1. Introduction
Kaido Trails operates the Kaido mobile application (the "App"). We are committed to protecting your privacy. This policy explains what information is processed when you use the App, who it is shared with, and what rights you have.
If you have any questions, you can reach us at info@kaidotrails.com.
2. No accounts, no personal data
Kaido does not require you to create an account. We do not collect your name, email address, or any identifier that lets us know who you are. Your precise GPS location is processed on your device only and is never transmitted to Kaido Trails or any third party.
3. Data processed when you use the App
Map tiles — MapTiler
When you view the map, your device requests map tiles from MapTiler. These
requests include the map coordinates of the area you are viewing (approximate
location). Those coordinates go directly from your device to MapTiler and are
never seen by Kaido Trails. MapTiler is operated by MapTiler AG, based in
Switzerland.
Privacy policy: maptiler.com/privacy-policy
Route content — Supabase
The App fetches the route catalogue and downloads content (maps, waypoints,
track files) from Supabase, our content hosting provider. These requests
reveal which routes you have downloaded, but they are not linked to any
personal identifier. Supabase is operated by Supabase Inc., based in the
United States. Data is stored on servers in the EU (Frankfurt, AWS eu-central-1).
Privacy policy: supabase.com/privacy
Purchases — Google Play
Purchases are handled entirely by Google Play. After a purchase completes, a purchase token is sent to our server solely to verify that the purchase is genuine and to unlock the content on your device. The token is not used for any other purpose and is not linked to personal information. Google's privacy policy applies to all payment processing: policies.google.com/privacy
4. Legal basis for processing
Where GDPR applies, we rely on the following legal grounds:
| Purpose | Legal basis |
|---|---|
| Delivering map tiles (via MapTiler) | Performance of contract — Art. 6(1)(b) |
| Fetching and downloading route content (via Supabase) | Performance of contract — Art. 6(1)(b) |
| Verifying purchases (purchase token via Supabase) | Performance of contract — Art. 6(1)(b) |
5. Data stored on your device
The App stores route content, offline map tiles, and your purchase state locally on your device so that routes work without an internet connection. This data stays on your device and is not backed up to our servers. You can remove it at any time by clearing the App's storage or uninstalling the App.
We do not use cookies. No tracking identifiers are stored in your browser or on your device by Kaido Trails.
6. Data stored on our servers
Kaido Trails does not store personal data on its servers. Route content on Supabase is identical for all users and is not user-specific. Purchase tokens are used only for one-time verification and are not retained in a way that identifies you.
7. Data retention
| Data | Retention |
|---|---|
| Purchase tokens (server-side) | Used once for verification; not retained after confirmation |
| MapTiler request logs | Subject to MapTiler's retention policy |
| Supabase access logs | Subject to Supabase's retention policy |
| Route content on your device | Until you clear storage or uninstall the App |
8. International data transfers
MapTiler AG is based in Switzerland, which has an EU adequacy decision. Route content is hosted on Supabase infrastructure in Frankfurt (EU). Purchase verification uses Google's infrastructure, which is subject to the EU-US Data Privacy Framework. No personal data about you is transferred internationally, as we do not collect personal data.
9. Data sharing
We do not sell your data. We do not share data with third parties beyond the service providers listed in Section 3, and only to the extent necessary to operate the App.
10. Children's privacy
The App is rated for all ages. Because we do not collect personal data from anyone, no special measures are needed for children. We do not knowingly collect information from children.
11. Security
All communication between the App and our servers, and between the App and third-party services, takes place over HTTPS.
12. Your rights
If GDPR applies to you, you have the following rights regarding your personal data:
- Right of access (Art. 15) — request a copy of personal data we hold about you.
- Right to rectification (Art. 16) — request correction of inaccurate data.
- Right to erasure (Art. 17) — request deletion of your personal data.
- Right to restriction (Art. 18) — request that we limit how we process your data.
- Right to data portability (Art. 20) — receive your data in a structured format.
- Right to object (Art. 21) — object to processing based on legitimate interest.
- Right to lodge a complaint — file a complaint with your local data protection authority.
In practice, because we do not store personal data that identifies you, most of these rights have nothing to act on. If you have a concern, contact us at info@kaidotrails.com and we will respond within 30 days.
13. Changes to this policy
If we add features that change how data is handled, we will update this page and revise the "last updated" date. Significant changes will also be noted in the App's Play Store listing.
14. Contact
Questions or concerns? Email us at info@kaidotrails.com.