Privacy Policy
1. Who we are
Mapaya is an atlas where you can explore countries and territories, mark places you have visited or want to visit, track simple progress, and optionally connect with friends.
This policy explains what information we process when you use Mapaya on the web and in our mobile apps (including Android) published under the same name.
Mapaya requires an internet connection for maps, sign-in, sync, and related online features.
2. What you can use without an account
You can use Mapaya without signing in.
In that case, the following stay only on your device (for example in local storage on web, or equivalent app storage on mobile), and are not uploaded to our servers:
- visited and want-to-visit lists
- profile photo you choose in the app
- temperature unit preference
- quest progress stored locally
Clearing site or app data on your device, or using delete options in Settings, removes this local data from that device.
3. Optional Google sign-in
If you choose Sign in with Google, we use Google Firebase Authentication to create and manage your account.
For sign-in we receive and use:
- your Firebase user ID
- your Google account email
- your Google display name, when provided
We use this to authenticate you and sync account-related Mapaya data. We do not use or store your Google profile photo. If you set a custom profile photo in the app while signed in, we upload that image to Google Firebase Storage so it can sync and be shown to your friends.
4. Data we store in the cloud when you are signed in
When signed in, we store Mapaya data in Google Firebase (Firestore, Authentication, and Storage) under your account. This includes:
- your username (handle), if you set one
- your visited and want-to-visit country lists
- a custom profile photo, if you choose one in the app (stored in Firebase Storage; a copy may also stay on this device)
- your temperature unit preference (°C or °F)
- account metadata from sign-in: display name (when provided) and email
- Friends data, if you use Friends: friend relationships and friend requests
- Friend-visible stats, if you use Friends: username, visit counts, MapayaPoints, visited places, want-to-visit places, and your custom profile photo when you have set one
Your temperature unit is private to your account. Friends do not see it.
5. Friends and visibility
Friends features are optional.
If you use Friends:
- other users can find you by username (to send a request)
- people you are friends with can see your username, board stats (visit counts and MapayaPoints), visited places, want-to-visit places, and profile photo (custom, or the default Mapaya photo if you have not set one)
Friends do not see your temperature unit. We do not make your travel lists public to the whole internet; access is limited by our app rules to your account and relevant friend relationships.
6. Feedback
If you send feedback through the app, your message (and optional email you provide) is sent to our support inbox (Hello-Mapaya@protonmail.com) via an email form service, so we can read and respond.
7. Why we process data
We process data to:
- provide the atlas, passport lists, and related features
- sync your lists and temperature unit across devices when signed in
- enable usernames, friends, requests, and leaderboard/compare features
- authenticate accounts and secure the service
- receive and respond to feedback
- maintain and improve reliability and safety of the service
8. Processors / service providers
We use trusted providers to run Mapaya, including:
- Google Firebase (authentication, database, and file storage for custom profile photos)
- Vercel (website hosting)
- Form/email delivery for feedback messages
- Map/data providers used to render the product (they provide map/content services; they are not used as your Mapaya account database)
These providers process data on our behalf as needed to operate the service.
9. Selling data
We do not sell your personal data.
10. Retention
- Local-only data remains until you clear it on that device or delete it in Settings.
- Cloud account data remains until you delete your Mapaya data/account.
- Feedback emails are kept as needed to handle your request.
11. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal data.
In Mapaya you can:
- use the app without signing in
- sign out (local copy can remain on the device; cloud sync stops)
- change username (subject to in-app rules/cooldown)
- remove friends / manage requests
- delete your Mapaya data from Settings, including local data on this device and, when signed in, your cloud account data (username, synced lists, custom profile photo, friend links and requests, friend-visible stats, and your Firebase authentication account)
You can also contact us at Hello-Mapaya@protonmail.com.
If you signed in with Google, you may also manage Google account permissions in your Google account settings.
12. Children
Mapaya is intended for users aged 13 and older. It is not directed at children under 13, and we do not knowingly collect personal data from children under 13.
13. International processing
Our providers (including Google/Firebase and hosting) may process data in data centers outside your country. Where required, they use appropriate safeguards for such transfers.
14. Changes to this policy
We may update this policy as Mapaya evolves. We will change the “Last updated” date above. Please review this page when it changes.
15. Contact
Questions about privacy:
Hello-Mapaya@protonmail.com
Website:
https://mapaya.org