Rana Maps is published by EL-Joy Technologies, Epe, Lagos, Nigeria. This policy explains what information we use when you use the Rana Maps app, this website, or a Rana service.
Using this website
This website does not use cookies, analytics, advertising pixels or tracking scripts. Cloudflare processes requests so it can deliver and protect the site. A request can include technical details such as your IP address, the page requested, the time of the request and browser headers. This website does not currently have a contact or sign-up form.
Using the map and directions
You can browse the app without an account. If you allow location access, the app uses your location while you use the map to show where you are and provide directions. A route request sends its start and end points to Rana's route service. As you move around the map, the map service receives requests for the areas you view.
Recording a trip
A trip starts only after you tap a recording action. While recording, the app collects precise GPS points and available phone sensor summaries, which can include steps, movement, pressure, light, signal strength and network type. It also records the phone model and Android version with the trip. A visible location service runs until you stop recording; a trip you started may continue while the screen is off. The app does not start a trip automatically or in the background.
The recording and its files stay on your phone until you review and send them. When you send them, the API stores the raw trip and decoded trace for review. The current code does not automatically delete raw trips. You can request deletion in the app or use the delete my data page.
Contributor identity
Joining creates one contributor record for this app on this phone. The app sends a one-way hash of Android's app-scoped device ID so a reinstall can recover the same contributor. It does not send the raw Android ID. At registration, the API stores a keyed hash of the internet address it receives to limit abuse. Suggestions also include a keyed IP hash for abuse checks. These hashes support account recovery and security, not advertising.
The server assigns or stores a display name. By default, the public leaderboard shows that name with points, rank and badges. You can hide the name in contributor settings. Contributor routes are not shown on the leaderboard.
The API can accept an optional Google Play Integrity token during registration. The Android app in this release does not request or send that token.
Suggestions, photos and voice notes
When you submit them, street names, place fixes, new places and their locations go to Rana for review. They stay private until approved. Road trouble reports stay on the phone in this release. Only road and footpath corrections may be shared with OpenStreetMap after review; the current code does not publish them there automatically. Places, street names, gates, stops, photos, voice notes and other collected facts stay in Rana's private layers.
Trip photos are checked and blurred on the phone before the preview can be saved. Face and text detection can miss something, so check the preview and delete a photo if it still shows a person or readable number plate. Voice notes are stored with the trip at the place where recording started. They can capture nearby sounds or voices. The retention job removes voice files after the transcript has been marked checked and the configured retention period has passed. That period defaults to 90 days. If a transcript is never marked checked, the code sets no automatic deletion date for its audio. Contributor deletion also removes linked trip media and suggestion photos from the server.
Google services
CameraX handles camera capture. Face and text detection use ML Kit models supplied by Google Play services. The image processing happens on your phone; the app's redaction flow does not send photo bytes to Google. Google Play services downloads and updates the models. The app uses Google Play for installation. This release does not include Google Analytics, advertising SDKs, crash reporting or a Play Integrity client.
Business enquiries and API customers
The website does not currently collect enquiries through a form. If you contact us through a channel we make available, we use the contact details and information you choose to provide to respond to your enquiry. If a business API or SDK account is made available, we may process customer contact and account details, API keys or key identifiers, and service usage logs to provide, secure and support the service. Billing records will be needed only if paid plans are introduced. API pricing and billing are not available yet.
Service providers and transfers
The current deployment plan places the API, database, review service and trip files on a server in Europe, with Cloudflare in front of the service. Map assets are planned for Cloudflare's services. This means information may be processed in Europe. Service providers process requests to provide and protect Rana Maps. We will confirm the live providers and transfer safeguards before production use and update this policy if the arrangement changes.
Retention and deletion
The current API code has no automatic expiry for raw trip sessions or decoded traces. The voice retention job deletes voice files only when a transcript has been checked and the configured number of days has passed; the default is 90 days. Unchecked audio has no automatic deletion schedule in the current code. No code-defined expiry is set for other contributor records or service logs. The hosting provider's log and backup retention periods must be confirmed separately.
When contributor deletion succeeds, the server removes the contributor's name, device hash and active key, linked pending submissions, trip traces and media, and contributor photos. Approved map facts remain without a link to the contributor. The append-only points ledger and an anonymised contributor row remain for award history. Deletion cannot remove local recordings from another phone or copies made outside Rana's systems. See how to request deletion.
Your rights
Under the Nigeria Data Protection Act 2023, you may ask to access or correct your personal data, request deletion, object to processing, and complain to the Nigeria Data Protection Commission (NDPC). The Act also gives data subjects other rights. Contact us using the details at the top of this page to make a request. You can read the Nigeria Data Protection Act 2023 on the NDPC website.
Children
You must be 18 or older to join as a contributor. Do not submit personal information about a child through a contribution.
This policy is a draft pending legal review. We will update it when the production providers, retention settings and contact details are confirmed.