legal

Privacy

Last updated: 25 October 2026

træv ApS
CVR: 46724941
C/O Felix Wehkamp
Helsinkigade 27, 1.126
2150 Nordhavn, Copenhagen
Denmark
E-Mail: hello@traev.app

Managing director: Felix J. Wehkamp

This Privacy Policy explains how træv ApS processes personal data when you use the træv mobile application, our websites and the services that support them. In this policy, “træv”, “we”, “us” and “our” mean træv ApS, the mobile application is called the “App”, and the websites we operate that link to this policy are called the “Websites”.

træv helps people who already know each other notice when they are nearby. Much of the processing needed for contact discovery and proximity checks takes place on your device. Contact names, local address-book references, location history and the current coordinates used in proximity calculations are not stored as readable account data on our servers. Some information must still be processed by our servers and selected service providers so that we can create accounts, connect users, deliver verification codes, relay encrypted proximity information and keep the service secure.

1. Controller and scope

The controller responsible for the processing described in this policy is:

træv ApS
C/O Felix Wehkamp
Helsinkigade 27, 1.126
2150 Nordhavn, Copenhagen
Denmark
Email: privacy@traev.app

This policy applies to the App, the Websites, our account and proximity services, invitation links and support. Services provided independently by Apple, Google, the OpenStreetMap Foundation and telecommunications providers are governed by their own privacy information where stated below.

2. Personal data we process

The information we process depends on the features you choose to use.

2.1 Account, profile and connections

When you create and use an account, we process your mobile telephone number, year of birth, verification information, user and device identifiers, authentication and session information, and a public encryption key associated with your device. We also process profile information you provide, such as your display name, home city, optional email address and profile image. We use your year of birth only to check that you are at least 16.

We use this information to create and secure your account, keep you signed in and make your profile available through the features you use. A valid telephone number and the basic account information are required to create an account.

We process friend requests, accepted connections, mutual connections, invitation tokens and related timestamps to help you connect with people you know. Depending on the relationship and feature, another user may see your display name, home city, profile image, mutual connections and account identifiers. Accepted friends also receive the public key needed for encrypted proximity checks.

If you share an invitation through another app, the invitation link can include an invitation token and your display name. The app you choose for sharing processes the information under its own terms.

2.2 Contact discovery

Contact discovery is optional. If you enable it and allow contact access, the App reads the contacts made available by your device. Contact names and local address-book references stay on your device. Telephone numbers are normalised and transformed on your device before derived values are sent to our matching service. The service uses those values to identify registered træv users and returns matching profile information.

We do not receive the address-book names or raw telephone numbers of people who do not use træv through this matching process. The derived values are nevertheless treated as pseudonymous personal data, not anonymous data. Your device keeps a local matching cache so that results can be displayed and refreshed.

If someone has your telephone number in their address book, a value derived from that number may be sent to us even if you do not use træv. The source is that user’s address book. We use the value only to check whether it matches a current account and to protect the matching service against abuse. We do not create a profile for a non-user or use the information to contact them. Because we normally have no contact details for the non-user without collecting or reconstructing additional information, we provide this notice publicly instead of contacting each non-user individually.

2.3 Location, proximity and notifications

Location and proximity features are optional. If you enable them and grant the required device permission, the App obtains location readings from your operating system. It keeps a short, reduced-precision location history on your device to decide how and when to run proximity checks. Current coordinates may also be used temporarily on the participating devices as inputs to an encrypted proximity calculation.

The resulting protocol information is encrypted before it passes through our relay service. The relay can process the account and network information needed to deliver it, but it does not receive readable coordinates from the encrypted content. The other participating device receives a nearby result, not your raw coordinates or exact distance.

The protocol information exchanged through the relay consists of machine-generated service messages. træv does not currently provide user-written chat messaging. Nearby notifications are generated locally on your device and can include an accepted friend’s display name.

Location information and a nearby result are personal data.

2.4 Maps

The App uses map tiles provided by the OpenStreetMap Foundation (“OSMF”). When you open a map, your device requests the tiles needed for the displayed area directly from OSMF’s delivery network. OSMF receives information such as your IP address, request time, application information and the requested map area. OSMF processes this information as an independent controller. See the OSMF Privacy Policy and tile privacy information.

2.5 Purchases

If you buy premium access, Apple App Store or Google Play processes the payment under its own privacy policy. træv does not receive your full payment-card details. We receive purchase and entitlement information needed to validate the transaction and provide premium features.

2.6 Device, log and support information

When the App communicates with our services, we process technical information such as IP address, request time, app and device information, service identifiers, authentication events, errors and security events. We use it to operate the service, prevent abuse, diagnose problems and investigate security incidents.

The App also keeps diagnostic information locally on your device. It is not automatically sent to us. If you contact support, we process the contact details, messages, attachments and diagnostic information you choose to provide so that we can respond and resolve the issue.

2.7 Websites

When you visit the Websites, the information your browser sends automatically is processed on our servers, such as your IP address, the date and time of the request, the page requested, the referring page and browser information. We use it to deliver the Websites and keep them secure. The Websites do not use cookies or tracking technologies.

3. Why we process personal data

We process personal data for the following purposes and legal bases under Article 6 GDPR:

• Providing the service, Article 6(1)(b): to create and authenticate accounts, provide profiles and connections, administer invitations, show maps you request, and provide premium entitlements. This processing is necessary to perform our contract with you.
• Optional contacts and location, Article 6(1)(a): to access your address book, transform and compare contact identifiers, process location, and exchange encrypted proximity information when you choose to enable those features. You may withdraw consent at any time by disabling the feature or changing the relevant permission. An operating-system permission is a technical control and is not, by itself, the GDPR legal basis.
• Service security and operation, Article 6(1)(f): to deliver the Websites, protect accounts and systems, prevent abuse, apply rate limits, diagnose failures and maintain reliable service. Our legitimate interests are the secure and effective operation of træv and the protection of users.
• Information concerning non-users, Article 6(1)(f): to compare derived telephone-number values so that users can find existing træv accounts belonging to people they already know. Our legitimate interest is to provide contact discovery while limiting the information received about non-users.
• Support and legal claims, Article 6(1)(b) or (f): to answer service requests and, where necessary, establish, exercise or defend legal claims.
• Legal obligations, Article 6(1)(c): to keep or disclose information when EU or Danish law requires us to do so.

Withdrawing consent does not affect processing that was lawful before withdrawal. You may object to processing based on legitimate interests as explained in section 9.

4. Device permissions and your choices

Depending on the features you use, the App may request access to:

• Contacts, for optional contact discovery.
• Location, including background location where supported, for proximity checks when the App is not open.
• Notifications, for local nearby alerts.
• Camera, if you choose to scan an invitation QR code.

You can deny or later revoke permissions in your device settings. You can also disable location sharing in the App. The related feature will then stop or work only in a limited way. Revoking contact access stops new address-book reads but does not by itself erase an existing local cache. You can clear local App data by logging out, completing account deletion or removing the App and its data through your operating system.

5. Who receives personal data

We disclose personal data only where needed for the purposes described in this policy:

• Other træv users receive profile, connection and proximity information as described above. They do not receive your raw coordinates or exact distance through the App.
• netcup GmbH provides server infrastructure in Germany and Austria for our core backend, relay services and Websites.
• OSMF and its delivery providers receive map requests directly from your device and process them as independent controllers.
• Mobile network operators and telecommunications providers process telephone numbers, verification codes and delivery information to deliver verification SMS messages.

We may also disclose information to professional advisers, courts, regulators, law-enforcement bodies or other parties when necessary to comply with law, protect rights or handle a legal claim. If træv is involved in a merger, financing, reorganisation or sale, relevant information may be disclosed under appropriate confidentiality arrangements and used as permitted by law.

6. International transfers

Our core account, matching and relay infrastructure is hosted in the EEA. Some providers operate internationally. In particular, OSMF uses a global delivery network for map tiles.

Where træv is responsible for a transfer outside the EEA, we rely on an applicable European Commission adequacy decision or approved safeguards such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required. You may contact us for more information about the safeguard relevant to a transfer. Independent controllers are responsible for their own transfer arrangements.

7. Retention and deletion

We keep personal data only for as long as needed for the purposes described above, unless law or a substantiated legal claim requires a longer period.

• Account, profile and connection information is normally kept while your account is active. Purchase and accounting records are kept for the periods required by law.
• Contact names, contact references, matching results and diagnostic information stored by the App remain on your device until they are refreshed or local App data is cleared.
• Reduced-precision location history on your device normally covers approximately the previous 24 hours while location processing is active. If you pause the feature, existing samples may remain until processing resumes and normal deletion runs, or until local App data is cleared. Encrypted proximity messages are kept only as needed for delivery. The App assigns them a maximum lifetime of 12 hours and requests earlier removal after successful processing.
• Verification, security, server log and support information is kept for the period reasonably necessary for delivery, troubleshooting, abuse prevention, incident investigation and follow-up, after which it is deleted or anonymised.
• Backups follow a separate restricted retention cycle. Information removed from active systems may remain in encrypted backups for up to three months before the relevant backup expires or is overwritten. Backup data is not used for ordinary service operations.

You can request account deletion in the App or by emailing privacy@traev.app. After the request is completed, your active account, profile and connection information is removed from our live systems, subject to the retention exceptions above. Deleting the App alone does not delete your server-side account.

The App is designed to remain usable when a device is temporarily offline. For this reason, another user’s device may continue to show a locally cached copy of your profile or connection information after your account has been deleted, if that device has not yet synchronised with our servers. The information is updated or removed through normal synchronisation when that device next connects. We cannot immediately erase data from a device that is offline, or information another person holds independently, such as your telephone number in their own address book.

8. When information is required

A telephone number, year of birth, basic profile information and the technical account information needed for authentication are required to create and use a træv account. If you do not provide them, we cannot provide the account service. To display the Websites, your browser must send technical information such as your IP address. Contacts, location, notifications, camera access, profile images and support attachments are optional, but the related feature may not work if you choose not to provide the required information.

9. Your rights

Subject to the conditions and exceptions in the GDPR, you may:

• request access to your personal data;
• ask us to correct inaccurate or incomplete data;
• ask us to erase personal data;
• ask us to restrict processing;
• receive data you provided in a structured, commonly used and machine-readable format where the right to portability applies;
• object to processing based on our legitimate interests; and
• withdraw consent for future processing at any time.

To exercise a right, contact privacy@traev.app. We may request information needed to verify your identity. We normally respond within one month, although the GDPR permits an extension in some cases. Rights are not absolute, and we will explain any applicable limitation unless the law prevents us from doing so.

You may also complain to the supervisory authority where you live or work, or where an alleged infringement occurred. Our supervisory authority is the Danish Data Protection Agency, Datatilsynet:

www.datatilsynet.dk
Carl Jacobsens Vej 35
2500 Valby, Denmark
Email: dt@datatilsynet.dk

10. Automated processing

The App automatically performs contact matching, proximity calculations and local notification decisions to provide the features you request. træv does not use this processing to make decisions that produce legal or similarly significant effects about you within the meaning of Article 22 GDPR.

11. Children

træv is intended only for people aged 16 or older. You must not create an account if you are under 16. If we learn that a younger child has created an account, we will take appropriate steps, including deletion where required.

12. Security

We use technical and organisational measures appropriate to the risks of the service, including encryption, access controls, restricted backups, secure device storage, transformed contact identifiers and data minimisation. No system is completely secure. Please protect your device and contact us if you suspect unauthorised access to your account.

13. Changes to this policy

We may update this policy when the service, providers or law changes. We will change the date at the top and provide additional notice where a change materially affects your rights or how we process personal data. Where new processing requires consent, we will ask for it before that processing begins.

14. Contact

Questions, requests and complaints about privacy can be sent to privacy@traev.app.