Montrolo Privacy Policy

Last updated: 2026-09-26 · Contact: [email protected]

1. Who we are

Montrolo is an iOS exploration / walking app. Support: [email protected].

2. What the app does

Montrolo records walks (with permission), matches GPS to an OpenStreetMap-derived street network, and shows streets you have explored. You can use the app as a guest without an account; Sign in with Apple is optional and enables cloud sync and restore across devices. Available city packs currently include cities in Serbia, Istanbul, Dubai, and Abu Dhabi.

3. Data on your device

GPS during an active walk; one launch location for the map camera
Matched coverage, walk summaries, optional track files
Achievements, streak caches, city and UI preferences
Optional Apple Health workout routes (import only)
Downloaded OSM-derived city packs

Raw GPS tracks and Apple Health route coordinates are not uploaded to Montrolo servers. Local app data may be included in the standard encrypted iCloud or Finder device backup selected by the user.

4. Sign in with Apple

Optional. If you sign in, we use Apple’s user id and, if shared, name/email to create and authenticate your Montrolo account. Cloud sync starts automatically when the app has connectivity and a valid session. Guest mode keeps exploration data only on the device until you sign in.

5. HealthKit

Used only to import outdoor walk/run/hike GPS routes. We do not write to Health, sell Health data, or use it for advertising.

6. Location

Continuous GPS (including background) only after you start a walk. We do not share live location with other users.

7. Cloud sync

When you are signed in, servers may store account id, walk summaries, OpenStreetMap segment identifiers and meter intervals, per-walk new/revisited meters, heatmap pass counts, selected city, and derived progress. Full GPS polylines and Apple Health route coordinates are not uploaded. CDN packs.montrolo.com is served via Cloudflare. Guest users do not sync exploration data to Montrolo servers.

8. Product analytics

We use Amplitude (Amplitude, Inc., United States) to understand how the app is used. This is not advertising and not tracking across apps or websites owned by other companies. We do not collect the advertising identifier (IDFA). Amplitude’s IP-address and city tracking are turned off.

Amplitude receives a device identifier created by its SDK, plus app version, device model, operating system version, and language. It also receives session and app open/close events, and product events such as screens viewed, onboarding steps, the city you select, walk summaries (duration, distance, and point count), import counts, and short error categories.

If you are signed in, Amplitude also receives your Montrolo account id and account properties: account type, app language, appearance, selected city, whether setup is finished, whether Health import was authorized, coverage percent, walk count, and experience level. We do not send GPS coordinates, Health workout routes, your name, or your email to Amplitude.

9. Diagnostics

We use Google Firebase Crashlytics (Google LLC) to diagnose crashes and unexpected failures. A report can include a stack trace, device model, operating system version, app version, and a Crashlytics installation id. If you are signed in, the report includes your Montrolo account id. It may also include the selected city, app language, whether a walk was being recorded, and the names of recent in-app actions. Reports do not include GPS tracks or Health routes.

Apple MetricKit may record crash and performance diagnostics on the device through Apple’s own reporting. We do not sell personal data, and we do not share it with advertising networks or data brokers.

10. Other processors

Amplitude, Inc. — product analytics, stored in the United States
Google LLC (Firebase Crashlytics) — crash and failure diagnostics
Cloudflare — delivery of city packs at packs.montrolo.com; may process IP addresses as part of normal CDN delivery
Apple — Sign in with Apple, HealthKit import, and optional device backup

11. Retention

Guest data stays on the device until you reset progress, sign in and migrate, or uninstall. If you are signed in, account-scoped data on device is retained but hidden after sign out until reset or uninstall. You can delete your account in Settings → Delete account; this removes synced exploration data from Montrolo servers, clears local walk data on the device, and clears the account id from future analytics and crash reports. To delete analytics or crash records already stored under that account id at Amplitude or Google, contact [email protected].

12. Children

Not directed at children under 13.

13. OpenStreetMap

14. Changes

This policy may be updated; the date above will change.

15. Your rights (EU/UK)

If signed in, delete your account in Settings → Delete account, or contact [email protected] for access or deletion assistance, including analytics and crash records linked to your account id. Guests can clear local data by resetting progress or uninstalling the app.