Privacy Policy

Last updated: July 14, 2026

This Privacy Policy describes how Ato ("we", "us", or "our") collects, uses, and shares information when you use our mobile app or website.

Information We Collect

Account Information: When you create an account, we collect your Apple ID information for authentication purposes.

Health Data: With your permission, we access workout data from Apple Health, including:

• Walking, running, and cycling workout routes
• GPS coordinates from your workouts
• Workout timestamps and durations

Location Data: We collect your location when you use the app to show your position on the map and to record manual visits to hexes.

Photo Location Data: With your permission, we access location metadata from your photos to discover hexes from places you've visited.

Usage Data: We collect anonymous analytics about how you use the app to improve our service.

Website Analytics

If you choose “Allow analytics” on the Ato website, Google Analytics collects information such as the pages you view, buttons you use, device and browser type, referring website, and an approximate region. Google Analytics uses first-party cookies such as _ga to recognize a browser between visits.

The Google Analytics tag does not load until you allow it. We do not send your Ato account details, Health data, photo data, or precise location to Google Analytics. Public profile URLs are also replaced with a generic profile path before a page view is sent.

You can decline analytics when first asked or change your choice at any time with Analytics settings. Declining after previously allowing analytics removes Ato's Google Analytics cookies from your browser.

How We Use Your Information

We use the information we collect to:

• Display your exploration map and statistics
• Sync your workout data to fill hexagons on the map
• Enable profile sharing with other users
• Improve and maintain our services
• Detect and prevent technical issues

Data Storage and Security

Your exploration data is stored securely on our servers. We use industry-standard security measures to protect your information. Health data is processed to create hexagon records but the original GPS route data is not stored long-term on our servers.

Data Sharing

We do not sell your personal information. We may share information:

• When you choose to share your profile publicly
• With service providers who assist in operating our app
• If required by law or to protect our rights

Your Rights

You can:

• Access and export your data
• Delete your account and all associated data
• Revoke permissions for Health or Photos access at any time

Third-Party Services

We use the following third-party services:

• Firebase: For authentication, analytics, and crash reporting
• Google Analytics: For consent-based website analytics
• Apple Sign In: For account authentication
• Nominatim: For reverse geocoding location names

Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@kredd.net.