Privacy Policy

Cairn is operated by Zlatin Ivanov, based in Bulgaria (the "data controller" under EU law). For anything in this policy, write to support@cairnmaps.app.

• Account details. When you create an account: your email address, a username you choose, and — if you sign in with Apple or Google — the identity token those providers share. Browsing as a guest requires no account.
• Photos you upload. The photo itself and its embedded metadata: GPS coordinates, capture date and time. This is the core of the app — your photo marks a spot on the shared map, visible to other users along with your username.
• People in photos. If a photo you upload shows identifiable people, that image becomes their personal data too. Only upload photos of people who are comfortable appearing on a public map (see our Terms). If you appear in someone else's photo, you can request its removal at any time — see "Your rights" below.
• Device location. Only if you grant permission, used to center the map near you. It is not stored or shared.
• Activity in the app. Spots you save, marks you earn, users you block, and reports you file.
• Purchases. Cairn Pro purchases are processed by Apple; we receive a purchase record tied to an anonymous app identifier — never your payment details, which stay with Apple.
• Diagnostics and usage. Crash reports (via Firebase Crashlytics) and a small set of anonymous usage events — such as a sign-up, an upload, or a paywall view — (via Firebase Analytics) that tell us whether the app works and which features matter. These are not linked to your identity, ad personalization is disabled, and they are never used to track you across other apps or sites.

• To provide the service you signed up for — your account, uploads, saved spots, logbook, and purchases (performance of a contract).
• To keep the platform safe and working — moderation of reports, blocking, crash reporting, and anonymous usage statistics (our legitimate interest in running a safe, functioning service).
• With your consent — device location, which you can withdraw anytime in iOS Settings.

Cairn is built on Google Firebase (Authentication, Firestore, Cloud Storage). Your data is stored on Google's infrastructure under Firebase's privacy terms. Cairn Pro purchases are managed through RevenueCat. Sun and weather details shown for spots are fetched from third-party services that receive only geographic coordinates — never your identity. These providers may process data outside the European Economic Area; where they do, transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Photos you publish, the spot details you write, and your username are public inside the app. Your email address is never shown to other users. Saved spots, blocks, and your logbook are private to your account.

For as long as your account is active. Published photos remain on the map until you delete them or your account. Moderation reports are kept only as long as needed to handle them.

Under the GDPR (and similar laws elsewhere) you can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and you may lodge a complaint with your local supervisory authority (in Bulgaria: the Commission for Personal Data Protection, cpdp.bg).

Two rights you can exercise directly in the app, no email needed:

• Delete everything: Profile → Settings → Delete account permanently removes your account, every photo and spot you uploaded, your saved spots, and your earned marks. There is no grace period or backup copy in the app.
• Remove an image of you: open the photo → ⋯ → Report → "I want this image of me removed". Removal requests are sent to our moderation inbox immediately and handled with priority.

For anything else — including erasure requests from people who don't use Cairn — email support@cairnmaps.app.

Cairn is not directed at children. You must be at least 13 years old — or the higher minimum age your country requires for consenting to data processing (14 in Bulgaria, up to 16 elsewhere in the EU) — and we do not knowingly collect data from children below that age.

If this policy changes, the new version will be posted here with an updated effective date.

Questions or data requests: support@cairnmaps.app