Privacy Policy

Last updated: 22 October 2026

Onedermap is a travel map that runs on your device. This policy explains what information the app handles, what does and does not leave your device, and the choices you have. It applies to the Onedermap mobile app and to the onedermap.app website.

Summary

• The countries and cities you mark as visited are stored on your device. They are not sent anywhere unless you choose to turn on cloud backup.
• We never collect your name, location, contacts, or photos, we do not use advertising identifiers, and we do not sell or share your data with advertisers.
• Usage statistics and crash reports help us fix problems and improve the app. They use random identifiers and never include your travel history, and we do not link them to your name, email address, or sign-in. The one exception: a problem report you email us can include a Support ID, which links your email address to your usage statistics and purchase record (see "Contact" below).
• A few optional features — cloud backup, the Google Maps map style, and city search — involve third-party services. Each is described below, and each is off unless you choose to use it.

Information stored on your device

The app saves the following locally, so it can work offline:

• The countries you have marked as visited, with an optional "visited at" date.
• For premium users, the cities you have marked as visited — each with its name, country, and map coordinates, so the marker can be drawn while you are offline.
• Your preferences: appearance (System / Light / Dark), map style, how disputed territories are shown, and which layers are displayed on the map (cities, wishlist, home countries).

This information stays on your device until you delete it or uninstall the app. Settings → Backup & Data → Reset data clears your visited countries and cities; your preferences remain and can be changed at any time from Settings.

Usage statistics

We use PostHog to understand how the app is used — for example, how many people mark their first country or open the purchase screen. These events:

• include general technical information about the app and device, such as the app version, device model, and operating system;
• contain no personal information, GPS location, IP-derived location, or list of places you have visited;
• are tied to a random identifier for your app installation. RevenueCat uses the same random identifier for your purchase record, so we can relate how the app is used to whether premium was bought, and so we can occasionally show a specific installation an in-app offer. The identifier is not linked to your name, email address, or a cloud-backup sign-in, unless you include it in a problem report you email us (see "Contact" below), and a new one is created if you reinstall the app;
• are used solely to improve the app and its offers.

Anonymous crash reports

We use Sentry to be told when the app crashes or hits an error, so we can fix it. A crash report contains only what is needed to diagnose the fault:

• the technical description of the error, the app version, and your device model and operating system version;
• the language and region your device is set to — this is the language the app is displayed in, not where you are;
• a short trail of what the app was doing beforehand, such as which screens were open and which services were contacted. The contents of those requests are removed, so text you typed into the app is not included;
• whether the session ended in a crash, so we can judge how stable a release is;
• a random identifier for your app installation, so we can tell one person hitting a problem repeatedly apart from many people hitting it once.

Crash reports never include your name, email address, location, visited countries or cities, or any image of your map, and IP addresses are not stored with them.

Purchases

Purchases and subscriptions are processed by Apple or Google, with RevenueCat managing entitlements on our behalf. We never see or store your payment details. The app only records whether your account is premium or not. RevenueCat knows your purchase status under the random installation identifier described above.

From time to time the app may show an in-app offer or announcement, such as a seasonal discount. Whether you see one is decided on your device — for example, from whether you already have premium or how many countries you have marked — and none of that information is sent anywhere to make the decision. Each offer is shown at most once on each installation of the app.

Cloud backup (optional)

Cloud backup is off by default, and the app works fully without it. If you turn it on from Settings → Cloud backup:

• Signing in is handled by Apple or Google. Onedermap supports Sign in with Apple and Sign in with Google only, so we never see or store a password. We receive an identifier for your account and, where the provider supplies it, a name or email address, used only to show who is signed in.
• What is backed up: your visited countries and — for premium users — your visited cities, stored with our backup provider, Supabase, so you can restore them on another device. Nothing else about your device or your activity is uploaded.
• How it is protected: your backup can be read and written only by your own account, enforced by our backup provider, and your sign-in credentials are kept in your device's secure storage.
• Your controls: you can sign out at any time, which leaves your data on the device, or choose Delete account & cloud data to permanently remove your account and its backup from our provider.

Google Maps map style (optional, premium)

The standard map style is the default and draws from map data bundled with the app, without contacting Google. If a premium user selects Settings → Map style → Google Maps:

• Google supplies the map imagery. As part of that, Google may receive your IP address, information about your app and device, and diagnostic data, handled under Google's own privacy policy.
• Your visited countries and the dates you recorded are never sent to Google. The app draws them on top of the map using its own bundled data.
• You can switch back to the standard style at any time from the same screen.

Neither map style requests location permission or shows your device's location.

City search (optional, premium)

Premium users can mark cities as visited. The app includes an offline list of well-known cities that is searched entirely on your device. Only when a search finds no match in that list does the app look the city up with GeoNames, a public geographical database:

• The request contains only the text you typed. It does not include your identity, your device identifiers, or your list of visited places.
• As with any internet request, GeoNames receives your IP address, handled under its own terms.
• City information shown in the app is provided by GeoNames (CC BY 4.0).

Information we never collect

• Your location, whether precise or approximate, in the foreground or the background.
• Your contacts or photos.
• Advertising identifiers, or identifiers used to track you across other apps and websites.

Service providers

We share information only with the providers needed to run the features described above, and only to the extent set out in each section:

• PostHog — usage statistics
• Sentry — anonymous crash reports
• RevenueCat — purchases and subscriptions
• Supabase — cloud backup, if you enable it
• Google — the Google Maps map style, if you select it
• GeoNames — city lookups outside the offline list

Your choices and controls

• Clear the places you have saved on a device with Settings → Backup & Data → Reset data.
• Leave cloud backup off, or sign out at any time, from Settings → Cloud backup.
• Permanently delete your account and its cloud backup with Settings → Cloud backup → Delete account & cloud data. If you no longer have the app installed, email us and we will do it for you.
• Choose the standard map style, and leave city search unused, to keep the app entirely offline.

How long information is kept

Information on your device remains until you delete it or uninstall the app. A cloud backup is kept until you delete your account and cloud data. Usage statistics and crash reports are retained only for as long as they are useful for the purposes described above.

This website

The onedermap.app website does not use cookies, analytics, or third-party trackers, and does not collect personal information from visitors.

Children

Onedermap is not directed to children, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy as the app changes. The date at the top of this page shows when it was last revised, and any significant change will be described here.

Contact

Questions about this policy? Visit onedermap.app/support, or open Settings → About & Support → Contact & Feedback in the app.

The app never sends a message itself. Send feedback and Report a problem open your own email app with a draft addressed to us, and nothing is sent until you tap Send. If you email us, we receive your email address, your message, and the app and device details shown in the draft: the app version, your device model and operating system version, the app's language, and whether you have premium.

A problem report also includes a Support ID whenever the app can read it: the random installation identifier described under "Usage statistics" and "Purchases". Crash reports use a separate identifier and are not linked by it. It lets us find your purchase record and how the app has been used on that installation, so we can resolve purchase problems or offer you a refund or discount where we can. Sending it is what links your email address to that identifier, and you can delete the line from the draft before sending. Feedback messages never include it.

We use what you send only to reply to you and resolve your request.