Pribatutasuna

1. Who we are

Mintakka™ is this app and this website. For anything about your data, write to privacy@mintakka.com. When it is about an account, we only act on messages sent from that account’s address.

2. Your account

You need an account: there is no way to use the app without one. We keep your e-mail address, how you sign in (with Google or with a password), your language and your subscription. Sign-in is handled by Google’s Firebase Authentication; we do not store your password.

We only write to you about your account, unless you sign up for the newsletter.

3. Your profile and your library

Your profile name, your maximum heart rate, your routes and your outings are kept on our servers as well as on your phone, so you do not lose them when you change phones and can see them on the web. They are private. Your profile picture, your downloaded maps and your settings are never uploaded.

When you navigate a route, the app records your track and keeps it as an outing in your library.

Deleting a route or an outing deletes it everywhere, with no way to recover it.

An account nobody signs into for two years is deleted with everything in it, after an e-mail warning.

4. Heart rate

The heart rate the app records is only kept on our servers if you switch it on in Settings → Sensors; it is off by default. Switching it off deletes it from our servers. It is never published.

5. Publishing routes

Only what you publish becomes public, one route at a time. A published route carries its line and its figures, the title and description you wrote and your profile name. If it came from a recorded outing, also the date, the time and the average speed. The time of day, maximum speed, heart rate, your e-mail and your picture are never published.

By default the whole route is published, start and finish included; when publishing you can hide the first and last 200 metres. The catalogue is public: anyone can see and download its routes.

Ratings and reports never show who made them.

You can delete a route you published from Routes → Published. The deletion removes it from the catalogue with its ratings and downloads, and your copy stays in your library. Anyone who already downloaded it keeps theirs.

6. Moderation

Profile names and route titles and descriptions are checked automatically before they are stored, including by a Cloudflare Workers AI classifier. Unclear cases and reported content are reviewed by a person. If we take something of yours down or stop you publishing, we tell you why by e-mail and in the app.

7. Live sharing

While you share an outing live, your position is sent to our servers and anyone with the link can follow it. The link carries neither your name nor your e-mail. The positions are deleted automatically 48 hours after the last update. Deleting your account deletes them there and then.

8. Your phones

The free hours and the 30-day free trial are one per phone, and an account can be used on up to three phones. To apply these limits we keep an encrypted, irreversible fingerprint of each phone. It is not an advertising identifier and is used for nothing else.

For each phone we keep the free minutes spent on it and, if a free trial was started on it, the date it started. This is not linked to your account and does not go when your account goes; otherwise deleting the account would hand out new free hours.

With your account we keep its phones: the fingerprint, the model and when each was first and last used. You can remove a phone from your profile. All of this is deleted with your account.

9. Cookies

This website uses five cookies: three it needs to work and two that only remember a choice you made. There are no advertising or analytics cookies, so we do not ask for consent.

• mintakka_session — keeps you signed in. 30 days.
• mintakka_csrf — protects forms. Deleted when you close the browser.
• mintakka_catalogue_mark — lets you see straight away what you just published or rated. 30 days.
• mintakka_locale — the language you picked in the menu, only once you pick one. 1 year.
• mintakka_units — the units you picked in the menu, only once you pick them. 1 year.

The website also keeps a few things in your browser’s own storage: choices you made on it (light or dark theme, the map’s style and layers, a notice you closed), the list you were browsing and a rating you pressed before signing in, until you close the tab, and the satellite images you have already seen, with how many were loaded today. None of it identifies you, and you can delete it from your browser’s settings.

If you sign in with Google, Google may set its own cookies, under its own policy.

10. Technical logs

Our servers keep a technical log of requests, which may include your IP address, for seven days, to find faults and abuse. The app uses Google Play Integrity to check that it is genuine.

11. Beta and newsletter

If you sign up for the beta or the newsletter, we keep your e-mail, what you chose and your language, and ask you to confirm. The form uses Cloudflare Turnstile to check that you are a person. Once you confirm, we give your e-mail to EmailOctopus (the newsletter, with open and click tracking off) or to Google Play or Apple’s TestFlight (the beta). Every e-mail carries a link to unsubscribe.

12. Who handles your data

• Cloudflare — servers, databases, storage, automatic text checks and form protection.
• Google — sign-in, Play Integrity and subscriptions on Google Play.
• RevenueCat — the state of your subscription. It never receives your name or your e-mail.
• MapTiler — the most detailed satellite imagery. Your device requests it directly, so MapTiler sees your IP address and the part of the map you are looking at.
• EmailOctopus — the newsletter, if you sign up.

Nobody else. We do not sell your data, and there is no advertising, analytics or tracking in the app or on the website. Some of these companies are in the United States; transfers rely on the safeguards of European law (the EU-US Data Privacy Framework or standard contractual clauses).

13. Deleting your account

Deleting your account immediately deletes your account, your profile, your library, your live shares and your phones. You can choose whether the data on that phone is deleted too. Uninstalling the app only deletes what is on the phone.

Routes you published stay in the catalogue, without your name. If you do not want them to stay, delete them first. Your ratings keep counting, linked to nobody.

How to delete your account.

14. Legal basis and your rights

• Providing the service — your account, your library, navigation, publishing, live sharing and your subscription.
• Legitimate interest — preventing abuse (the phone fingerprint and technical logs), checking what is published and keeping published routes in the catalogue.
• Your consent — keeping your heart rate and signing up for the beta or the newsletter. You can withdraw it at any time.

You can ask us for access to your data, a copy, a correction, its deletion, a restriction of its use or to object to it by writing to privacy@mintakka.com. You can also complain to the data protection authority of your country.

15. Changes

The date above is when this policy last changed. We will not use your data for anything this policy does not describe without asking you first.