Skip to content

Privacy Policy

Last updated : June 21, 2026

Camino (“we”, “our”, “the app”) is a fitness application that turns your daily steps into virtual progress — both on your personal stats and as a contribution to a shared, community World Tour. This policy explains what data we collect, why, and how we protect it.

1. Data we collect

Account information

When you create an account, we collect your email address, a username and, optionally, a display name. Your password is handled and stored securely (hashed) by our authentication provider, Supabase. We never see or store your password in plain text.

Health and activity data

With your explicit permission, we read your daily step count from Health Connect (Android) or HealthKit (iOS). We request read-only access and we read step data only — no other health or fitness metrics. We never write to your health records.

From your steps we derive and store, on your account: your daily step log, your cumulative step total, an estimated distance walked, your current and longest daily-goal streaks, and the number of steps you have contributed to the community World Tour. This data is used solely to power the app's features described below. We do not sell your health data, and we do not share it with third parties for advertising.

Feedback you send us

If you use the in-app “Contact us” form to send a suggestion or report a bug, we store the message you write, its category (suggestion or bug), your platform (iOS or Android) and the app version, linked to your account so we can follow up.

2. How we use your data

  • Calculate your virtual progress based on your real steps
  • Count your steps toward the shared community World Tour
  • Award badges, track daily streaks and compute your experience points (XP)
  • Display a public leaderboard ranking walkers by XP
  • Authenticate you and send essential account emails (sign-up confirmation, password reset)
  • Read and respond to the feedback you send us

3. Information visible to other users

Camino includes social features. The following information is visible to other signed-in users:

  • Leaderboard — your username, display name, total steps and XP.
  • Community World Tour — your personal step contribution to the current tour.

Your email address, your day-to-day step history and the feedback you send are never shown to other users.

4. Data storage and security

Your data is stored on Supabase (hosted on AWS, in the European Union) with Row Level Security (RLS) enabled on every table, ensuring you can only access your own data. All communication between the app and our servers uses HTTPS encryption.

5. Third-party services

  • Supabase — authentication and database hosting.
  • Mapbox — map rendering. The app obtains a short-lived map token (valid 1 hour) and no account data is shared with Mapbox. As with any online map, standard technical data such as your IP address is processed by Mapbox to deliver map tiles.
  • Resend — delivers our account emails (sign-up confirmation, password reset). It processes your email address for that purpose only.
  • Health Connect / HealthKit — provide your step data (read-only, with your permission).

6. What we do not collect

Camino does not collect your precise location or GPS coordinates, does not access your photos, contacts or microphone, and contains no third-party advertising or behavioral-tracking SDKs.

7. Data retention

Your data is retained for as long as your account is active. When you delete your account, your profile and all associated data (steps, streaks, badges, leaderboard entry, World Tour contributions and feedback) are permanently and immediately deleted. See our account deletion page for details.

8. Your rights and choices

You can at any time:

  • Revoke health permissions from your device settings (Health Connect / Apple Health)
  • Edit your display name and username from the in-app settings
  • Delete your account and all associated data yourself, directly in the app (Settings → Delete account). This action is immediate and irreversible.
  • Contact us to ask any question or request access to your data

9. Children's privacy

Camino is not directed at children under 13. We do not knowingly collect data from children under 13.

10. Contact

For any question about this privacy policy or to exercise your rights, contact us at quentin.cacciatore@iofacto.com.

11. Changes

We may update this policy from time to time. The latest version will always be available at this URL.