EN · RU · DE · ES · FR · IT · PT · HI · ZH · JA
StreetPainter is an application about walking real streets, and by its nature it processes data about your location. This Privacy Policy explains what data we collect, for what purposes it is used, who can see it, and how you can delete it. The Service is operated by the individual developer of StreetPainter, acting as the data controller; contact: contact@streetpainterapp.com.
| Category of data | Purpose of processing |
|---|---|
| Google account basics — your Google account id, email address and name (used to suggest a nickname) | Authentication and account identity. We never have access to your Google password. |
| Profile data — nickname, bio, avatar photo, friend code, chosen language and country | Your public identity within the App. |
| Precise location & routes — GPS coordinates recorded while tracking is active, matched to streets; painted streets; walk statistics (distance, duration) | The core feature of the App: painting streets you walk. Tracking starts when you open the App with location permission granted and continues in the background with a persistent notification, so your walks are recorded automatically — including while the App is closed. It pauses automatically when you stop moving (motion/activity detection is used to resume it when you walk again), and you can stop it at any time from the notification; it then remains off until you return to the App. |
| Content you post — photos, posts, comments, likes, discovery points | Operation of the social features you use. |
| Friends & social graph — friend list, friend requests | Friend features and friend leaderboards. |
| Purchase state — Google Play purchase token, product, order id, subscription state | Activation of premium access after purchase. Payments are processed by Google; we never receive your payment-card details. |
| Device & technical data — a random per-install id, push-notification token, app version, timezone offset, app language, physical-activity type (walking detection, processed on the device) | Anchoring of the one-time free trial, delivery of push notifications, correct operation of local-time features (streaks, quests), automatic pause and resumption of tracking. |
| Usage analytics & logs — in-app events (screens, feature usage), server request logs including IP address, crash reports | Fixing defects, preventing abuse, improving the App. |
| Website analytics — anonymous, cookieless visits to our marketing website (pages viewed, approximate country derived from your IP address without storing it, referring website, time on page) | Understanding how visitors find and use the website and improving it. Not linked to any account and sets no cookies. |
Legal bases (GDPR Art. 6). We rely on: performance of our contract with you to provide the core Service (your account, painting the streets you walk, the social features and the handling of your subscription); your consent for precise location, which you grant through the system permission and may withdraw at any time in your device settings (withdrawal does not affect processing already carried out); and our legitimate interests in keeping the Service secure, preventing abuse, fixing defects and improving the App, weighed against your rights and freedoms.
We share data only with the service providers required to operate the Service, each acting under its own privacy terms: Google (sign-in, Google Play billing, Firebase Cloud Messaging for push notifications); Mapbox (the base map is rendered by the Mapbox SDK — the App requests base-map tiles directly from Mapbox, which thereby receives your device's IP address and the map area you are viewing; see the Mapbox Privacy Policy); Sentry (crash and error reporting — location coordinates are redacted from reports before they are sent; see the Sentry Privacy Policy); and our hosting provider (servers and database). The App's own overlays (painted streets, zones) are served by our own server. If you link your Discord account, we exchange with Discord only the minimum data required to assign your roles. We disclose data to public authorities only where legally required to do so.
Our servers and database are hosted in the European Union. Some of the processors named above (Google, Mapbox, Sentry) are established in the United States; where your data is transferred outside the EEA, that transfer is covered by a European Commission adequacy decision or by the Standard Contractual Clauses.
If the Service is transferred to another operator (for example, sold or handed over), your data may be transferred together with it so that the Service can continue to operate. We will notify you in the App before any such transfer; this Policy will continue to apply, and you may delete your account if you do not agree.
You may delete your account at any time; after the 7-day window this deletes all associated data (Section 4):
Depending on your jurisdiction (for example, under the GDPR) you additionally have the right to access, rectify, export, restrict or object to the processing of your data, to withdraw any consent you have given (without affecting processing already carried out), and the right to lodge a complaint with your supervisory authority. Direct any request to contact@streetpainterapp.com; we respond within the statutory time limits.
Data is transmitted over TLS and stored on access-controlled servers. Sign-in tokens are short-lived and are revoked when you sign in on another device. No system is perfectly secure; in the event of a breach we will notify affected users as required by law.
The Service is not directed at children under 16 years of age, and we do not knowingly process their data. If you believe that a child under 16 is using StreetPainter, please contact us and we will delete the account.
We will update this Policy as the Service evolves; the date shown above always reflects the current version. Material changes are announced in the App.