EN · RU · DE · ES · FR · IT · PT · PL · HI · ZH · JA
StreetPainter is an application about walking real streets, and by its nature it processes data about your location. This Privacy Policy explains what data we collect, for what purposes it is used, who can see it, and how you can delete it. The Service is operated by the individual developer of StreetPainter, acting as the data controller; contact: contact@streetpainterapp.com.
| Category of data | Purpose of processing |
|---|---|
| Google account basics — your Google account id, email address and name (used to suggest a nickname) | Authentication and account identity. We never have access to your Google password. |
| Profile data — nickname, bio, avatar photo, friend code, chosen language and country | Your public identity within the App. |
| Precise location & routes — GPS coordinates recorded while tracking is active, matched to streets; painted streets; walk statistics (distance, duration) | The core feature of the App: painting streets you walk. Tracking starts when you open the App with location permission granted and continues in the background with a persistent notification, so your walks are recorded automatically — including while the App is closed. It pauses automatically when you stop moving (motion/activity detection is used to resume it when you walk again), and you can stop it at any time from the notification; it then remains off until you return to the App. |
| Content you post — photos, posts, comments, likes, discovery points | Operation of the social features you use. |
| Friends & social graph — friend list, friend requests | Friend features and friend leaderboards. |
| Purchase state — Google Play purchase token, product, order id, subscription state | Activation of premium access after purchase. Payments are processed by Google; we never receive your payment-card details. |
| Device & technical data — a random per-install id, push-notification token, app version, timezone offset, app language, physical-activity type (walking detection, processed on the device) | Anchoring of the one-time free trial, delivery of push notifications, correct operation of local-time features (streaks, quests), automatic pause and resumption of tracking. |
| Usage analytics & logs — in-app events (screens, feature usage), server request logs including IP address, crash reports. Each batch of analytics events also carries device details: device model and manufacturer, Android version, app version, system language and region, time zone, country (taken from the SIM card, the mobile network or the system region setting — never from your IP address or GPS), the store the App was installed from (for example Google Play) and the connection type at upload time (for example Wi-Fi or mobile data). Events recorded before you sign in are sent without an account, under the random install id, and are linked to your account when you sign in. | Fixing defects, preventing abuse, improving the App, and understanding on which devices and app versions, and in which languages and countries, the App is used. |
| Install source — once per installation, the App reads the Google Play Install Referrer: the campaign tags of the store link the App was installed from (source, medium, campaign, content, term), when that link was clicked and when the installation began. Store links on our website carry tags naming the website, the link used and the page language; they do not identify you. An invite link carries the inviting user's friend code: if you installed the App through a friend's invite, that code is stored with your analytics events. | Understanding which channels bring new users and counting how many installs each invite led to. |
| Invites, sharing & rating prompts — whether an “invite a friend” prompt was shown, accepted or dismissed; when you share an invite or a walk, which app you picked in the share sheet (its package name only — never the message, the recipient or your contacts); and when the App asked Google Play to show its rating dialog. | Measuring how invites and sharing are used, so that prompts appear rarely and only when helpful. Ratings and reviews are handled entirely by Google Play: we never learn whether the dialog appeared, whether you rated the App or what you wrote. |
| App & device integrity — at most once a day, when you open the App while signed in, the App requests an integrity verdict from the Google Play Integrity API, which Google evaluates on its own servers. We store with your account and install id: whether the installed App is recognised as the version distributed through Google Play, its licensing status, Google's device-integrity labels, a recent-activity level (how often the device requested integrity verdicts in the last hour), the App's version code and the time of the check (or an error code if no verdict was obtained). Usage analytics record only whether each check could be completed, not the verdict. | Detecting modified versions of the App and automated abuse, keeping leaderboards fair and preventing fraud. Google's own processing of the request is governed by the Google Privacy Policy. |
| Website analytics — anonymous, cookieless visits to our marketing website (pages viewed, approximate country derived from your IP address without storing it, referring website, time on page) | Understanding how visitors find and use the website and improving it. Not linked to any account and sets no cookies. |
Legal bases (GDPR Art. 6). We rely on: performance of our contract with you to provide the core Service (your account, painting the streets you walk, the social features and the handling of your subscription); your consent for precise location, which you grant through the system permission and may withdraw at any time in your device settings (withdrawal does not affect processing already carried out); and our legitimate interests in keeping the Service secure, preventing abuse, fixing defects and improving the App, weighed against your rights and freedoms. These legitimate interests also cover the integrity checks described above (detecting modified apps and automated abuse, preventing fraud and keeping leaderboards fair) and understanding how people find the App and use invites and sharing.
Turning off usage analytics. You can object to usage analytics at any time with the “Share usage analytics” switch at the bottom of the App's Settings. While it is off, the App records and sends no analytics events (including the device details, the install source and the invite, sharing and rating prompt events described above) and deletes the events it has not yet sent. Events already sent are kept as described in Section 4 and deleted 13 months after they were recorded. Crash reports, integrity checks and server request logs are not affected. You can turn analytics back on at any time; collection then resumes from that moment.
Our website offers an optional form to be told when StreetPainter becomes available on iPhone. If you use it, we store your email address, the language of the page you signed up from, your approximate country (derived from your IP address at the moment of sign-up; the IP address itself is not stored) and the date and time of sign-up. The waitlist is not linked to any StreetPainter account.
We share data only with the service providers required to operate the Service, each acting under its own privacy terms: Google (sign-in, Google Play billing, Firebase Cloud Messaging for push notifications); Mapbox (the base map is rendered by the Mapbox SDK — the App requests base-map tiles directly from Mapbox, which thereby receives your device's IP address and the map area you are viewing. In addition, while the App is in use, the Mapbox SDK sends Mapbox de-identified telemetry, including your device's location, which Mapbox uses for its own purpose of improving its maps and services; you can turn this off at any time with the ⓘ button in the corner of the map (telemetry settings); see the Mapbox Privacy Policy); Sentry (crash and error reporting — location coordinates are redacted from reports before they are sent; see the Sentry Privacy Policy); Microsoft (Azure AI Translator: when someone taps Translate under a post or comment, the text of that post or comment is sent to Microsoft and the translation comes back; no account, location or other data is sent with it. We use Microsoft's European endpoint, so the text is processed in the EU, and Microsoft does not store the text it translates; see the Microsoft Privacy Statement); and our hosting provider (servers and database). The App's own overlays (painted streets, zones) are served by our own server. If you link your Discord account, we exchange with Discord only the minimum data required to assign your roles. We disclose data to public authorities only where legally required to do so.
The Google Play services built into the App are also provided by Google: the Install Referrer (install source, Section 1), the in-app rating dialog and the Play Integrity API (integrity checks). Google's own processing in these services is governed by the Google Privacy Policy. Sentry also receives performance data for a sample of app operations (how long screens, operations and network requests take) and whether each app session ended normally or with a crash.
Our servers and database are hosted in the European Union. Some of the processors named above (Google, Mapbox, Sentry, Microsoft) are established in the United States; where your data is transferred outside the EEA, that transfer is covered by a European Commission adequacy decision or by the Standard Contractual Clauses.
If the Service is transferred to another operator (for example, sold or handed over), your data may be transferred together with it so that the Service can continue to operate. We will notify you in the App before any such transfer; this Policy will continue to apply, and you may delete your account if you do not agree.
You may delete your account at any time; after the 7-day window this deletes your account data as described in Section 4:
Depending on your jurisdiction (for example, under the GDPR) you additionally have the right to access, rectify, export, restrict or object to the processing of your data, to withdraw any consent you have given (without affecting processing already carried out), and the right to lodge a complaint with your supervisory authority. You can also object to usage analytics directly in the App with the “Share usage analytics” switch in Settings (see Section 1). Direct any request to contact@streetpainterapp.com; we respond within the statutory time limits.
Data is transmitted over TLS and stored on access-controlled servers. Sign-in tokens are short-lived and are revoked when you sign in on another device. No system is perfectly secure; in the event of a breach we will notify affected users as required by law.
The Service is not directed at children under 16 years of age, and we do not knowingly process their data. If you believe that a child under 16 is using StreetPainter, please contact us and we will delete the account.
We will update this Policy as the Service evolves; the date shown above always reflects the current version. Material changes are announced in the App.