In short
- Your data stays yours. You can view, export and delete it yourself in the app, whenever you want.
- Your trips, addresses and locations stay in the EU and go to no AI model. Two processors outside the EU receive neither, see §7.
- Resi works with rules that run on your phone.
- We never sell data that can be traced back to you. Never.
- Anonymised data is used only to fix faults and to improve Resi.
- The optional things you switch on yourself, in Settings > Privacy.
1. Who is responsible?
- Lake52 B.V.
- Chamber of Commerce (KvK): 42088051
- Address: Prinses Marijkestraat 52, 1077 XD Amsterdam, Netherlands
- E-mail: privacy@lake52.nl
2. What data do we process?
- Account: e-mail address and, optionally, the name, phone number and company details you enter yourself (company name, legal form, chamber of commerce number, VAT id, address, IBAN).
- Trips: automatically or manually recorded trips with route, start and end point, addresses, times, distance, category and purpose.
- Places and parking spots: addresses you save (such as home and work) and parking spots you have taught Resi. You can see and delete them in Settings.
- Vehicles: licence plate, name, odometer readings and paired cars (Bluetooth and CarPlay identifiers as a hash, never in the clear).
- Settings and consents, each with a time and a version.
- Diagnostics: a limited set of technical events, so that faults can be fixed.
3. What for, and on what legal basis?
| Purpose | Legal basis (GDPR) |
|---|---|
| Recording trips and producing reports (PDF, XLSX) | Performance of the contract, Art. 6(1)(b) |
| Automatic trip detection (GPS, motion, Bluetooth and CarPlay) | Performance of the contract |
| Fixing faults, preventing misuse, improving Resi, each with limited diagnostics and anonymised data | Legitimate interest, Art. 6(1)(f) |
| Contributing more: training our detection with your depersonalised trips, research recordings, product analytics | Consent, Art. 6(1)(a). Off by default, withdrawable in the app. |
| AI features | Consent. Off by default, not active today. |
| Measuring whether a Google ad led to a tap on the App Store button on resi.my, using only the click id Google itself adds to the ad link. No cookies, nothing stored on your device, nothing sent for visitors who did not arrive through an ad. | Legitimate interest, Art. 6(1)(f) |
4. How long do we keep your data?
| Data | Period |
|---|---|
| Confirmed trips | Not deleted automatically, because you need them for your own tax retention obligation (7 years in the Netherlands) |
| Trips marked "to review" | 30 days |
| Cancelled trips | 90 days |
| Trash | 7 days |
| Audit log | 365 days |
| Google click id after a tap on the App Store button (website) | 90 days |
| Diagnostics | roughly the 200 most recent events; up to 4,000 if you take part in "Help make Resi smarter" or if you are a tester |
| Everything | Deleted immediately when you delete your account |
5. What we do and do not do with your data
- No selling. Data that can be traced back to you, meaning your trips, addresses, locations and account, is never sold and never used for anything other than Resi itself. There is no setting for it, because we do not offer that choice at all.
- Anonymised, only for Resi. Anonymised and aggregated data is used to resolve faults and incidents and to improve Resi. That data is not sold either.
- You decide the rest. If you want to contribute more, meaning training our detection with your depersonalised trips, research recordings of trips, or anonymous product analytics, you switch it on yourself in Settings > Privacy. It is off by default, declining has no consequences, and withdrawing takes effect immediately for the future. Research recordings stay on your phone until you share one yourself.
- No AI model. Your data goes to no AI model. Any future AI features are opt-in and off by default.
6. Recipients and processors
The full list with the safeguards per processor is our subprocessor register, available on request.
- Google Cloud and Firebase (database, authentication, storage, servers) in
europe-west1(Belgium). - Google Maps Platform (addresses, distances, map images) through our EU servers. Your phone holds no Maps key.
- Apple App Store and Qonversion (subscription and purchase validation). No location or trip data; Qonversion processes in the United Kingdom, see §7.
- Brevo (Sendinblue SAS, France). Sends the e-mails that confirm your address, reset your password, carry a message you send us through the contact form, or offer help when your account stays idle. You can switch that last kind off in the app, under Settings → Notifications. Processes your e-mail address and the content of that e-mail; EU.
- Namecheap (our domain registrar, USA). Delivers e-mail addressed to hallo@resi.my into our mailbox, see §7.
- Sentry (crash reporting, EU). Technical error reports only; coordinates are removed before sending.
- PostHog (product analytics, EU). Only after your opt-in, under a random installation id.
- Google Ads (ad measurement, on resi.my only). We report to Google only the click id Google itself adds to an ad link, and only if you then tap the App Store button. No Google script or cookie on the site, and nothing about who you are.
7. Transfers outside the EU
Your trips, addresses and account data stay in the EU (europe-west1, Belgium). Only these two leave it, and neither carries location or trip data:
- Qonversion (subscriptions) processes in the United Kingdom, a third country covered by an adequacy decision of the European Commission, extended on 19 December 2025 until 27 December 2031. Basis: Art. 45 GDPR. Qonversion receives purchase and subscription data.
- Namecheap delivers e-mail you send to hallo@resi.my through servers in the USA. Basis: the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) in the provider's data processing terms.
> Corrected on 2026-10-04. This said "None.", which was wrong: Qonversion and Namecheap already processed outside the EU. The German version of this statement described it correctly, and a statement that contradicts itself on this point is worse than either half. Where your trips and addresses are stored has not changed: Belgium.
8. Your rights
All of them directly in the app, under Settings > Privacy:
- Access and portability: an export of all your data, including your trips.
- Erasure: your account and everything in it, immediately and permanently.
- Objection and withdrawal: the options for contributing, analytics and AI are yours to switch off.
- Rectification: you edit trips, addresses and your profile yourself.
What the export does not contain is the internal reasoning of our detection, meaning which rules judged a trip. That says something about Resi, not about you. If you have a question about a specific trip, write to us.
9. Right to complain
You can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live in another EU country, you can also go to the authority where you live.
10. Changes
We update this statement when needed. The version and the date are at the top, and privacyVersion is updated in the app.
Which language version applies
This text exists in Dutch, English and German. Each language version is authoritative in its own right for the user who agreed to it.