Privacy policy
Last updated: 15 July 2026
Templathon ("we", "us") is operated by Templathon Ltd. This policy explains what we collect through the Templathon mobile app, why, and your choices. Contact: hello@templathon.com.
What we collect
Account data. When you sign in we store your email address and, from the one-time profile form, your age range and home country. If you sign in with Google, we receive your email from your Google profile.
Route activity. When you complete checkpoints and routes we store your check-in timestamps, quiz scores, badge tiers, completion times, and chosen mode (normal or speedrun), linked to your account so your progress follows you across devices.
Location data (anonymized). While a route is active, the app records location points (latitude/longitude with timestamps) at intervals. These points are stored with a random per-walk session identifier and your coarse demographics (age range and home country), never with your account identifier. We keep no stored mapping between location trails and user accounts. Location logging runs only during an active route and stops when the route ends.
Waitlist. If you join our waitlist we store the email address, optional name, and phone platform you provide.
What we do not collect
No contacts, photos, files, advertising identifiers, or location outside an active route. We show no ads and use no third-party advertising or analytics SDKs.
How we use data
- To run the game: verify checkpoint visits, award badges, keep your progress.
- To improve routes and the app.
- To produce aggregated, anonymized insights about visitor movement at cultural sites (for example, busiest hours or average dwell time at a checkpoint). These are statistical summaries; they never identify individuals, and location trails cannot be linked back to accounts by any stored identifier.
- To contact waitlist members about beta access (unsubscribe anytime).
Sharing
We do not sell personal data. Aggregated, anonymized statistics (never individual trails or personal details) may be shared with cultural-heritage and tourism organizations. Our infrastructure providers process data on our behalf: Google Firebase (authentication, database: Google LLC) and Mapbox (map display: Mapbox Inc.). Map tiles are fetched from Mapbox as you view maps, which involves your IP address as with any internet service.
Storage and security
Data is stored in Google Firebase (Firestore) with access rules restricting reads to your own account data and to authorized Templathon administrators. Anonymized location points are readable only by administrators.
Your choices and rights
- Location permission is optional; without it you can browse routes and maps but not check in.
- Delete your account data: email hello@templathon.com from your account email and we will delete your profile and completions within 30 days. Anonymized location points contain no account link and therefore cannot be matched to you for deletion. This is by design.
- Waitlist removal: reply "unsubscribe" to any email or contact us.
Depending on where you live (e.g. UK/EU GDPR), you may have rights to access, correct, or erase your personal data. Contact hello@templathon.com.
Children
Templathon is not directed at children under 13 (or the equivalent minimum age in your country), and the profile form's youngest age band is 18–24.
Changes
We will update this page and the date above when this policy changes.