Privacy Policy

TL;DR: No accounts. We don't sell your data. Locations stay on your phone. We collect crash data through Sentry to fix bugs. That's it.

What we collect

• Crash reports via Sentry: stack traces, device model, OS version, app version, anonymous session ID. No personal identifiers.
• Email address if you submit one through the waitlist or beta form. Used only to notify you about the launch.
• Anonymous usage events through Supabase: route generated, walk completed, mood selected. No identity attached.

What stays on your device

• Walk history
• Favourite routes
• Pinned memories
• Achievement progress
• Photos taken in-app

None of the above ever leaves your phone unless you explicitly tap "share" on a postcard.

Location

We request location permission to:

• Centre the map on you when you start a walk
• Detect if you wander off-route
• Snap to the nearest curated city

Location data is processed locally in real time. We do not store, log, or transmit your coordinates to any server. Tile rendering uses CartoDB / Leaflet under their own privacy terms.

Third-party services

• Supabase — backend for curated places + anonymous usage analytics. Their policy
• Sentry — crash reports. Their policy
• OSRM (public) — walking-route polyline generation. No identifying info sent.
• Open-Meteo — weather. We send approximate coordinates, no identity.
• Groq — narrative generation. Sent: mood, mode, time, place names. Not sent: your identity, location precision, or photo.

Children

Mood Route is not directed at children under 13 and does not knowingly collect data from them. The app is rated 4+ on the App Store as it contains no objectionable content; however, parental supervision is recommended for solo walking activities.

Your rights (GDPR / CCPA)

You have the right to:

• Request what data we hold (almost certainly: nothing personally identifiable)
• Request deletion (uninstall the app — your data goes with it)
• Opt out of crash reports in Settings → Privacy
• Opt out of analytics events in Settings → Privacy

Data retention

Anonymous analytics: 90 days. Crash reports: 90 days. Waitlist email: until launch + 30 days, then deleted unless you opt into product newsletter.

Changes

If this policy changes materially, we'll notify users via in-app banner before the change takes effect. The "Last updated" date at the top reflects the latest revision.