for your phone. Without notifications, navigation works as before, but without messages on the lock screen.
Crash reports. If the app crashes or stops responding, the phone’s operating system makes a report of where in the app’s code it happened. The next time the app starts, it sends the report to us together with the app version, operating system version and phone model. The report does not contain your location, your vehicle, your account or anything else that points to you, and we use it only to find and fix errors. If you have also agreed to share analytics with app developers in your phone’s settings, we also see Apple’s or Google’s own reports. The app has no tools from others for crashes or usage statistics.
4. What stays on your phone
- which general vehicle type you have chosen, if you are not signed in,
- settings: map choice, voice, accepted terms version,
- your latest destinations (up to eight),
- the sign-in session, if you are signed in.
We have no access to this. If you delete the app, it disappears — except the latest destinations on iPhone, which may be in your backup.
5. What we store, and for how long
| What | For how long |
|---|---|
| Planned routes: start, destination, stops, time and the vehicle’s properties, under a random plan number | One day, then deleted automatically |
| Operations log: time, which service was used, response status and response time. On rerouting: start and destination with two decimals. On refusal: the identity from 3.4 | 30 days, then deleted automatically |
| The cloud provider’s request log: IP address, time, which service was called, app and operating system version | 30 days, then deleted automatically |
| Crash reports: where in the app’s code it crashed or hung, app version, operating system and phone model | 90 days, then deleted automatically |
| Subscription level and expiry date, linked to the account, for those who have bought | For as long as the subscription is valid, and 90 days after it has expired, or until you delete the account. Then deleted automatically |
| Account: email, user identity, sign-in sessions, vehicles, settings and profile photo | Until you delete the account in the app |
| Your answer about news by email: yes or no, when, which text you saw, and which mailings you have received | Until you delete the account in the app |
| Nybrott sign-up: name, email, phone, car display, county | Until the beta is over, or you ask to be deleted |
All of this is stored with processors in the EU/EEA. Who they are, and what may leave the EEA, is in sections 7 and 8.
Our operations log does not contain your IP address, and our service does not read it. The cloud provider keeps a request log in front of the service with the IP address, the time, which service was called, and the app and operating system version. We use it only to troubleshoot and to stop abuse, and it is deleted after 30 days.
All traffic between the app and our services is encrypted, and access to the systems is limited to those who operate the service.
Beyond the plans above, we do not store trips, routes, positions or searches.
6. Legal basis
| Processing | Basis (GDPR art. 6) |
|---|---|
| Route, navigation, search, number plate lookup | Necessary to provide the service you ask for — contract (b) |
| Account and subscription | Contract (b) |
| App attestation, abuse limiting, operations log, crash reports | Legitimate interest (f): keeping the service secure, available and free of errors |
| Vegferd Nybrott | Consent (a), given in the sign-up form. You can withdraw it at any time |
| News by email | Consent (a), given with the switch in the app. You can withdraw it at any time, in the app or in every email |
| The contact form, and the check that you are human | Legitimate interest (f): answering what you ask, and keeping the form free of spam |
7. Who processes data for us, and whom the app talks to
Processors — process data on our behalf, under an agreement with us:
| Who | What | Where |
|---|---|---|
| Google Cloud | Runs the servers, the operations log and the storage of crash reports | Netherlands (europe-west4) |
| Supabase | Database and sign-in | Frankfurt. Supabase is a US company; see section 8 |
| RevenueCat | Verifies purchases (iPhone) | USA; see section 8 |
| Proton | Email: sends the sign-in code, the welcome email and the news to those who said yes, and the contact form arrives in our inbox there | Switzerland |
| Cloudflare | Turnstile in the contact form and the Nybrott sign-up | USA; see section 8 |
Services the app contacts directly, which process data under their own terms:
| Who | When | What they receive |
|---|---|---|
| Mapbox | The default map | Map tiles for the area you are looking at. Mapbox’s own usage statistics are turned off in the app |
| Apple | iPhone: App Attest, and Apple Maps if you choose it | See Apple’s privacy policy |
| Android: Play Integrity | See Google’s privacy policy | |
| Kartverket | iPhone: if you choose Kartverket’s map or aerial imagery (Norge i bilder) | Map tiles for the area you are looking at |
| Android: the location service in Google Play services | See Google’s privacy policy | |
| Android without Norwegian speech recognition on the phone: voice search (section 3.2) | The audio of what you say | |
| The Norwegian Public Roads Administration | When you look up a number plate (through us) | The number plate |
Public data sources — traffic, ferries, charging, road data — receive no data about you. The Norwegian Meteorological Institute receives points along the route with reduced precision (section 3.1). See the data sources.
8. Transfers outside the EEA
Supabase, RevenueCat and Cloudflare are US companies. Our database is in Frankfurt, but the companies’ own operational data may be processed outside the EEA. Such transfers take place under the European Commission’s standard contractual clauses (SCC, decision (EU) 2021/914), which the companies’ data processing agreements are built on. Proton is Swiss; Switzerland has an adequate level of protection under the European Commission’s decision.
9. Your rights
You have the right to request access to, rectification of and erasure of data about you, to object to processing based on legitimate interest, and to receive the data you have given us (data portability). Write to the address in section
- We answer within one month.
Much of what we process cannot be linked to you — we do not store routes or searches, and without an account we have no identity to look up.
We make no automated decisions about you and build no profile of you.
You can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) if you believe we process data about you in breach of the rules.
10. Changes
If we change how we process personal data, we update this policy and the date at the top. We notify you of significant changes in the app.