Spotswalk Privacy Policy

Last updated: 2026-08-23

Short version: Spotswalk uses account, location and activity data to make the location game work. You choose whether to use background location and which profile details are public. Children under 13 may use Spotswalk, with special protections described below. We do not sell personal data.

1. Who is responsible

EKG-expert Sverige AB operates Spotswalk and is the controller of personal data processed for the service. This policy covers the Spotswalk apps, website and related support functions. Questions can be sent to info@spotswalk.com.

2. Data we process

  • Account and profile: user ID, email, sign-in provider, display name, country, birth year, language and settings.
  • Location and activity: precise GPS position, accuracy, time, distance, speed, visited and collected spots, points, badges, route progress and tracking-session summaries.
  • Content and relationships: spots, routes, names, descriptions, comments, photos, favorites, teams, friends, invitations, reports, feedback and links between a child and an adult.
  • Purchases and technical data: store product and transaction status, entitlements, device and operating-system information, app version, security and diagnostic logs. Apple or Google handles payment-card details; Spotswalk does not receive them.
  • Support: a contact message may include your user ID, email, app version and the text you send.

3. Why we use data

We use data to create and secure accounts, show nearby spots, validate collections, calculate points and statistics, record routes, provide social and team functions, moderate content, fulfil purchases, answer support requests, prevent abuse and improve reliability. Depending on the feature and applicable law, the legal basis is performance of the service you request, consent, our legitimate interests in security and operating the service, or a legal obligation. Consent can be withdrawn, although the affected optional feature may then stop working.

4. Location, background use and routes

Precise location is used when you open the map, collect spots or record a walk. Background location is used only after you enable tracking or nearby alerts and grant the operating-system permission. Nearby alerts do not save tracking points. Detailed tracking points and temporary route data are stored locally on the device according to the retention period you choose; session summaries and route activity may be synced to the account. A route you publish can reveal its geometry, name and description. You can stop tracking, disable background permission and clear local map storage at any time.

5. Public and social features

Spots, routes, comments and photos submitted for publication can be seen by others and moderated. Depending on your settings, a public profile can show statistics, badges, spots you own, favorites, heat-map periods and distance graphs. Leaderboards, teams and friends can show a display name and activity. Team data can include membership, roles, invite codes, payer status and team credit. Recruitment links record referral relationships and successful activations. An adult linked to a child can see the child's display name, collections and activity. Review public settings and avoid publishing information that identifies a home, school or routine.

6. Children

Spotswalk may be used by children under 13; core access is not denied solely because of age. Profiles aged 14 or younger are treated as child profiles in relevant features: they are not intentionally shown ads, cannot use the Shop, and have age-adjusted lottery rewards. A child should use the service with a parent or guardian's knowledge. Where local law requires authorization from the holder of parental responsibility for consent-based processing, that authorization must be given before the relevant feature is used. Linking an account to an adult helps the adult follow activity, but is not by itself verification that the adult is a legal guardian or verified consent. A child or guardian can contact us to access, correct or delete data or withdraw authorization.

7. Ads, purchases and service providers

Profiles not treated as child profiles and eligible for ads may receive banner or interstitial ads. Depending on your privacy choices, applicable law and the available signals, Google may serve personalized, non-personalized or limited ads. Where the app offers ad privacy choices, you can use them to change your decision. The Google Mobile Ads component may initialize when the app starts and may process device or advertising information under Google's rules; the app does not intentionally request or display ads for child profiles. In-app items are processed through Apple App Store or Google Play.

We use providers only where needed to operate a feature: Supabase for authentication, database, storage and server functions; Apple and Google for sign-in and purchases; Google for ads and optional translation; OpenStreetMap and map/tile infrastructure for maps; Microsoft Azure for optional text-to-speech; and email infrastructure operated through Postal/Oderland for account, invitation, contact and support messages. Providers may process technical data and IP addresses. Processing can occur outside your country with legally required safeguards. We may also disclose data when required by law or to protect users and the service. We do not sell personal data.

8. Retention and account deletion

We keep account and activity data while the account is active and afterwards only as needed for deletion, security, disputes or legal obligations. Local detailed tracking points follow the period selected in the app. Support and logs are kept only as long as needed for the case, troubleshooting or security. Purchase and accounting records may be retained as required by law. Account deletion in the app starts deletion or anonymisation of account-linked data. Some public content may be retained without the personal link where needed for service history, safety or moderation, and limited backup copies can remain temporarily.

9. Your choices and rights

You can edit profile and privacy settings, choose public profile fields, revoke location permissions, stop tracking, unlink accounts and request account deletion in the app. You may also ask us for access, correction, deletion, restriction, portability or objection, and you may withdraw consent. Rights can depend on the circumstances and applicable law. Contact info@spotswalk.com. You may complain to the Swedish Authority for Privacy Protection (IMY) or your local data-protection authority.

10. Security and changes

We use access controls, encrypted connections and moderation and logging measures intended to protect data, but no service can promise absolute security. We may update this policy as the service or law changes. Material changes will be presented in the app or on this page, and the date above will be updated.