Skip to content
Get the app

Privacy policy

Privacy Policy and Terms of Use of the APP

Last updated: 10 October 2026.

These Terms of Use govern the use of the MaterMap APP (hereinafter, the “APP”). Downloading or using the APP makes whoever does so a User and implies acceptance of all the conditions included in this document and in the Legal Notice and Cookie Policy of the website matermap.com (matermap.es in Spanish). The User should read these conditions every time they use the APP, as they may be changed in the future. This policy also covers the data we process through the website.

The purpose of this policy is to inform data subjects about the different processing operations carried out by this organisation that affect their personal data, in accordance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

1. Identity and contact details of the controller

The controller (hereinafter, the “Controller”) is the legal person that determines the purposes and means of the processing of personal data. For the purposes of this Privacy Policy and Terms of Use of the APP, the Controller of the personal data is:

  • Name: Matermap, S.L.
  • Registered address: Calle de Don Ramón de la Cruz, 117, esc. 1, 6, 28006 Madrid, Spain.
  • Tax ID (N.I.F.): B-88.401.393.
  • Registered in the Madrid Commercial Registry, volume 39.352, folio 60, sheet M-698.760.
  • Phone: +34 698 901 150.
  • Email: info@matermap.com.

2. What data we process and why

You need an account to use the APP. When you create it and when you use the APP or the website, we process the following data for the purposes stated:

  • Account. Your first and last name (required), your email (optional) and your phone number if you sign in with it, or the data Google or Apple give us if you sign in with their account. We use them to create and manage your account and to identify you when you sign in.
  • Location (optional). Only if you give us permission and only while you use the APP, never in the background. We use it to show you nearby places, the distance and the walking time. We do not store it: to calculate the walking route we send Google your position rounded to about 25 metres.
  • Your activity in the APP. The Mappers you open and their city, your favourites and the Mappers you share. We use them to show you your history and favourites, to calculate your points, level and badges, and to tell you about new Mappers in the cities you have looked at.
  • Reviews. If you post a review, it is shown with your name and level, and anyone can see it in the APP, even without an account. The owner of the Mapper can reply to it publicly.
  • Loyalty programme. Your points balance at each venue and the record of your scans. The venue sees an internal identifier, not your name. To read your code, the APP uses the camera of the venue’s phone and processes it on the phone itself.
  • If you register a Mapper. The venue data published in the APP (name, address, phone, social networks, opening hours, description and photos) and, privately, the tax ID (NIF) and the contact details you give us, which only the MaterMap team can see. We use them to review and publish the Mapper and to contact you about it.
  • Premium. If you buy Premium for a Mapper, Stripe handles the payment and receives your name, email and phone number for charges and invoices. We store the status of the subscription; we never see or store your card details.
  • Notifications. An identifier of your device and your preferences, to send you notifications if you allow them. You can turn them off at any time in your phone’s settings.
  • Statistics and errors. APP usage data (screens you visit and Mappers you open), linked to an identifier of the installation and not to your name, and crash reports linked to your account. We use them to understand how the APP is used, fix errors and improve it.
  • Website contact form. Your name, email, phone number (optional), topic and message, to reply to you. To prevent spam we also record the IP address and browser, and we use Cloudflare Turnstile to check that you are not a robot.
  • Website cookies. The website’s cookies and statistics are explained in the Cookie policy.

The personal data provided by the User, especially their email address, may also be used to send newsletters (newsletters), as well as commercial communications with promotions and/or advertising of the Application, provided that the User has previously given their express consent to receive these communications electronically. We also send Mapper contacts emails about their Mapper and about MaterMap’s services for venues; they can ask us to stop at any time by writing to info@matermap.com.

Please remember that, when we ask you to fill in your personal data to give you access to a feature or service, we will mark some fields as mandatory, as we need that data to provide you with the service or give you access to the feature in question. If you decide not to provide that data, you may not be able to complete your registration as a user or to use those services or features. Location is optional: without it you can use the APP, but it cannot show you the distance or the walking route to places.

3. Legal basis and consent for the processing

We process your data on the following legal bases:

  • Performance of the contract you accept when you use the APP or buy Premium: your account, your activity, reviews, the loyalty programme, Mappers and payments.
  • Your consent: location, notifications, newsletters, the messages you send us through the contact form and the website cookies that are not necessary. You can withdraw it at any time.
  • Our legitimate interest in keeping the APP and the website secure, preventing spam and fraud, understanding how the APP is used and fixing its errors, and informing Mappers about our services for venues.
  • Compliance with legal obligations, such as keeping invoices.

If the User does not provide Matermap with the mandatory data, or does so incorrectly or incompletely, it will not be possible to use the Application.

To use the APP and the website you must be at least 14 years old, the age from which Spanish law allows a person to consent to the processing of their personal data. To register a Mapper or buy Premium you must be of legal age and authorised to act on behalf of the venue.

4. Data retention periods or criteria

We keep your account data for as long as you keep your account. When you delete it, we delete or anonymise your data as explained in “How to delete your account”, at the end of this policy. In addition:

  • The APP’s technical logs are kept for 30 days; crash reports, for 90 days; and backups, for 7 days.
  • Contact form messages, for as long as needed to deal with your request and at most two years.
  • Premium invoices, for as long as the law requires.

Although we process your data only for the time strictly necessary to fulfil the corresponding purpose, we will then keep it duly stored and protected for as long as liabilities arising from the processing could arise, in compliance with the regulations in force at any given time. Once any possible legal actions have lapsed in each case, we will delete the personal data.

5. Recipients

The data will not be disclosed to any third party outside Matermap unless there is a legal obligation or, in any case, after requesting the User’s consent. Matermap may, however, give access to or transfer the personal data provided by the User to third-party service providers with which it has signed data processing agreements, and which access that information only to provide a service on behalf of the controller. These are those providers:

  • Google: Firebase and Google Cloud (accounts, database, files, server functions, notifications, statistics and crash reports), Google Maps Platform (address search and walking routes), Google Cloud Vision (checking Mapper photos), Google Workspace (email) and Google Analytics (website statistics, if you accept them).
  • Apple and Google, if you sign in with their account.
  • Stripe, for Premium payments.
  • Mapbox, to display the map, and Algolia, for search.
  • Mailjet, to send emails.
  • Host-Fusion, the website’s hosting provider, and Cloudflare (Turnstile), to protect the contact form against spam.

Other users also see what you publish: your reviews, with your name and level, and the public data of your Mappers.

Some of these providers are located in, or process data in, the United States. In those cases, the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

6. Security measures

As part of our commitment to guaranteeing the security and confidentiality of your personal data, we inform you that we have adopted the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, in accordance with Article 32 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

7. Rights

We are committed to respecting the confidentiality of your personal data and to guaranteeing the exercise of your rights.

You may at any time exercise the rights listed below by writing to info@matermap.com, stating the reason for your request and the right you wish to exercise.

In particular, regardless of the purpose or legal basis on which we process your data, you have the right to:

  • Be informed in a concise, transparent, intelligible and easily accessible way, in clear and plain language, about the use and processing of your personal data.
  • Ask us for access to the data we hold about you.
  • Ask us to rectify the data we already hold. Please note that, by actively providing us with your personal data by any means, you guarantee that it is true and accurate and undertake to notify us of any change or modification to it. Any loss or damage caused to the APP, to the controller of the APP or to any third party as a result of providing incorrect, inaccurate or incomplete information in the registration forms will be the sole responsibility of the User. Please remember that, as a general rule, you should only provide us with your own personal data, not that of third parties.
  • Ask us to erase your data to the extent that it is no longer necessary for the purpose for which we need to process it, as explained above, or where we no longer have a legal basis to do so. You can also delete your account yourself in the APP.
  • Ask us to restrict the processing of your data, which means that in certain cases you may ask us to temporarily suspend the processing of the data or to keep it for longer than necessary when you may need it.
  • Object to the processing of your personal data, including profiling.
  • Receive your data in a structured, commonly used and machine-readable format, or ask us to transmit it to another controller (portability).
  • Not be subject to automated decisions that produce legal effects concerning you or similarly significantly affect you. MaterMap does not make decisions of that kind: points, levels and badges are calculated automatically, but they have no such effects.

Likewise, if you have given us your consent to process your data for any purpose, you also have the right to withdraw it at any time.

To do so, you can write to the email or postal address given in point 1, or use the website’s contact form. If we cannot verify your identity in another way, for example because you write to us from your account’s email, we may ask you for a document that proves it.

If you feel that your rights regarding the protection of your personal data have been infringed, especially when you have not obtained satisfaction in exercising your rights, you may file a complaint with the Spanish Data Protection Agency through its website: www.aepd.es.

8. Accuracy of the data

The data subject guarantees that the data provided is true, accurate, complete and up to date, and undertakes to report any change to the data provided through the channels enabled for that purpose and indicated in point 1 of this policy. The data subject will be liable for any damage or loss, both direct and indirect, that may be caused as a result of failing to comply with this obligation.

If the user provides data of third parties, for example the contact details of a venue when suggesting a new place, the user declares that they have the consent of the data subjects and undertakes to pass on to them the information contained in this clause, releasing the organisation from any liability arising from failure to comply with this obligation.

The user undertakes to use the MaterMap APP only for the purpose for which it has been designed, that is, to build an interactive breastfeeding map with points through which users can find the right places to feed their baby, as well as other services related to childcare. It also aims to increase the visibility of businesses that have a space set up for breastfeeding and child-rearing.

How to delete your account

You can delete your MaterMap account in the app, under Profile > My data > Delete my account. Before you confirm, the app shows what we will delete and what we will keep:

  • We delete your profile (your name, email and phone number), your favourite and visited Mappers, and your progress: points, level and badges.
  • We keep, without your name or profile, your reviews as you wrote them and the Mappers you recommended or registered. If you want to delete a review, do it before you delete your account.
  • Your Mappers stay published but are no longer in your name. If any of them has Premium, we cancel it right away and keep its invoices, as the law requires.