Privacy Policy

1. Data Controller

The data controller for personal data is OUTZERO, a company in the process of incorporation, with contact email info@outzero.app.

OUTZERO is a digital platform focused on discovering spots, routes, and unique travel and adventure experiences. We take user privacy very seriously and process personal data responsibly, transparently, and in accordance with current data protection regulations, especially the General Data Protection Regulation (GDPR) and applicable legislation.

2. Data We Collect

OUTZERO only collects the data necessary for the proper functioning of the application and to improve the user experience.

When you create an account on OUTZERO through third-party services such as Google or Apple, basic account data is collected, such as email address, username, and, where applicable, profile photo. This data is used exclusively to identify you within the application and allow access to its functionalities.

The platform allows you to generate your own content, such as photos, videos, ratings, favorites, lists, and saved items associated with spots and routes. This content is intended to enrich the OUTZERO community and is visible within the application according to its operation and configuration.

Usage data related to activity within the app is also collected, such as interactions with spots, maps, and functionalities, as well as navigation statistics. This data is used to analyze platform usage and continuously improve its performance, stability, and user experience.

3. Device Location

OUTZERO may access and collect the precise location of the device only if the user grants explicit permission from their mobile device or compatible browser.

In addition, when the user uploads photos to create or edit a spot and expressly agrees to metadata analysis, OUTZERO may read the GPS EXIF coordinates included in those files to suggest or autofill the spot location.

Location data is used to show nearby spots.

Center the map on the current position.

Facilitate navigation through the "follow route" feature.

When the user authorizes the analysis of their photo metadata, any detected GPS coordinates are used exclusively to suggest or autofill the location of the relevant spot. The user may ignore this suggestion and choose a location manually.

When the user activates the "follow route" feature for the first time, an informational notice will be shown explaining that the application needs continuous access to location to guide the user even with the screen locked. After this information, the user may grant or deny the corresponding permission from the operating system of their device.

This informational notice will only be shown the first time the user uses this feature. If the user grants permission, it will remain active for future uses without needing to request it again, unless the user revokes it.

If permission is granted, the application may also access location in the background, even when the application is not in the foreground or the screen is locked, for the sole purpose of keeping navigation active until reaching the spot.

This functionality is activated exclusively when the user starts it voluntarily and is deactivated when the user ends the route.

OUTZERO does not perform continuous location tracking outside the "follow route" functionality and does not use location data, including data extracted from EXIF metadata, for purposes other than those described. The user may revoke location permission at any time from their device settings.

4. IP Address Processing

OUTZERO collects the user's IP address as technical data necessary for the proper functioning of the service.

The IP address is used to protect the platform against unauthorized access, fraud attempts, automated use of the service, or any activity that could compromise the security of users or the technical infrastructure. It is also necessary to establish and maintain the connection between the user's device and the application servers, manage sessions, detect technical errors, resolve incidents, and optimize the overall performance of the service.

In a limited way, the IP allows determining an approximate geographic location, such as the country or region from which the application is accessed. This information is used only to adapt basic aspects of the service, such as language, the availability of certain functionalities, or compliance with applicable regulations according to the territory. In no case is precise or real-time geolocation performed.

The IP address may also be used in an auxiliary manner for the preparation of global and aggregated statistics on the use of the application, such as distribution of users by regions or time periods of activity, without allowing individual user identification.

The IP is not used to identify the exact address of the user, perform continuous tracking, or for personalized advertising or preparation of individual commercial profiles.

5. UUID (Unique Device Identifier) Processing

OUTZERO uses a UUID (Unique Device Identifier or application installation identifier) as a technical identifier necessary for the proper functioning of the service. This identifier does not allow directly identifying the user or knowing their exact location.

The UUID allows distinguishing one installation of the application from another and recognizing the device consistently between sessions, without needing to personally identify the user. Thanks to this, certain functionalities can operate correctly, such as preference management, basic configurations, data synchronization, or functionalities associated with the same installation.

Likewise, the UUID is used to prevent abuse and misuse of the service, such as mass account creation, automated use, fraud attempts, or system manipulation. It may also be used in an aggregated manner for internal analytics, detection of recurring errors, and improvement of performance and user experience.

In case certain functionalities are subject to usage limits, trial periods, or specific conditions, the UUID allows applying these controls in a technical and consistent manner per device or installation.

6. Cookies and Similar Technologies

OUTZERO uses cookies and equivalent technologies only for internal analytics and improvement of the performance and stability of the application. No personalized advertising cookies are used and data is not sold to third parties.

7. Advertising and Promotional Content in OUTZERO

OUTZERO may display banners or promotional content from verified companies within the application that collaborate with the platform and meet the quality standards defined by OUTZERO. These companies may appear integrated in the app as part of visible content or in specific promotional spaces and contribute to financing the service through an annual fee.

The promotional content displayed in OUTZERO constitutes contextual advertising, meaning it is presented based on general criteria such as the approximate location of the user, the region, or the content they are viewing at that moment (for example, spots or routes in a specific area).

In no case does OUTZERO perform personalized advertising based on individual profiles, browsing histories, previous user behavior, tracking between applications or external services. No commercial profiles are created nor are automated decisions with legal effects on the user made.

The location used to display this content is always approximate and is obtained only if the user has granted permission or from basic technical information such as the country or region of connection. This processing does not allow identifying the user as a natural person or knowing their exact location.

8. Purposes of Processing

Personal data is processed for the purpose of allowing normal access and use of the OUTZERO application, showing spots, routes, and experiences adapted to the user's location and context, saving favorites and personalized content, displaying contextual promotional content from verified companies, ensuring platform security, preventing fraud and unauthorized uses, analyzing app usage to improve its functionalities and performance, and managing incidents, inquiries, and support requests.

OUTZERO does not use personal data for purposes other than those described in this policy.

9. Legal Basis for Processing

Data processing is based on the user's consent when creating an account and accepting this privacy policy, on the execution of the contract necessary to provide the OUTZERO service, and on the legitimate interest of improving the platform, ensuring its security, and preventing misuse.

10. Data Recipients

Data is only shared when strictly necessary with technology providers that provide services to OUTZERO, such as hosting, maintenance, or technical support, and with analytics tools, always in an aggregated and anonymized manner. OUTZERO does not sell personal data to third parties.

11. User Rights

The user may exercise at any time their rights of access, rectification, deletion, opposition, limitation of processing, and portability of their personal data by writing to info@outzero.app.

12. Data Security and Retention

OUTZERO applies appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration, or improper disclosure.

Data will be retained as long as the user maintains an active account on OUTZERO or for the time necessary to comply with legal obligations. The user may request the deletion of their account and data at any time.

13. Policy Changes and Complaints

OUTZERO may update this privacy policy to adapt it to legal changes or service improvements. Any relevant change will be notified through the app or other appropriate means.

If the user considers that the processing of their data is not adequate, they may file a complaint with the Spanish Data Protection Agency (AEPD) through its official website.

Last updated: April 14, 2026