Privacy Policy
1. Who controls your data
The data controller is Zorbano s.r.o., company ID (IČO) 09257730, registered at Martinská čtvrť 1702, 744 01 Frenštát pod Radhoštěm, Czech Republic (“we”). Contact for anything privacy-related: info@corfuse.com. We have not appointed a data protection officer — the legal obligation does not apply to us.
This policy covers the fixcast.corfuse.com web portal and the Fixcast mobile app.
2. Core principle: your precise location never leaves your device
Fixcast is designed to keep your location private. The mobile app sends our servers at most a coarse area — an H3 hexagonal cell roughly 5 km across. Precise coordinates are never transmitted to us. Aggregate maps additionally show a cell only once at least 5 distinct devices have measured in it (k-anonymity). The only exception is your explicit opt-in when reporting a problem to a network operator (section 5).
3. Web portal
The portal uses only strictly necessary cookies: the language choice
(lang) and, after sign-in, an encrypted session. We use no analytics,
marketing, or third-party tracking tools — which is why there is no cookie banner.
Map tiles are provided by OpenStreetMap: when a map is shown, your browser fetches tiles directly from the OpenStreetMap Foundation's servers, which processes your IP address under its own policy. No other third parties are loaded in the browser.
Server logs (IP address, time, requested URL) are kept short-term for security and operational troubleshooting (legitimate interest).
4. Mobile app
- Device registration is anonymous. The app receives a random identifier — no name, e-mail, or phone identifiers. It is used only to count distinct devices (k-anonymity) and to prevent abuse.
- Stream quality checks carry technical metrics (connection status, data rate, gaps, RTCM message statistics, optionally the ROTI ionospheric index), the network type (Wi-Fi / cellular, without identifying your carrier), and the coarse H3 area (~5 km).
- NTRIP caster credentials are entered in the app and stay stored on your device only — they are never sent to our servers.
5. Reporting a problem and live support to a network operator
When you submit a stream problem report in the app, we forward it by e-mail to the operator of the relevant correction network. The report contains the problem category, your note, the coarse area (~5 km), and — if you attach it — your caster username so the operator can find you in their records. By ticking the checkbox you may additionally share your precise location and the stream's technical diagnostics; these are passed to the operator only and are not stored on our servers.
An operator may also offer you live remote support. You start a session in the app and read a six-digit code to the operator; for the duration of the session, decoded stream diagnostics and your location are relayed live to the operator — approximate (~1 km) by default, and you share your precise location only with an explicit opt-in. The relay lasts only while the session is active and is not stored on our servers. We keep only a record of the session itself (when it took place, on which caster, and how long it lasted) for the operator and for billing. Either side can end the session at any time.
6. Network operator accounts
For correction network operators we process account data (sign-in name and e-mail in our own self-hosted identity system), the operator name, the contact e-mail for report delivery, the preferred language, and the list of casters — for the lifetime of the account, on the basis of providing the service.
We also process the subscription plan and usage metrics (counts of delivered reports and remote-support sessions per period) for billing and service provision. This is operator account-level data, not end-user personal data.
7. E-mail reports and communication
If you enable planner e-mail reports, we process your e-mail address, the coordinates of the chosen place, and the sending hour — until you cancel the subscription. If you write to info@corfuse.com, we process your address and the message content to handle your request.
Data from the contact / interest form (once launched) will be processed on the basis of consent — until withdrawn, at most 24 months after your last activity. Product news will be sent only with a separate consent, revocable at any time.
8. Legal bases
We process data on the bases of: providing the service (Art. 6(1)(b) GDPR — accounts, reports, e-mail subscriptions), legitimate interest (Art. 6(1)(f) — security, server logs, abuse prevention), and consent (Art. 6(1)(a) — precise location in reports and in remote support, the contact form, news).
9. Recipients and transfers
The service runs on the controller's own infrastructure in the European Union — including the identity system and the e-mail server. We do not share data with external processors or transfer it outside the EU. Exceptions: the correction network operator receives the content of your report and the data relayed live during remote support (section 5), and when loading maps your browser or app talks directly to the OpenStreetMap Foundation (section 3). Anonymous aggregates (k-anonymity ≥ 5 devices) are not personal data.
10. Your rights
You have the right to access your data, to rectification and erasure, to restriction of processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting prior processing). Send requests to info@corfuse.com. You may also lodge a complaint with the supervisory authority — the Czech Office for Personal Data Protection (uoou.gov.cz).
11. Changes
The current version of this policy is published on this page; registered users will be notified of material changes in advance.