Privacy Policy

App: online.kordon.app · Last updated: 19 October 2026

This policy describes what data the Kordon Online app for Android and iPhone collects, how we use and protect it. It is written to match what the app does and our App Store and Google Play privacy declarations.

1. Data we collect and store on our servers

• Precise geolocation — only with your permission. It is used to find the nearest checkpoint, build a route to the border, show services (fuel, parking, ATMs) around you and, if you start trip recording, to record the GPS track of your trip. Routes and recorded tracks are stored on our servers.
• Content you submit — photos and text you send in queue reports, checkpoint reviews and the assistant chat.
• Voice input (optional) — if you tap the microphone button, your speech is turned into text by your phone's built-in speech recogniser (on Android the system speech recogniser, on iPhone Apple's speech recognition), which may process the audio under Google's or Apple's privacy policy. Only the resulting text is sent to us, as a question to the assistant; the audio is never sent to our servers. The microphone is not used at any other time.
• Answers read aloud (optional) — assistant answers are read aloud by your phone's own text-to-speech. For answers in Ukrainian and Russian the app uses our natural voices by default: the text of the answer is sent to our own server, which turns it into speech with a voice model we host ourselves (no third party is involved) and returns the audio. You can switch natural voices off (phone voice only) or turn off reading answers aloud in the app settings.
• Anonymous device identifier and push token — the app generates a random identifier (it is not a hardware or advertising ID) and registers a push-notification token (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android) so we can deliver the queue alerts you subscribe to.
• Usage analytics — screens viewed and taps, to understand which features are useful. They are linked to the random device identifier described above, never to your name, phone number or advertising ID. The app has no setting to turn analytics off; you can ask us to delete this data at any time (see section 4).

Permissions. The app requests Internet and network state access and — only when you use a feature that needs it — location (approximate and precise) for the location features described above, the microphone (and, on iPhone, speech recognition) for voice input only, and notifications for the queue alerts you subscribe to. A photo is added to a queue report or review only when you pick it yourself in the system photo picker; the app does not read the rest of your photo library. On iPhone the app also asks for permission to use the advertising identifier (App Tracking Transparency); you can decline and the app works the same. The app does not request access to your camera, contacts or phone calls.

2. How we use the data

For app functionality, for improving the service (analytics) and, through our advertising providers, for showing and measuring ads (see section 3). We do not sell data and do not share it with data brokers.

3. Third-party services

Push notifications are delivered via the Apple Push Notification service and Firebase Cloud Messaging (delivery only). Queue data is collected from the open official sources listed above.

Advertising. The app shows one ad, labelled "Ad", on the home screen. Ads are delivered through the Google Mobile Ads SDK, either by Google AdMob (Google Ireland Limited) or by our advertising partner Ad.Plus through Google Ad Manager; Google and Ad.Plus's demand partners act as independent providers under their own privacy policies. Our own random device identifier and your Kordon profile are never shared with advertisers. Google may collect your device's advertising identifier, IP address (approximate location), information about the ads you see and tap, and diagnostic data to show and measure ads and to prevent fraud — see How Google uses information from apps that use its services. In the EEA, the UK and Switzerland we ask for your consent first through Google's consent form; on iPhone we also ask for permission to track (App Tracking Transparency). If you do not consent, you may still see ads that are not personalised.

The in-app AI assistant answers questions about border queues and checkpoints. The app contains no AI model of its own: your question goes to our server, which looks up the relevant facts in our own database and then calls a third-party large language model (LLM) API to phrase the answer in your language. Answers are labelled as AI-generated and may contain mistakes.

• Sent to the LLM provider: the text of your question, the checkpoint or country already mentioned in the conversation, your interface language and, for questions asked by voice or in the assistant, a short summary of what is on your screen (the border or checkpoints currently shown and, if a route is active, a summary of that route), together with factual context from our own database (queue lengths, waiting times, checkpoint details). Your approximate location is added only when the question needs it (for example, a question about the nearest checkpoint) and only if you have granted the location permission.
• Never sent to the LLM provider: your name, e-mail, account credentials, phone number, device or advertising identifiers, your IP address (the request is made by our server, not by your device), push tokens, contacts, photos or payment data.
• Providers: Groq, Inc. (api.groq.com); as fallbacks Mistral AI SAS (api.mistral.ai) and Google (Gemini API); as a last resort a model hosted on our own servers. They process the request only to return the answer, under their API terms, and we have not enabled any option that would let them use it for model training.
• What we store: on our own servers we keep the question, the answer, your random install identifier and a timestamp, to monitor answer quality and prevent abuse. This is not linked to your real-world identity, never sold, and not used for advertising or profiling. To have your assistant history deleted, write to [email protected] (see section 4).

4. Your rights and choices

• Request deletion of the data linked to your device identifier: [email protected] or the data deletion page.
• Disable location access or push notifications at any time in your phone settings.
• Change your ad consent at any time in the app: Settings → Ad privacy choices; reset or delete the advertising ID in Android settings, or deny tracking in iPhone Settings → Privacy & Security → Tracking.

5. Changes and contact

We may update this policy; material changes will appear on this page with a new date. Questions: [email protected].