Privacy Policy
Barcelona Walks & Quests — last updated 23 July 2026
This policy explains what the Barcelona Walks & Quests iOS app does with your data. It is written to be read, not to be survived. If anything here is unclear, write to us and we will explain it in plain words.
The short version. The app contains no analytics, no advertising, no crash reporting and no tracking of any kind. Your location is used on your device to check you in at a stop and is never stored or sent to us. The only thing we keep about you is a list of the stops you have visited, and — if you choose to create an account — your email address. You can delete all of it from inside the app.
Who is responsible
The data controller is:
Stanislav Kotyk
Manresa, 08241, Catalonia, Spain
privacy@walksandquests.com
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| An anonymous account identifier, created automatically when you first open the app | So your walking progress is saved and does not disappear if you close the app or change phone | Performance of a contract (Art. 6(1)(b) GDPR) — this is the service you asked for |
| The list of quest stops you have checked in at | To show your progress, award badges and let you continue a walk later | Performance of a contract |
| Your email address — only if you choose to create an account | To sign you in and restore your progress and purchases on another device | Performance of a contract |
| Your device language and appearance preference | To show the app in your language and theme. Stored on your device only | Performance of a contract |
That is the complete list. We do not collect your name, your photographs, your contacts, your device advertising identifier, or any behavioural profile.
Your location
The app asks for location access while you are using it. It never asks for background location, and it cannot see where you are when the app is closed.
Your coordinates are used on your device, in memory, for two things: to work out whether you are close enough to a stop to check in, and to point the in-app compass. Your coordinates are never saved and never sent to us. When you check in, the only thing recorded is the identifier of the stop — for example roman-1 — not where you were standing, and not when you passed anywhere else.
We do not build a route history, we do not track your movements between stops, and we have no way to reconstruct where you walked.
Maps
Maps are provided by Mapbox. To draw the map, your device requests map tiles from Mapbox servers, and those requests necessarily tell Mapbox which part of the map you are looking at. That area usually corresponds to where you are, so in practice Mapbox receives an approximate indication of your whereabouts while the map is on screen.
We have disabled Mapbox's optional usage telemetry in the app, so no additional analytics are sent. Mapbox acts as a processor for map delivery and has its own privacy terms, available on the Mapbox website.
Purchases
Districts and the whole-city bundle are bought through Apple's In-App Purchase. Apple handles the payment; we never see your card details, billing address or any payment information. We only learn which content you are entitled to, so the app can unlock it. Apple's handling of your purchase is governed by Apple's own privacy policy.
Who else sees your data
- Supabase — hosts the database and the sign-in system that store your account identifier, your visited stops and your email address, on our behalf, as a processor.
- Mapbox — delivers map data, as described above.
- Apple — processes purchases and distributes the app.
- Resend — delivers the sign-in and confirmation emails we send you.
We do not sell your data, we do not share it with advertisers, and we do not use it to build profiles. There are no third-party analytics or advertising SDKs in the app.
Where your data is stored
Your account and progress are stored on Supabase infrastructure in Switzerland (Zurich region). Switzerland is recognised by the European Commission as providing an adequate level of data protection, so no additional transfer safeguards are required. Where any other processor operates outside the European Economic Area, transfers are covered by the European Commission's Standard Contractual Clauses.
How long we keep it
Your progress and account are kept for as long as you use the app, so that you do not lose them. If you delete your account, everything associated with it is deleted immediately — see below. If you simply delete the app without deleting your account, the anonymous record may remain on our servers; write to us and we will remove it.
Deleting everything
You can delete your account and all associated data from inside the app, in the profile screen. This removes your account, your email address if you linked one, and your entire progress history from our servers, and clears the saved progress on your device. It is immediate and it cannot be undone.
Purchases are held by Apple against your Apple ID, not by us, so deleting your account does not cancel them — you can restore them later with “Restore purchases”.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable form. Because the app stores so little, most of this is available directly in the app; for anything else, write to privacy@walksandquests.com and we will respond within one month.
If you believe we have handled your data improperly, you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the supervisory authority in your own country.
Children
The app is not directed at children under 13 and we do not knowingly collect data from them. The app is a walking guide intended for general audiences.
Automated decisions
We do not carry out any automated decision-making or profiling.
Changes to this policy
If we change how the app handles data, we will update this page and change the date at the top. Significant changes will be announced in the app.