Privacy policy

Short version: we keep the little we need to run the app, we never sell anything, and what you put on the map is public by design.

What we hold

• Your email address, for signing in. There is no password: we send a six-digit code to that address each time, and the code stops working once it is used or after a short while.
• Your display name, your level and your points, which are public.
• Your profile photo, if you add one. It is public and shown next to your reviews.
• Your Instagram username and YouTube channel, if you add them. They are public: buttons on your Nade profile open them. We do not connect to either account or read anything from it.
• Feedback you send from the menu, with the app version. It reaches us by email, and we answer at your sign-in address.
• What you contribute: spots, reviews, star ratings, photos, visits, amenity answers, vehicle access answers, and reports. All public, except reports, which only we see.
• Your favorites, which only you can see.
• Who you follow and who follows you, which only you can see. Everyone can see how many follow you.
• Your position, while the app is open, to show the map around you and to place a new spot. It is not recorded and not sent anywhere.

Who else sees something

• Supabase hosts the database, the files and the sign-in.
• Resend sends the emails with your sign-in codes.
• Esri serves the satellite imagery, so it sees which part of the map you look at.
• Place search sends what you type to Photon, run by komoot in Germany, with your position rounded to about a kilometer when it is known. No account, no email.

Thumbs up

A thumbs up on a review is public, and so is who gave it.

What stays on your phone

A few things are kept on the phone itself and sent nowhere:

• Your signed-in session, so you do not have to sign in every time.
• A spot you added with no signal, with its photos, until it goes up. It is sent the next time you have a connection, and deleted from the phone once it has.
• Your settings: language, distance units and map view.
• A note that you have seen the welcome screen. It is also kept on your account, so it does not come back on a new phone.

Deleting the app removes all of it, including any spot that never got sent.

Deleting your account

Settings → Delete my account. Your login goes: email, sessions, and your favorites, your follows, Instagram username and YouTube channel with them.

What was public stays on the map — spots, reviews, photos, visits, points and badge — shown as "Former Nader". A map that erased itself every time somebody left would not be much of a map.

You choose between two options, neither pre-ticked. "Delete, definitely" keeps nothing that links back to you. "Delete, but remember me" keeps two things so your contributions can come back if you sign up again with the same address: a keyed fingerprint of your email (an HMAC-SHA256 — never the address itself, and it cannot be turned back into one) and your old display name. They are used only when someone confirms that same address on a new account.

Your rights

Depending on where you live you can ask for a copy of your data, a correction, or its deletion: hello@nade-overland.com. We answer as soon as we can.