Privacy policy

The app contains no analytics tool, no ad network and no third-party tracker. No advertising profile is built and no data is sold.

If you use “Near me”, the app asks your device for your position. It serves to centre the map and search for water points around you. Your exact position does not leave the device: the search is rounded to a fixed grid roughly 55 km across, and it is that grid cell — not your coordinates — that reaches our servers. You may refuse location access: only “Near me” becomes unavailable.

A GPX file you load is read and parsed on your device. It is never uploaded and never stored on our servers. Only the grid cells your route crosses are queried, with the same rounding as above.

If you connect Strava, authorisation goes through Strava itself (OAuth): we never see your password. Access tokens and your athlete name are kept on your device — in the secure keychain on mobile, in a secure cookie on the web — and never in a database of ours. You can sign out from the app at any time, or revoke access from your Strava account settings.

Three things: your display language, the water points already seen (cached for seven days to avoid repeating the same queries), and your Strava session if you opened one. Clearing the site data or uninstalling the app removes them.

Showing a map means contacting servers that necessarily see your IP address and the area you are looking at: the basemap providers (OpenStreetMap, OpenTopoMap, Esri), the Overpass servers that answer searches outside France, and Strava if you sign in. Our host, Vercel, logs technical requests (IP address, browser type) as any web server does.

We hold no user account and therefore keep nothing on the server side that is tied to you. The local cache expires after seven days. A Strava session stays valid for sixty days, or until you sign out. The host's technical logs follow its own retention policy.

European regulation gives you rights of access, rectification, erasure and objection. As no personal data is kept on our servers, those rights are exercised directly from your device: clearing the app's data erases everything concerning you. For any question, write to the address below.

The app is not directed at children and knowingly collects no data concerning them.

Any change to this policy will be published on this page, with an updated date.

For any question about this data: ddd@kameleon-lab.fr