Privacy Policy

1. Who we are

Darwin Maps is operated by Darwin Geospatial S.L. ("we", "us"). We provide an interactive geospatial platform for environmental and land-use analysis in Spain. For questions about this policy or your data, contact us at privacy@darwingeospatial.com.

2. What data we collect

2.1 Account data (if you register)

• Email address and hashed password (stored in Firebase Authentication)
• Account creation date

Registration is optional. You can use Darwin Maps without an account.

2.2 Analytics data (only with your consent)

If you accept analytics, we collect:

• Interaction events — which map layers you view, themes you explore, and areas you select (e.g., "viewed NDVI layer", "selected Murcia").
• AI assistant conversations — your questions and the assistant's responses (truncated to 500 characters each). This helps us understand what information users need and improve the assistant's quality. Conversations are retained for 90 days and then deleted.
• Session data — a random session identifier, device category (mobile/desktop/tablet), session start and last-active times.
• Anonymised IP hash — your IP address is irreversibly hashed with a daily-rotating salt. We never store your actual IP address.

If you decline analytics, none of the above is collected. Zero tracking occurs.

2.3 Data we do NOT collect

• Your precise geographic location
• Cookies for advertising or cross-site tracking
• Data from third-party trackers (no Google Analytics, no Meta Pixel, no ad networks)

3. Why we collect it (legal basis)

4. How long we keep it

• Analytics events: 90 days, then automatically deleted.
• Session summaries: 90 days.
• Lead profiles (registered users): Retained while your account exists. Deleted upon account deletion or erasure request.
• Account data: Retained until you delete your account.

5. Where your data is stored

All data is stored in Google Cloud Platform (europe-west1, Belgium) within the EU. Our cloud infrastructure provider is Google Cloud EMEA Limited, which operates under EU data protection standards. No data is transferred outside the EEA.

6. Who has access

• Darwin Geospatial team — for platform operation and improvement.
• Google Cloud Platform — as infrastructure provider (data processor), under standard contractual clauses.

We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties.

7. Your rights

Under the GDPR and Spain's LOPDGDD, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — delete all your analytics data. You can do this directly from the app via the cookie settings, or by contacting us.
• Withdraw consent — revoke analytics consent at any time via the cookie settings link at the bottom of the page. Withdrawal is as easy as giving consent.
• Portability — receive your data in a machine-readable format.
• Lodge a complaint — with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

To exercise any right, email privacy@darwingeospatial.com. We will respond within 30 days.

8. Cookies and local storage

Darwin Maps uses localStorage (not cookies) to remember your analytics consent choice. No third-party cookies are set. The consent preference stored is:

• darwin_analytics_consent — "true" or "false"

This value is only used to decide whether to activate analytics. It contains no personal data.

9. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top will change accordingly. For significant changes, we will show a notice in the application.