This Privacy Policy applies to the Kaart iOS app, its share extension, and the services available through kaartstudio.app (together, “Kaart”). By using Kaart, you acknowledge the practices described below.
Our approach
Kaart does not require a Kaart account. We do not sell your personal information, use it for targeted advertising, or track your activity across other companies’ apps and websites. Apple’s privacy manifest for Kaart declares no data collected and no tracking.
Information kept on your device
Your routes, stops, route geometry, designs, styling choices, imported GPX data, cached map tiles, templates, and selected background images are stored locally on your device. Your measurement preference is also stored locally. Kaart does not provide a cloud account or cross-device sync at this time.
Exported images and videos are saved to Photos only when you choose to save them. Kaart requests add-only Photos permission for this purpose.
Location and map services
If you choose to center the route editor on your current location, Kaart requests “While Using the App” location permission. Your location is used to position the map and help you find nearby places. Kaart does not store a history of your device location or use it in the background.
Place search, geocoding, map display, and road directions use Apple MapKit services. Styled basemap tiles are requested from CARTO and are based on OpenStreetMap data. Those providers may receive technical request information such as an IP address under their own privacy terms.
Content you choose to import
GPX and shared map links
GPX files are read on your device. When you share a supported Google Maps link to Kaart, the app may contact Google to resolve redirects and read the route details contained in that link. The resulting route is stored locally in Kaart.
Strava
Connecting Strava is optional. If you connect it, Kaart requests read-only access to your activities so you can browse and import activities with GPS routes. Your Strava refresh token is stored in the iOS Keychain; short-lived access tokens are held in memory. Kaart’s server briefly processes authorization codes or refresh tokens to exchange them with Strava, but does not use them to build a Kaart account. Imported activity details and route geometry are stored on your device.
You can disconnect Strava in Kaart’s settings, which removes the stored refresh token from your device. You can also revoke access from your Strava account settings.
Service operations and retention
Our server may process ordinary technical information needed to deliver and protect the service, including IP addresses, timestamps, request paths, error details, and rate-limit counters. This information is used for security, reliability, debugging, and abuse prevention. We retain it only as long as reasonably necessary for those purposes or as required by law.
Third-party services
Depending on the features you choose, Kaart may interact with:
- Apple MapKit, Core Location, and Photos;
- Strava for connected activity import;
- Google Maps when you provide a Google Maps share link;
- CARTO and OpenStreetMap for styled basemap data.
These providers process information under their own terms and privacy policies. Kaart does not control their independent practices.
Children’s privacy
Kaart is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through our support channels, contact us so we can address it.
Your choices
- You can deny or revoke Location and Photos access in iOS Settings.
- You can disconnect Strava from Kaart’s settings.
- You can delete routes, designs, templates, and the app at any time.
- You can contact us to ask about information you sent directly to our support address.
Changes to this policy
We may update this policy as Kaart changes. We will post the revised policy here and update the date above. Material changes will be communicated in a reasonable way.
Contact
Questions about privacy can be sent to privacy@kaartstudio.app.