Privacy policy

What stays on the device

The places you save, your visits, notes, collections and ratings are kept in a database on your device. Apart from the sharing case described below, none of it is sent to any server.

Extracting places from your photos happens entirely on the device. The photo itself is never copied or uploaded; only the local identifier of the photo (its PHAsset identifier) is stored. If you delete the photo from your library, the app can no longer show it either.

If you grant location access, your current position can be marked on the map, and when you stay somewhere longer than twenty minutes the app asks whether you want to record it. At most 20 regions are monitored, location data stays on the device, and there is no continuous tracking.

If you create an account

Adding friends and sharing uses Sign in with Apple. The user identifier Apple provides is stored, along with the username and display name you choose. If you ask Apple to hide your email address, the app never sees your real one.

Almost everything works without an account: the map, recording, notes, Atlas and export all work signed out.

What leaves when you share

Sharing is off by default and is turned on per record. When you choose to share a record, only a copy of that record goes to the server: place name, category, visit count, date and — if you explicitly wrote one — your note.

A shared record's coordinate is rounded to a grid of roughly 250 metres before it is written. The raw coordinate is never stored, so it cannot be returned in any response.

Photos are never sent under any circumstance. The server rejects any request carrying a field outside the defined set.

If you add a place from a social media link, that link goes to the server, because the post cannot be resolved on the device. Map links are resolved on the device.

When you turn sharing off or delete the record, the copy leaves the server and is removed from your friends' devices as well.

What your friends see

Your friends only see the records you chose to share. No place, note or visit you didn't share appears in a friend's feed.

You can block anyone at any time. Blocking works both ways: each side's records leave the other's feed.

What we don't collect

• No advertising identifier and no ad network.
• No third-party analytics or crash reporting SDK.
• No access requested to contacts, calendar, microphone or health data.
• No continuous background location tracking.

Purchases

Subscriptions are handled by Apple. Your payment details never reach the app; the app only learns from Apple whether a subscription is active.

Retention and deletion

You can delete the data on your device from inside the app at any time, or export it as GPX, CSV or JSON. Deleting the app deletes the data on the device with it.

You can delete your account from inside the app. When you do, your data on the server — shared records, friendships and invites included — is permanently deleted within 24 hours.

When you turn sharing off for a record, the copy leaves the server immediately.

Children

Mapento is not directed at children and does not knowingly collect data from them.

Changes

If this text changes, the date above is updated. If a change widens what is collected, it is also announced inside the app.

Contact

For any question or request: arvistudio@gmail.com