Basilical HeritagePrivacy policy
Effective 13 October 2026. Applies to the Basilical Heritage app for iPhone, iPad and Mac, and to basilicalheritage.com.
The short version. The app has no account, no analytics, no advertising and no tracking. It collects nothing about you. Your location and your bucket list stay on your device. The app talks to public map and encyclopaedia services, and to our own tile server, only to fetch the map and the pages you look at.
The one thing we do hold is an email address, and only if you typed it into the form on this website to ask for the beta. That is covered below, and you can get off the list from the foot of any mail we send.
What the app stores on your device
- Your bucket list (the sites you save), your map layer choices, the content language, and whether the introduction has run. These live in the app's own storage and are removed when you delete the app.
- Map tiles, photographs and articles are cached by the system so that they load faster next time.
Nothing of this is sent to us.
Location
The app asks for your location only when you tap the compass or choose “Near me” in search, and only “while using the app”. It is used on your device to centre the map and to sort search results. It is never sent to Basilical or to any third party. The app works without it.
Requests the app makes
To show a map and a page the app has to ask servers for them. Each request carries your IP address and the coordinates or the name of what you are looking at, as every map app's requests do. The services are:
| Service | What for | Operator |
|---|---|---|
| OpenFreeMap (tiles.openfreemap.org) | the base map | OpenFreeMap |
| data.basilicalheritage.com | heritage sites, marked routes, 3D buildings, context articles | Basilical e.U. (hosted in the EU) |
| Wikipedia, Wikidata, Wikimedia Commons | articles, facts, photographs | Wikimedia Foundation |
| Nominatim (nominatim.openstreetmap.org) | place search | OpenStreetMap Foundation |
| Mapzen Terrarium tiles (AWS Open Data) | hillshade and elevation | Amazon Web Services |
Our own server keeps the ordinary web-server log (IP address, request, time) for at most 14 days, for operating the service, and nothing else. We do not combine it with anything, and we cannot tell one reader from another.
The links on a page (“Read the full article on Wikipedia”, “Directions”, a photographer's name) open the other app or website, whose own privacy policy then applies.
Sharing a bucket list
A shared bucket list is a link that contains the identifiers of the sites. It contains nothing about you.
The beta mailing list
If you ask for early access on this website, we keep:
- the address you typed,
- the date, and which form on the page it came from,
- the fact that you ticked the consent box and then confirmed the address by clicking the link we mailed you.
Nothing else. There is no name field, no tracking pixel in our own invitation mail, and the address is never sold, swapped or passed to anyone beyond the processor named below.
Why we may do it
Your consent, Article 6(1)(a) GDPR. We use double opt-in — the address goes on the list only after you click the link in the confirmation mail — because that is what makes the consent verifiable, and because it stops a stranger putting your address on our list.
What we send
The TestFlight link for the beta, and a short note when there is a new build worth installing. Nothing else, and never on anyone else's behalf.
Getting off it
Every mail carries an unsubscribe link in its footer; one click and you are off, with no reply needed. You can also write to info@basilical.com. We keep the address until you unsubscribe or the beta ends, and delete it within 30 days of either.
Who processes it
Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) sends the mail and holds the list for us, on servers in the European Union, under a data processing agreement. They are not allowed to use the address for anything of their own.
Your rights here are the real ones
Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time without giving a reason — write to info@basilical.com and we will answer within a month. You may also complain to the Austrian Data Protection Authority (dsb.gv.at).
The website itself
basilicalheritage.com is static files on our own server in Germany. There are no cookies, no analytics and no third-party scripts of any kind: nothing on the page loads from anywhere but the server serving it. The ordinary web-server log (IP address, request, time) is kept for at most 14 days, for operating the site.
Children
The app is rated 4+ and collects no data from anyone.
Your rights
Under the GDPR you have the right of access, rectification, erasure and objection. For the app we hold no personal data at all, so there is usually nothing to access or erase; for the mailing list, see above. If you believe otherwise, write to us and we will answer within a month. You may also complain to the Austrian Data Protection Authority (dsb.gv.at).
Who we are
Basilical e.U., Roschegasse 26/2/7, 1110 Vienna, Austria. Firmenbuch FN 632621 a, Handelsgericht Wien. Proprietor: Peter Kristof Velösy. Email: info@basilical.com.
Changes
We will post changes here and raise the date at the top. A change that lets the app collect anything new would also be announced in the app.