Privacy policy

1. Controller

We have not appointed a data protection officer because we are not required to. For any question, write to the address above.

In short: STRLL shows no ads, uses no analytics or tracking SDKs in the app, sets no cookies on the website and does not sell data.

2. This website

Hosting

The website is hosted by Vercel Inc. (USA). When you visit, Vercel processes technically necessary data such as IP address, time, requested page and browser identifier in server logs to deliver the site and protect it from abuse. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Counting page views

To understand which pages and campaigns work, we store for every page view: the page, the referring page (referrer), campaign parameters if present (utm_source, utm_medium, utm_campaign) and the time. We store neither your IP address nor any identifier, set no cookies and store nothing in your browser, so a page view cannot be linked to you as a person or to your other visits. The entries are kept at Supabase (see section 4). The legal basis is our legitimate interest in simple audience measurement (Art. 6(1)(f) GDPR).

Pre-registration

If you pre-register, we process your e-mail address, the operating system you choose (iOS or Android), the page language, the city you are most interested in if you name one, and, if you came through a campaign link, its source (utm_source). We use this only to tell you once that STRLL has launched. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by e-mail and we delete your entry right away.

We use double opt-in: after you submit, we e-mail you a confirmation link. Your pre-registration counts only once you confirm it. We store the link only as a hash value and it is valid for 48 hours. We delete unconfirmed entries after seven days. Resend (Resend, Inc., USA) sends the confirmation e-mail through its EU region (Ireland).

To protect the form from automated sign-ups we use Cloudflare Turnstile (Cloudflare, Inc., USA). As soon as you click into or fill in the form, your browser loads the Turnstile script from Cloudflare, and Cloudflare checks technical features of your browser to confirm you are human. In doing so Cloudflare sees, among other things, your IP address. If you only visit the page without using the form, nothing is loaded from Cloudflare. We only receive the result of the check. The legal basis is our legitimate interest in protecting against abuse (Art. 6(1)(f) GDPR). We send at most one confirmation e-mail per address per minute and at most three per day.

Referral links

When you open a referral link (strll.app/r/…), the page copies the referral code to your clipboard and forwards you to the App Store. The app can pick up the code after you sign in (see section 3). The page itself stores nothing.

Contact by e-mail

If you write to us, we process your e-mail address and your message to reply (Art. 6(1)(b) or (f) GDPR).

Fonts

All fonts are served from our own server. No data is sent to Google or any other font provider.

3. The STRLL app

Using the app without an account

You can use STRLL as a guest. Your progress and settings then stay on your device and nothing is synced to our servers, apart from loading content, routes through Apple and the features below that you actively use.

Account via Sign in with Apple

When you sign in with Apple, we receive an identifier for your account from Apple and, depending on what you share with Apple, your e-mail address or an anonymous Apple relay address. Our backend (Supabase) creates your account from this. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

With an account we sync the following data with our server so that it survives a reinstall and works across devices. On your first sign-in we also upload the progress you collected as a guest.

• Profile: display name, budget and dietary preferences, app language, total points, home location (see below)
• Mission progress: which mission in which city, its status and the times you started, arrived and completed it
• Badges with the time you earned them
• Your bucket list (saved cities and their order)
• Unlocked cities

The arrival time of a mission shows that you were at that place at that time. We do not store a continuous location history.

Location and compass

Location is the core of STRLL: a mission's content only opens once you are actually there (within about 100 metres). For this the app uses your precise location while it is open. Whether you have arrived is checked on your device. The compass direction to the destination is also calculated on your device only.

When you start a mission, the app asks you to extend location access to "Always" and to allow notifications. If you allow both, iOS watches an area of about 50 metres around the destination and the app shows a notification on your device when you enter it. iOS does this monitoring itself and your coordinates are not sent to us. You can change both permissions at any time in the iOS settings; the app keeps working, just without the background notification.

The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). Location access also requires your permission in iOS.

Routes and maps

When you show a walking route, the app sends your current location and the destination to Apple (MapKit) to calculate it. When you open a destination in Apple Maps, start and destination are handed over to Apple Maps. Apple's privacy policy applies to this.

Home location

So the app can estimate travel times to cities, it stores a home location. It is set when you confirm the suggested nearby city during setup, or when you choose "Use current location" in the settings. It stores the coordinates of your position at that moment and the city name. With an account it is synced to your profile. You can change or remove it in the settings.

Leaderboard

If you have an account and have collected points, your display name and score appear on the app's leaderboard and are visible to other users. No other data (location, progress, e-mail) is shown there. Your display name does not have to be your real name, and you can change it at any time.

Referrals

Your personal referral code is derived from part of your account identifier. If you share it and someone signs up with it, we store the link between the two accounts to count referrals. When you sign in, the app checks your clipboard once for a STRLL referral code. Other clipboard content is neither stored nor transmitted. iOS shows you a paste notice when this happens.

AI day plan ("Plan My Day")

When you create a day plan, an AI writes short texts about your stops. For this our server sends to Anthropic PBC (USA): the city name, the language and, for each stop, the mission's name, category and short description. We send neither your account identifier nor your location, name or e-mail address. To limit abuse we record against your account when you used the feature (at most 20 calls per day). The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

Loading content

The app loads missions, city data and images from our server (Supabase) and caches them. Technically, your IP address is visible to the server in the process.

Purchases

Purchases and subscriptions are handled entirely by Apple. We receive no payment data, only which content is unlocked.

Data on your device

Progress, badges, cached content and settings are stored locally on your device. The sign-in session is kept in the iOS Keychain.

4. Service providers and recipients

• Supabase Inc.: database, sign-in, file storage and server functions. Our project runs in a data centre in Ireland (EU).
• Vercel Inc. (USA): website hosting.
• Cloudflare, Inc. (USA): spam protection (Turnstile) on the pre-registration form.
• Resend, Inc. (USA): sending the confirmation e-mail for pre-registration, processed in the EU region (Ireland).
• Anthropic PBC (USA): texts for the AI day plan, using only the content data listed above.
• Apple: sign-in, maps and routes, purchases, notifications and iOS location services.

Where these providers act on our behalf, we work with them under data processing agreements. Where data is transferred to the USA, this is based on appropriate safeguards under Art. 44 et seq. GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.

We do not share data with anyone else unless the law requires us to.

5. Retention and deletion

• Account data (profile, progress, badges, bucket list, unlocks, referrals, AI day plan usage) is kept until you delete your account.
• Deleting your account is possible directly in the app under Settings. The data on our server is deleted immediately. To remove everything stored on your device, delete the app.
• Pre-registrations are deleted when you withdraw consent, otherwise no later than 30 days after the launch notice. Unconfirmed pre-registrations after seven days.
• Page views are deleted after 14 months at the latest.
• Server logs at Supabase and Vercel are deleted after their usual short periods.
• E-mails are kept as long as needed to handle your request or as required by statutory retention periods.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on our legitimate interest (Art. 21). You can withdraw any consent at any time with effect for the future. Write to info@kila-digital.de.

You can also complain to a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

7. Other

Children

STRLL is meant for people aged 16 and over. We do not knowingly collect data from younger children.

Changes

When the app or the website changes, we update this policy. The version published here, with the date above, applies.