Privacy Policy

Last updated: August 16, 2026

Ñan Kamay ("the app", "we") is a free app to record hiking and mountain routes. This policy explains what data we collect, why, and how you protect and control it. By using the app you agree to what is described here.

Summary: your routes are saved on your phone first. They are only uploaded to the cloud if you sign in and sync. We never sell your data or use it for ads. Usage analytics are anonymous, contain no location, and can be turned off.

1. Data controller

Ñan Kamay, developed by Genaro Pretill. Contact: genaropretill.com · genaropretill@gmail.com.

2. Data we collect

Account

If you create an account: your email address (or basic Google profile if you use "Sign in with Google"). Needed to sync your routes across devices and back them up.

Location (GPS)

To record a route we collect your precise location while recording, including in the background (with the screen off) so recording is not interrupted. Location is stored on your device and, if you sync, in your account. We do not track your location when you are not recording.

Live tracking (optional)

If you enable "Share live", your latest position is uploaded to our server so anyone with your link can see you on a map. The link works via a temporary capability (token) and the session expires after 12 hours, after which it is no longer accessible. You decide when to enable it and who you share the link with.

Waypoint media (optional)

Photos, videos or voice notes you add to a point of interest are stored on your device and, if you sync, in your account. Requires your camera/gallery/microphone permission.

Trusted contacts (on your phone only)

Contacts you save for check-in / S.O.S. are stored only on your device. They are not uploaded to any server. S.O.S. messages are sent via SMS from your own phone.

Usage analytics (anonymous)

To improve the app we log anonymous usage events: which screens are visited (as a pattern, e.g. "route detail", never the specific route) and key actions. We never log your location, coordinates or personal data in analytics. You can turn it off in Profile → settings.

Bug reports (optional)

If you report a problem, we send your message, basic device info (model, Android version, app version) and, if you attach one, a screenshot.

Testing programme (beta)

If you sign up for the closed test on our beta page, we store your name and email address to give you access to the test on Google Play and to tell you about beta updates. They are not shared with anyone and are deleted when the testing programme ends, or earlier if you ask us. Joining the Google testers group is a separate step, handled by Google.

3. How we use the data

Record, display and export your routes (GPX/KML/KMZ).
Sync and back up your routes if you sign in.
Enable live tracking when you turn it on.
Improve stability and experience (anonymous analytics and bug reports).

We do not sell your data. We do not use it for advertising or profiling.

4. Who we share it with

Supabase (database and storage provider): hosts your account, routes, media and live sessions when you sync. Data is protected by per-user access rules (RLS).
Map providers (OpenStreetMap / Protomaps / Thunderforest): when loading online maps, your IP address reaches them as part of the tile request.
Anyone with your live tracking link, while the session is active (max 12 h).
Google Play: app distribution and basic store diagnostics.

5. Where it is stored and for how long

On your device: your routes, waypoints and trusted contacts, until you delete them or uninstall the app.
In the cloud (if you sync): until you delete the route or request account deletion.
Live tracking sessions: expire automatically after 12 hours.
Analytics: anonymous events, kept in aggregate for product analysis.
Testing programme (beta): name and email of people who sign up, until the beta ends or you ask us to delete them.

6. Your rights and controls

Delete routes: remove any route from the app (local and cloud).
Turn off analytics: in Profile → settings.
Stop live: turn off "Share live" or wait for it to expire.
Delete your account and data: email us at genaropretill@gmail.com and we will delete your account and associated data.

7. Security

We use encrypted connections (HTTPS), per-user access control in the database, and secure credential storage on the device. Access to live tracking requires the exact token and expires on its own. No system is 100% foolproof, but we apply reasonable practices to protect you.

8. Children

The app is not directed to children under 13 and we do not knowingly collect data from children under that age.

9. Changes

We may update this policy. We will publish the current version on this page with its update date.

10. Contact

Privacy questions: genaropretill.com · genaropretill@gmail.com.

← Back to home