Bootprint — Privacy Policy

Who we are

Bootprint is operated by an individual developer based in Finland. Contact: juhyeonl.dev@gmail.com. We are the data controller for the data below.

What we collect

• Location (precise GPS) — used solely to compute which map tiles you claim and to verify sessions. Recording runs only while tracking is on (a persistent notification is always shown while recording; you can pause anytime).
• Step count — used solely to verify that movement is on foot.
• Google account (required) — Bootprint requires you to sign in with Google before you can record or view the map. We receive your email address and a Google account identifier from Google, and store them so your territory survives a new device or reinstall. We never receive your Google password, and we do not read your Gmail, contacts, or any other Google data. Sign-in is required because territory you claim is tied to an account; without it a lost phone or reinstall would permanently lose your progress.
• Nickname — the name other players see. You choose it yourself and can change it at any time. It is not taken from your Google account, so your real name and email are never shown to other players.
• Body weight/height (optional) — stored on your device only, used to estimate calories. Never transmitted.
• Diagnostics — a small technical health snapshot is attached to each recorded session so we can detect recording failures that you would never notice yourself (the sensor going silent, the background service being killed, uploads piling up). It contains counters and status codes only — for example how many location updates arrived, whether the step sensor was active, your app version, Android version and phone model. It contains no location coordinates, no name and no email. If you file a report from inside the app, a slightly longer version (the same snapshot plus the last 8 technical events) is attached so we can investigate what you reported. A separate latest health checkpoint is also sent when recording status changes, when you reopen the app, and during system-scheduled background checks. It includes permission and battery restriction status, recording service status, pending upload counts, and the times of the last location update and interruption, without coordinates. A local checkpoint preserves interruption evidence across restarts. This does not record a route while tracking is paused. Diagnostics are deleted after 30 days.

How it is stored

Game data is stored on our server (Supabase, EU region — Stockholm): your account id and email, chosen battles and teams, claimed tiles, and per-session summaries (distance, duration, verification result).

Raw GPS points of a session are deleted immediately after verification. Exceptions, kept strictly for fair-play review:

• Sessions put on hold by verification keep their raw points for 7 days — so they can be re-judged in your favor if you appeal or the rules improve — then they are deleted.
• A coarse route summary (30-second resolution grid cells) is kept for 14 days solely to detect multi-account abuse, then deleted.
• A salted hash of your connection address (IP) is stored with each session for up to 30 days, solely to detect multi-account abuse. The raw address itself is never stored.
• Expired data is deleted automatically every day.

User-created battles

Battle names, team names and colors you create are visible to the people you invite (battles are private by default). Reports you file are stored with your account id for moderation purposes only.

What we never do

• We do not sell your data.
• We do not share your data with third parties, except when required by law (see our Terms of Service).
• We do not use your location for advertising. The app has no ads.

Your rights (GDPR)

You can access, correct, or erase your data at any time: in-app (Profile → Delete account) or by contacting us. Erasure requests are honored within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Children

Bootprint is not directed at children under 13.

Changes

Material changes to this policy will be announced in-app.