External services and what leaves your phone

Overpass (map data from OpenStreetMap)

• Speed limit: a position at most once every 8 seconds, for every location point the app processes, even outside a trip. While driving that is about every 8 seconds, except where the limit is already stored on your phone. What comes back is the speed limit of the road.
• Train, tram and bus check: after a trip, up to six route points or six places where you stood still, unless a paired tag recognized the car. What comes back is whether those points lie along a railroad or a tram line, or near a stop.
• Missing limits: when you open a trip with missing limits, route points from that trip.

Nominatim (addresses from OpenStreetMap)

• After a trip, the start and end point, for the address.
• For the station check, a start or end point.

Mapbox (map and search)

• Map tiles of the area you are looking at, every time you open a map.
• The text you type in an address field, from three characters.
• A report that the map was used, with a random ID and without coordinates.

The RDW

For a Dutch license plate, only that plate goes to opendata.rdw.nl, the open data service of the RDW, the Dutch vehicle authority, to fetch make, model and fuel. Up to and including version 2.0.47 on iPhone and 2.0.45 on Android, this happened for every plate entered. See Dutch license plates and the RDW.

Your phone’s maps app

Only when you tap the button to navigate to your car: your car’s location as the destination, to Apple Maps on iPhone or Google Maps on Android.

App Store, Google Play and RevenueCat

Your subscription runs through the App Store or Google Play. For the status of your subscription, the app uses the RevenueCat service. The app signs in there without a name or email address; RevenueCat receives your purchases and your subscription status under a random ID. The app sends no trip data.

Websites

If you tap the manual, the terms or another page in the menu, that page of movejack.com or the store opens. No app data goes along in the address.

With every connection: your IP address

As with any internet connection, every service the app contacts sees the IP address of your connection. Together, the requests to map services show your route, even though they go without a name or account.

What we have not established

• Which device or app characteristics the RevenueCat software itself sends: that is not in the app’s code.
• Whether the Bluetooth library on Android itself fetches anything from the internet.
• Whether the positions the app requests every three minutes on Android while stationary also go through the speed limit lookup.