Plotta

Effective: 2026-09-25 — Bundle ID: com.ootssu.plotta

What we collect

• Guest identifier: on Android you can use Plotta without creating an account. The app creates a random guest identifier (no name, email or phone number) in Supabase Auth so your lands and walks can be saved. A generated display name such as “Walker #1a2b” (editable by you) is shown next to lands you claim.
• Account info (optional): if you link or sign in with email, Google or Apple, we store your email address or an opaque Apple/Google user identifier in Supabase Auth, used only to identify your account. Linking keeps the same identifier, so your lands and walks stay with you. Your default public display name is “Walker #…” or the name on your Google/Apple profile — never your email address.
• Walking routes (precise location): while a walking session is active, Plotta records your GPS coordinates so we can draw your path and detect when you've closed a loop. The raw point-by-point path is stored privately under your account and is never shown to other players.
• Land polygons: when you close a loop, the resulting polygon (the outline of the area) is stored and shown on the map together with your display name and chosen color so other players can see who owns each plot.
• Usage data: aggregate stats such as total area, number of lands, and event timestamps. Used for the leaderboard and for in-app history.
• Purchases (Plotta Plus): if you buy Plotta Plus, payment is handled entirely by Apple (App Store) or Google (Google Play). Your Plotta account ID and the store's purchase receipt are sent to RevenueCat to verify the purchase and unlock Plus on your devices. We never see your card or payment details.
• Walk Journal: Plus shows you your own past routes, distances and times, read from the same private records described above. Nothing new is collected for it, and your routes are still never shown to other players.

What we don't collect

• We do not track your location when no walking session is active.
• We do not use advertising identifiers (IDFA/IDFV for ads).
• We do not track you across other apps or websites.
• We do not access your contacts, photos, or microphone.
• Camera: used only to show Cairn messages over the live camera view. No photo or video is recorded, stored, or uploaded.
• Health (Apple Watch): during a walk on Apple Watch, heart rate and calories are read and the walk is saved as a workout in Apple Health on your device. This health data is not sent to us or to any third party.
• We do not embed third-party analytics SDKs or ad networks. (RevenueCat, below, is used only to process in-app purchases.)
• We never share your raw walking path. Only the closed polygon outlines are public on the map.

Third-party services we use

• Apple MapKit (iPhone) and Google Maps (Android) — render the map. No personal data is sent beyond what is needed to display map tiles.
• Supabase — database and authentication host. Stores your account, your raw walking paths (private), your land polygons (public-on-map), and event history.
• Apple Sign in with Apple & Google OAuth — sign-in only. We receive an opaque user identifier and your email (only if you choose to share it).
• RevenueCat — in-app purchase processing for Plotta Plus. Receives your Plotta account ID, purchase receipts and subscription status; see revenuecat.com/privacy.
• Apple App Store & Google Play — process payments, renewals, cancellations and refunds for Plotta Plus under their own terms.

Data retention & deletion

You can delete your data in the app: Profile → Delete account (signed-in accounts) or Profile → Delete my data (Android guests). Deletion permanently removes your Plotta profile and display name, your walking paths, your land polygons, cairns, friends, team membership, reports, reactions and event history, and the Plotta usage analytics linked to you. Other players' lands are unaffected.

Your sign-in record (Supabase Auth) is deleted at the same time unless you use the same OOTSSU sign-in in another OOTSSU app; in that case only the sign-in record is kept for that other app, and none of your Plotta data remains. Deleting a Plotta Plus subscription's data does not cancel billing — cancel the subscription in your App Store or Google Play account.

Background location

Plotta requests "Always" location permission so we can keep recording your route when the screen is off during a walking session. The blue location indicator at the top of your screen will appear while a session is active. We do not record your location at any other time — there are no geofences and no Significant Location Change subscriptions outside of an active session.

Children

Plotta is intended for users 12 and older. We do not knowingly collect personal information from children under 12.

Changes

If we make material changes to this policy we'll update the Effective date above and notify you in-app.

Contact

Questions about your data? Email ootssu@ootssu.com.