Rauholm App Privacy Policy
Last updated: 15 October 2026
This privacy policy applies to the “Rauholm” iPhone app, including its share extension and widgets. For the website rauholm.com, the website privacy policy (in German) applies.
1. Controller
Fries & Zeppenfeld GbRMittelweg 5
57489 Drolshagen
Germany
Email: hallo@rauholm.com
2. The short version
- The app is free, shows no ads and contains no tracking, no analytics and no third-party software. It talks to Apple’s services, our own servers and the few other parties named in sections 6 to 11.
- You don’t need an account. Your trips, lists and settings live on your device and, if you use iCloud, in your private iCloud. We can’t see any of it.
- Your content only reaches us if you share a trip with others (section 10), join the waitlist (section 11) or write to us via “Report a problem” (section 14). All of this is optional. When content is downloaded, our servers see your IP address like any website (section 7).
- You are not required by law or contract to provide any data. Without signing in you just can’t share trips, and without an email address you can’t join the waitlist. There is no automated decision-making within the meaning of Art. 22 GDPR.
- Your location never reaches us and is not stored. Apple Maps only receives it in two cases: while the emergency card is open, to show you the address, and when you go off your planned route while travelling, to recalculate the route (section 5).
3. Data on your device
Whatever you create in the app is stored on your device: trips with stops and travel dates, packing lists and checklists, fellow travellers (name and whether adult, child, baby, dog or cat), your vehicle with its dimensions and, if you enter it, your number plate, your home town, saved places, bookings, the meal plan, your own recipes, the phrases you have translated and saved yourself in the Phrasebook, and your settings. Weather forecasts, routes, campsites and fuel prices are also stored on the device so they’re available on the road without a connection.
The app reads booking confirmations (text, link or PDF) on the device to detect the type, booking number, dates and address. The spirit level reads the motion sensor on the device only.
The app only asks for the camera for the AR view of the Leir 50 (AR Quick Look), which lets you place the kitchen at full size in your boot. The camera image stays on the device, and the app neither stores nor sends it. You can change this permission in iOS Settings under “Rauholm”, “Camera”.
The app syncs your own phrases from the Phrasebook only via your iCloud (section 4). It does not share them with others, not even in shared trips.
The app does not send any of this to us. Under Settings, “Reset all data” deletes everything on the device and in your iCloud, and therefore also on your other devices. An account with the sync service and trips you shared remain. Delete your account first for those (section 10). If you only delete the app, the data on the device is gone, but the copy in your iCloud remains.
4. Sync via iCloud
If you are signed in to iCloud on your device, the app syncs your data between your own devices with the same Apple Account using Apple CloudKit. The data is stored in the private database of your iCloud account. Only you have access to it, plus Apple as the provider of iCloud. We have no access. Campsites are not synced, each device downloads them itself.
So that new data from your other devices arrives, Apple may briefly wake the app in the background with an invisible notification. These notifications come from Apple, not from us. iCloud is subject to Apple’s terms and Apple’s privacy policy. You can turn off syncing in the iOS Settings under your name and “iCloud”.
5. Location
The app asks for your location in three places, always only with the permission “While Using the App”: on the home screen, in the list “On the way to …” and on the emergency card. On a leg you are currently travelling, the home screen asks when it shows the sketch of your route and the “Near you” card. The card names the next places ahead on the leg, for example to stay overnight or empty the tanks, plus a much closer place behind you if there is one. Without a current leg, that is on arrival, after the trip and with no trip at all, the “Near you” card shows what lies within 25 km of your location (emptying tanks, water, overnight stays, dog walks, fuel and charging), with the straight-line distance from your location. There the app never asks for your location on its own: only your tap on a button on the card (“What’s nearby?”, on arrival “Use where you are instead”) makes iOS ask, and the app locates you for this only while the home screen is open, never in the background. The calculation happens on the iPhone and your location is not stored. Without permission, the card works from the stop on arrival. Within 10 km of your home town the card stays closed, but with permission the app keeps locating you so that the card appears as soon as you set off. The list “On the way to …” shows the places between two stops, also as a map. The route sketch, the “Near you” card and the list place your location on the route and work out how far it still is to the stop and to each place along the way. They locate you to about 100 metres and only while the route sketch, the “Near you” card or the list is on screen, and at home the home screen keeps locating you even while the card is closed, never in the background. Your location stays in the device’s memory and is not stored. It never reaches us and is only sent anywhere in the two cases below. Without permission, the home screen estimates your position from the time of day. The app requests street view for the places in “Near you” and, while travelling, in the “On the way to …” list from Apple Maps, and the coordinates of these places roughly show your area (section 6).
If your location is more than 5 km away from the planned leg in two readings in a row, you have probably gone off your planned route. The app then sends your location as the starting point to Apple Maps (MapKit, section 6) and asks for the route from there to the next stop. This only happens while the list “On the way to …” is open or the “Near you” card is on the home screen, and at most every 3 minutes. The app then downloads the campsite tiles along this new route from data.rauholm.com, without any identifier (section 7). As with every tile, our server sees your IP address and which tiles are loaded, and therefore roughly the area. We never receive your location itself, it is not stored, and the new route only stays in memory while the list is open or the card is on screen.
When you tap the emergency call box at a stop or on a country page, the emergency card opens. While it is open, the app locates you as precisely as possible, never in the background. So that the card can show the address of where you are, the app sends your device’s coordinates to Apple Maps (MapKit, section 6) and gets the address back. Without a location fix, it sends the coordinates of the current stop instead. This only happens while the emergency card is open, and again only once you have moved about 50 metres. Neither your location nor the address is stored, and none of it reaches us. The address, coordinates and an Apple Maps link only leave the card when you copy or share them yourself, and when sharing via the iOS share sheet to the destination you choose there.
The app accesses your location, including on the emergency card for the address lookup and when recalculating the route with Apple Maps, only with your consent via the iOS dialog (Section 25 (1) German TDDDG, Art. 6 (1)(a) GDPR). You can change this at any time in the iOS Settings under “Privacy & Security”, “Location Services”, “Rauholm”.
6. Maps, routes and weather from Apple
For searching places and suggestions while you type, routes between your stops, map snapshots, street view (Look Around) on place pages and places near your stops, the app uses Apple Maps (MapKit). For weather forecasts and severe weather alerts at your stops, it uses Apple Weather (WeatherKit). Your search terms and the coordinates of your stops, your starting point and your home town are sent to Apple, as well as the coordinates of the places you view on a place page, along with your IP address as with any connection. The app does not send your own location for this. The app also requests street view for places in lists that you see (saved places in the saved list and in the “Saved” strip, places at a stop, “On the way to …” and “Near you”), without you opening the place page. For this too, only the coordinates of these places are sent to Apple, with your IP address as above, but without the app sending any identifier for you or your device. Because “Near you” and, while travelling, the “On the way to …” list show the places around your location, Apple can roughly infer where you are. There are two exceptions (section 5): the open emergency card asks Apple Maps for the address where you are, using your device’s coordinates. And when you go off your planned route while travelling, the app asks Apple Maps for the route from your location to the next stop.
The app translates your own phrases in the Phrasebook with Apple’s on-device translation (Translation). The text you type does not leave the device. If the language pack for a language is missing, iOS asks you first and then downloads it from Apple.
Weather data is provided by Apple Weather. For alerts, the app names the source, such as the national weather service, and links to it. Only you open that link, with a tap.
The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple’s privacy policy applies. The legal basis is our legitimate interest in providing the features you use in the app (Art. 6 (1)(f) GDPR).
7. Content from rauholm.com
The app downloads new recipes, recipe images and country information from rauholm.com and data.rauholm.com. It downloads the phrases for the Phrasebook and the list of languages spoken in each country from data.rauholm.com. It downloads campsites and fuel stations from data.rauholm.com in tiles of about one degree of longitude and latitude, for the area around your stops and along your route. When the “Near you” card shows places around your location, that is on arrival, after the trip or without a trip, the app downloads the tiles around your location whenever you enter a new tile, even if it is far from your stops and route. The tiles follow a 1° grid, so the server only sees this coarse grid of where you are, without any identifier. The app keeps the keys of these tiles (such as 47_8, never your location) for 14 days on your device only, so that storage management does not clear the tiles at launch. If you go off your planned route while travelling, it also downloads the tiles along the recalculated route (section 5). As with any website visit, the server sees your IP address, the time, the file requested (and therefore roughly the area for which campsites are loaded) and technical details such as the iOS version. The app does not send an account or any identifier.
The app downloads current fuel prices for fuel stations in France, Italy and Spain from our price service at sync.rauholm.com, and only for the tile of about one degree of longitude and latitude in which the fuel station lies. It does so only for fuel stations on your current leg and near your location or your current stop, also without a trip, and only while the “Near you” card on the home screen or the page of a fuel station is open: for fuel stations you are looking at, at most every 15 minutes, for the rest of a current leg at most once an hour. As with any request, the service sees your IP address, the time, the tile (and therefore roughly the area) and technical details such as the iOS version. The app does not send a location, an account or any identifier, and our service does not store the requests. Our server fetches the prices themselves from the official bodies in France, Italy and Spain, which learn nothing about the app. The app keeps the most recently downloaded prices with their timestamp on your device for at most four days, so they are available without a connection.
The servers are operated for us by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare Pages, and Cloudflare Workers for the price service), just like the website. Cloudflare is certified under the EU-US Data Privacy Framework, and we have a data processing agreement with Cloudflare under Art. 28 GDPR. Log files are usually deleted after 14 days at the latest. The legal basis is our legitimate interest in an up-to-date app and secure operation (Art. 6 (1)(f) GDPR). Cloudflare’s privacy policy: www.cloudflare.com/privacypolicy.
Data on campsites and fuel stations comes from OpenStreetMap, © OpenStreetMap contributors, licensed under the ODbL. Fuel stations, fuels and fuel prices come in France from prix-carburants.gouv.fr (Ministère de l’Économie), licensed under the Licence Ouverte 2.0, in Italy from Osservaprezzi Carburanti (Ministero delle Imprese e del Made in Italy, MIMIT), licensed under the IODL 2.0, and in Spain from the Geoportal Gasolineras (Ministerio para la Transición Ecológica y el Reto Demográfico, MITECO), reused under Ley 37/2007.
8. Images and info for saved places
When you save a place, the app automatically looks for a photo and a short description until it has succeeded once. To do this, it asks Wikipedia for articles within 300 metres of the place’s coordinates and compares the names on the device. For a matching article, it loads the summary and the photo with its licence details from Wikipedia and Wikimedia Commons. If the place has a website, the app opens it to load a preview image. The Wikimedia Foundation, Inc. (USA) sees the coordinates of the place, the articles found and your IP address, and the operator of the website sees the request and your IP address. With Wikimedia, data is transferred to the USA. What the app finds is stored on the device so it’s available offline.
The legal basis is our legitimate interest in showing you images and information about your saved places (Art. 6 (1)(f) GDPR). The Wikimedia Foundation privacy policy applies.
9. Share extension and widgets
Using the share sheet, you can send links, text and PDFs from other apps to Rauholm, for example from Apple Maps, Google Maps, Instagram, TikTok or a website. The extension stores them in a folder on your device that the app and extension share (App Group), and the app picks them up the next time you open it. For a preview, the extension loads the title and image of the shared page directly from its server and resolves short links. If the link is not a map link, the extension also loads the shared page once without cookies and reads the name and location of the place from it. For park4night, it loads the place page at park4night.com/en/place/ with the number of the place. It does not take any images from the campsite platforms park4night, Campercontact, PiNCAMP and stellplatz.info. In each case, the operator of the page sees your IP address. The extension looks up places via Apple Maps (section 6) and detects bookings on the device. Nothing is sent to us.
The widgets show your current trip from the same folder on your device. The cooking timer appears as a Live Activity on the Lock Screen.
10. Plan together
If you share a trip with fellow travellers, it is stored on our sync service sync.rauholm.com so everyone sees the same thing. This is optional. Without sharing, everything stays on your device and in your iCloud.
Sign in with Apple
To share, you sign in with “Sign in with Apple”. Apple confirms an identifier to us that only applies to our app and, the first time, gives us your first name if you choose to share it. We do not request your email address. The service gives you a session that is valid for 90 days. The app keeps it in the keychain on this device only.
What is stored on the server
For each shared trip: destination, travel dates and starting point, the stops with names and locations, packing lists and checklists, fellow travellers (name and type), saved places and ideas for stops, bookings (type, title, booking number, dates, address, text, link and note) and the meal plan. In addition, the members with their identifier, first name and joining date, and a list of recent changes with the identifier of the person who made them. Images and PDFs stay on your device. All members of a trip see its content and each other’s first names. Please only share details about other people, such as names of fellow travellers or bookings, if they agree.
An invitation link works once and for 30 days at most. Anyone who opens it sees the destination, travel dates and the first name of the person who sent the invitation in advance. If someone opens the link without the app, sync.rauholm.com shows a page pointing to the App Store. The server sees the IP address and the invitation code.
Deletion
Whoever shared a trip can delete it, remove fellow travellers and withdraw open invitations. Fellow travellers can leave a trip. In Settings under “Plan together” you delete your account: trips you shared are then deleted on the server, and you leave trips shared by others. What you added to other people’s trips stays there. Of deleted trips, only a deletion marker with the identifier of the trip and of the person who shared it remains, so older devices don’t bring it back. Everything stays on your device. To also end Sign in with Apple for Rauholm, go to the iOS Settings under your name, “Sign in with Apple”.
Provider and legal basis
The sync service is operated for us by Cloudflare, Inc. (Cloudflare Workers), with the details given in section 7. Data may also be processed in data centres outside the EU, for example in the USA. The legal basis is Art. 6 (1)(b) GDPR, because you want to use this feature. The content is kept until the trip or your account is deleted. The server’s log files are handled as described in section 7.
11. Waitlist for the Leir 50
In the app, you can join the waitlist for the Rauholm Leir 50 Camp Kitchen with your email address. The app sends the address directly to our newsletter service Klaviyo, with the source “Rauholm App” so we can see you came via the app. You then receive an email with a confirmation link (double opt-in), and only then is the sign-up effective. Klaviyo stores the time and IP address of the sign-up and the confirmation. The app only remembers that you signed up, not the address.
The legal basis is your consent (Art. 6 (1)(a) GDPR). You can withdraw it at any time with effect for the future, via the unsubscribe link in every email or by sending us a message. The emails contain a tracking pixel that records whether and when an email was opened and which links were clicked. This is also based on your consent and ends when you withdraw it. After you withdraw, your address is removed from the list unless statutory retention obligations apply.
The provider is Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo is certified under the EU-US Data Privacy Framework, and we have a data processing agreement with Klaviyo under Art. 28 GDPR. More in section 4 of the website privacy policy and at Klaviyo.
12. Notifications and cooking timer
The cooking timer alerts you with a notification or, from iOS 26, as an alarm (AlarmKit), and shows the remaining time as a Live Activity. The app asks for permission first. Everything is scheduled on the device, nothing is sent to us. We don’t send advertising notifications. You can change the permission in the iOS Settings under “Notifications” and “Alarms”.
13. No tracking, no ads
The app contains no ads, no analytics or tracking services and no third-party software. It doesn’t ask for the advertising identifier and doesn’t track you across apps and websites of other companies. If you agreed in iOS to share analytics with app developers, Apple provides us with aggregated statistics and crash reports without names or contact details.
14. Report a problem
In Settings you find “Report a problem”. Only after you tap “Continue” does your mail app open with a message to hallo@rauholm.com. It contains the text you write, the app version with build, the device model, the iOS version and the language. If you want, the latest crash and hang reports that Apple MetricKit delivers to your device are added. The switch for this is on by default when a report exists. A report contains the call stack, meaning which parts of the app ran last, but no location, no trips and no photos. The app keeps the latest reports (at most 5, at most 7 days old) in the device’s cache and deletes older ones.
The app sends nothing by itself, there is no analytics SDK and no server of our own for these reports. You see the email before it is sent and can delete anything. When you send it, we see your sender address. We process your details to handle your request as described in section 5 of the website privacy policy.
15. Your rights
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
16. Data security
All of the app’s connections are encrypted via HTTPS. The session with the sync service is kept in the keychain and on this device only.
17. Changes
We update this privacy policy when the app changes. The version published on this page applies.