EirRoute — Privacy Notice

Last updated: 29 October 2026

This notice explains how the EirRoute iOS app (version 1.0 and later) handles personal data. EirRoute works in the Republic of Ireland only (the 26 counties). Northern Ireland is not supported.

1. Who we are

Eman Curmi, trading as Orpyxis Technologies ("Orpyxis", "we", "us") is the data controller for the personal data described in this notice.

• Address: 42, Triq it-Tin, Sannat SNT1443, Gozo, Malta
• Contact: [email protected]

We haven't appointed a Data Protection Officer. Please send privacy questions to the address above. They go directly to the company owner.

If you use EirRoute for an employer or depot: where a business uses EirRoute to manage its own delivery data (for example recipients' names and addresses), that business is the controller for that data. Please contact it first; we'll help it handle your request.

2. The EirRoute plans

The iOS app has two plans:

• Free: our own map, routing and eircode lookup, with up to 10 stops per route.
• EirRoute Plus: a one-time in-app purchase through Apple. It removes the 10-stop limit, shows a Google map, and uses Google for routes and stop search with your own (or your depot's) Google Maps Platform API key.

Label scanning is available where offered on your plan (section 6).

Which providers receive data depends on your plan, as explained below.

3. What data EirRoute processes

EirRoute has no user accounts with us, and the app contains no analytics, advertising or tracking SDKs. We don't sell personal data, and we don't make decisions with legal or similarly significant effects about you based solely on automated processing. We don't knowingly collect data from children.

4. Free plan: our map, routing and eircode lookup

On the Free plan, EirRoute gets map tiles from our own servers (maps.orpyxis.com), calculates routes on our own routing servers, searches places on our own search service, and looks up eircodes with our own lookup service (geocode.orpyxis.com). These run on our own servers in Ireland, behind Cloudflare, and are built from OpenStreetMap data. The app sends us the map area you're viewing and your route points (start, stops and destination, as coordinates, eircodes or addresses), plus technical data such as IP address and app version. We use this only to serve maps, find addresses and calculate routes, and to keep the service secure. OpenStreetMap itself doesn't receive your data from us.

Eircode lookups and Google. When our lookup service doesn't already know an eircode, our server may look it up with Google Geocoding, using an Orpyxis-owned server key. Only the eircode is sent; no names, phone numbers, recipient details, order IDs or notes. We keep coordinates received from Google for at most 30 days, then remove them and fetch again only when needed. Google place IDs, the eircodes themselves and our own manual pin corrections are kept indefinitely.

Apple map view. The Free map is shown inside Apple's map view (Apple MapKit). When Apple map content is shown, your device requests it from Apple. Apple receives the map area being viewed and standard device and request data, and handles it under its own privacy policy (https://www.apple.com/legal/privacy/). We don't send Apple your route stops, names or delivery details.

5. EirRoute Plus: Google Maps

With Plus, the map is always a Google map. Two Google keys are involved:

• The Google map is loaded with our own Google Maps Platform key (Maps SDK for iOS), built into the app. Your key is never used to load the map.
• Google routes and Google stop search use your own (or your depot's) Google Maps Platform API key.

What goes to Google, directly from your device:

• map and device data from Google's map software (the map area you view, how you use the map, IP address, device and OS type, app and SDK version, request metadata, crash data and SDK identifiers);
• your Google API key, sent only with your route and search requests;
• route waypoints (coordinates of your start, stops and destination) when you ask for a Google route;
• stop search queries and eircodes you look up, and the place you pick;
• your device location, if you've allowed it and a Google feature needs it.

These requests go from your device straight to Google, not through our servers.

What isn't sent to Google: your name, email or phone number, delivery recipients' names or phone numbers, order IDs or notes.

Your key is never sent to or stored on our servers. It's kept in your iPhone's Keychain, on this device only, until you delete it.

Google is an independent controller and processes this data under the Google Privacy Policy (https://policies.google.com/privacy) and the Google Maps End User Additional Terms of Service (https://maps.google.com/help/terms_maps/). Navigate in Google Maps opens Google's own app with your destination, under your own relationship with Google.

6. Label scanning

Label scanning (where available on your plan) lets you photograph a parcel label so EirRoute can read the stop details. This is an Orpyxis service.

• What it processes: the label photo and the text read from it (typically recipient name, address, phone number and order or tracking reference).
• Where it runs: the image is sent to our own server (geocode.orpyxis.com, hosted in Ireland behind Cloudflare), where our own text-recognition software reads it and returns the text to your device.
• Nothing is stored: the image is held in memory only and never written to disk or a database. The text isn't stored or logged on our server.
• Camera access is used only when you start a scan, with your permission.

7. Location and what stays on your device

EirRoute uses your device's location only with your permission. You can change or withdraw it at any time in iOS Settings → EirRoute → Location (and Live Activities under Settings → EirRoute if you use the Dynamic Island). Republic of Ireland only.

Permission levels

• While Using the App: we use your position to show you on the route map, to detect arrival at a stop while EirRoute is open, and (if you choose) as the depot/start for an optimised route.
• Always: needed only so EirRoute can watch geofence regions around your next delivery stop (and up to eight nearby stops) while you are navigating in Apple Maps or Google Maps and EirRoute is in the background. When you enter a region, the app can mark arrival on the device and update the Dynamic Island / Live Activity (for example Arrived, with Delivered / Collected / Failed / Not yet) without switching back to EirRoute. If you refuse Always, map and routing still work; background arrival and Island updates while Maps is open will not.

What Always is not. EirRoute does not keep a continuous background GPS trail for Always. It uses iOS region monitoring (geofencing) around stop coordinates already on your route (about 100 metres). It does not send your live driver position from geofencing to Orpyxis servers, and it is not used for advertising, analytics SDKs or performance scoring.

What may leave the device (unchanged from sections 4–5). When you ask for a map, route or eircode lookup, Free-plan requests go to our Ireland servers and Plus Google features go straight to Google; those requests may include your device location if you have allowed it and the feature needs it. Opening Navigate in Google Maps or Apple Maps starts that maps app under your own relationship with Google or Apple.

Stored on your device: your routes, stops and delivery details; temporary geofence “watch” data for the current next stop (and pass-by stops); your route history and route learning data (planned stops with Eircodes, coordinates and address hints, ETAs, your driver actions, and delivery times and outcomes), each limited to the most recent 40 runs, with older runs removed automatically. "Clear all" in History deletes all saved runs and all route learning, including a route in progress, and deleting the app removes them too. Route learning is never sent to Orpyxis or anyone else on the App Store build; you can choose to export a run's data from History and share it yourself; your Google API key, if entered, in the Keychain; and, from Google, only place IDs and route coordinates (route coordinates deleted after 30 days at most). The iOS app offers no offline map downloads, and no Google content is kept offline or included in route history or exports.

How to turn location features off. Set Location to Never or While Using in iOS Settings (Always is required only for background geofence / Island arrival). End or disable Live Activities for EirRoute if you do not want the Island. Completing or clearing a run stops the active geofences.

8. Who we share data with

• Apple: App Store purchases, refunds and app distribution, and the Apple map view (Apple acts as an independent controller).
• Google: as described in sections 4 and 5 (independent controller).
• Hosting: our own servers in Ireland (EU), protected by Cloudflare (US), which carries traffic to our servers.
• Email: we handle support email through Google Gmail (US).
• Professional advisers (accountants, lawyers), under confidentiality; authorities, where the law requires it; and a buyer if our business, or part of it, is sold or reorganised.

9. International transfers

Our servers are in Ireland (EU). Some data is processed outside the EEA:

• Cloudflare (US) handles traffic to our servers;
• Google may process the data in sections 4 and 5, and our support email, in the US and other countries;
• Apple may process purchase and map data in the US and other countries.

Where data leaves the EEA, it is protected by the EU-US Data Privacy Framework (an EU adequacy decision) where the provider is certified under it, and/or Standard Contractual Clauses approved by the European Commission. Ask us for details at [email protected].

10. Why we use data and our legal basis

Where we rely on legitimate interests, you can object at any time (section 12).

11. How long we keep data

12. Your rights

Under the GDPR, you have the right to access, correct and delete your personal data, to restrict or object to processing, to data portability, to withdraw consent where we rely on it, and to complain to a supervisory authority.

Email [email protected] to make a request. We'll reply within one month and may need to verify your identity first. Most EirRoute data is held only on your device, so you can view and delete it yourself in the app.

Complaints: Malta's supervisory authority is the Information and Data Protection Commissioner (IDPC), idpc.org.mt. In Ireland, it's the Data Protection Commission (dataprotection.ie). If you live elsewhere in the EU, you can also complain to your local authority. We'd appreciate the chance to sort things out with you first.

13. Security

We use reasonable technical and organisational measures to protect data, including encryption in transit, access controls and keeping our systems up to date. No system is completely secure. If a personal data breach is likely to put you at risk, we'll notify you and the IDPC as the law requires.

14. Changes

We may update this notice from time to time. We'll post the new version here with an updated date, and tell you about significant changes in the app.

15. Contact

Eman Curmi, trading as Orpyxis Technologies 42, Triq it-Tin, Sannat SNT1443, Gozo, Malta Email: [email protected]