← Back

Privacy Policy

Last updated: 2026-05-18

Who we are

On Foot is a small project for sharing walking spots in Kraków with friends and family. The app is operated by an individual (not a company). Contact: hello@onfoot.app.

What data we collect

  • Account info: your email, username, password hash (or Google ID if you sign in with Google), and your chosen avatar.
  • Profile data you choose to add: bio, home location (approximated to a ~500m grid for privacy).
  • Activity: places and spots you check in to, photos you upload, ratings you give, locations you pin, communities you join, events you create.
  • Technical: session cookies needed to keep you signed in.

We do not use analytics trackers, advertising cookies, or any third-party tracking scripts. We do not sell or share your data with anyone.

What's visible to others

  • Public to other community members: your username, avatar, bio, the spots you've pinned in shared communities, your check-in counts and points on the community leaderboard.
  • Never shown to other users: your email address, your home location coordinates, your password.

Where your data is stored

All data is stored on a server we control, hosted with Hetzner in Falkenstein, Germany. The app itself is hosted with Vercel. We do not use Amazon, Google Analytics, or similar third parties for data storage.

Cookies

We use only what's strictly necessary: a session cookie to keep you signed in. No tracking, advertising, or analytics cookies.

Your rights (GDPR)

If you're in the EU/UK, you have the right to:

  • Request a copy of all data we hold about you
  • Correct any inaccurate data (you can edit most of it yourself in your profile)
  • Delete your account and all associated data
  • Object to processing
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, email hello@onfoot.app and we'll respond within 30 days.

Data retention

We keep your account data as long as your account is active. If you delete your account, we delete all your personal data within 30 days (community spots you created remain, but no longer attributed to you).

Changes

If this policy changes, we'll update the date at the top. For significant changes, we'll notify active users by email.