Privacy & Terms

Last updated: March 28, 2026

Terms of Service

For iOS users, these terms apply in addition to the standard Apple Licensed Application End User License Agreement. Google Play users are also subject to applicable Google Play platform terms.

Please read these Terms of Service carefully before using the Kanatago mobile application and related services operated by Kanatago AS. Your access to and use of the service is conditioned on your acceptance of and compliance with these terms.

1. Medical and health disclaimer

Important: Kanatago is a gamified walking experience, not a medical device or medical service.

We do not provide medical advice, diagnosis, or treatment. Step counts, distances, and other wellness-related metrics are estimates only and must not be relied on for medical purposes. Always consult a qualified healthcare professional before beginning any new exercise program if you have relevant health concerns.

2. Physical safety and virtual routes

You acknowledge that using Kanatago may involve physical activity in the real world. You are responsible for remaining aware of your surroundings and for using the app safely.

  • Situational awareness: Do not interact with app features while crossing streets, navigating traffic, or traversing unsafe terrain.
  • Virtual routes only: The routes shown in Kanatago are virtual representations powered by your step progress. They are not real-world navigation instructions and may not correspond to safe physical paths.
  • Assumption of risk: You voluntarily assume the ordinary risks associated with walking and outdoor activity, including weather, traffic, terrain, and interactions with other people.

3. Accounts, sign-in methods, and linked identities

You may create and access your Kanatago account using email/password and, where available, supported third-party sign-in methods such as Apple Sign In and Google Sign In. You may also be able to link or unlink supported sign-in methods in the app settings as long as your account retains a valid access method.

  • Account security: You are responsible for maintaining the confidentiality of your credentials and for activity that occurs under your account.
  • Provider terms: Your use of Apple Sign In, Google Sign In, Garmin Connect, HealthKit, and Health Connect is also subject to the applicable third-party provider terms and privacy practices.
  • Access protection: We may suspend, restrict, or terminate accounts used fraudulently, abusively, or in violation of these terms or our community rules.

4. User-generated content and conduct

Kanatago includes chats, shared routes, avatars, profile photos, memories, memory photos, memory comments, and other social features. You must not upload or share abusive, hateful, threatening, sexually explicit, dangerous, discriminatory, fraudulent, or otherwise objectionable material.

By posting text, images, or other content to the service, you grant Kanatago AS a non-exclusive, worldwide, royalty-free license to host, process, display, and distribute that content solely as needed to operate and improve the service features you choose to use.

Users can report specific memories, memory comments, profile photos, user accounts, and AI-generated content inside the app. Reports are reviewed for community safety, legal compliance, and app store policy compliance. Repeated or severe violations may lead to content removal, loss of community privileges, account suspension, or permanent bans.

5. Purchases, subscriptions, and service access

The app may offer subscriptions and consumable purchases for premium, social, storage-backed, and AI-powered features.

  • Billing: Payment is generally charged through your Apple ID or Google Play account upon confirmation of purchase.
  • Renewals and cancellations: Subscription renewals, cancellations, refund handling, and purchase history are generally managed through Apple, Google, and related payment infrastructure.
  • Service access: Paid subscriptions may unlock cloud-dependent features such as social features, shared routes, memories, AI features, or higher storage and usage limits. If a subscription lapses, some paid features may be paused.
  • Consumables: Consumable purchases are generally final and non-refundable except where required by law or platform policy.

6. AI-generated content

Kanatago may use AI to generate Local Lore, Journey Stories, StoryTime recaps, Trail Duel content, and related experiences. AI output may be inaccurate, repetitive, incomplete, ambiguous, or fictional and must not be relied on for factual, educational, medical, legal, financial, or professional decisions.

If you encounter AI-generated content that is offensive, inappropriate, misleading, unsafe, or otherwise problematic, you can report it directly in the app using the report action displayed alongside each AI result. Reports may include the AI feature type, the generated output, associated route or location context, your selected reason category, and your user identifier so we can review and act on the report.

7. Updates and modifications

We may develop and provide updates to the application, including upgrades, bug fixes, patches, and new features. You agree that the application may automatically download and install these updates where supported by your platform, and that updates will be treated as part of the service and governed by these terms.

8. Availability and warranty disclaimer

The service is provided on an "AS IS" and "AS AVAILABLE" basis to the maximum extent permitted by law. We do not guarantee uninterrupted operation, perfect accuracy, availability, security, or error-free functionality.

We also do not guarantee the quality, completeness, reliability, or safety of user-generated content, third-party services, or AI-generated output. While we use commercially reasonable measures to secure the service, no platform can be guaranteed immune from security incidents or failures in third-party components.

9. Limitation of liability

To the maximum extent permitted by applicable law, Kanatago AS is not liable for indirect, incidental, consequential, special, exemplary, or punitive damages, or for any loss of profits, revenues, goodwill, data, or other intangible losses arising from use of the service.

To the extent permitted by law, Kanatago AS's aggregate liability for claims relating to the service will not exceed the greater of USD 50 or the amount you paid to Kanatago AS in the 12 months preceding the event giving rise to the claim.

10. Governing law

These terms are governed by the laws of Norway, without regard to conflict-of-law rules. Disputes will be handled in the courts of Oslo, Norway unless mandatory law requires otherwise.

11. Service communications and notices

We may send service-related communications to the email address registered to your account where reasonably necessary to operate, secure, support, or administer the service. These communications may include account verification messages, security alerts, password-reset and recovery messages, billing and subscription notices, important changes to features or availability, material changes to these terms or our privacy policy, moderation or account-enforcement notices, and other legally required or operationally necessary notices.

You are responsible for keeping your account email address accurate and up to date. Service-related communications are not marketing communications, and you may continue to receive them even if you opt out of optional newsletters or promotional emails.

Community Rules

Kanatago includes community features such as chat, shared routes, memories, memory comments, shared media uploads, profile avatars, and AI-assisted experiences. These features are available only if you use them responsibly.

1. Prohibited content and behavior

  • Harassment, bullying, threats, stalking, intimidation, doxxing, or targeted abuse.
  • Hate speech, discriminatory content, or content promoting violence or self-harm.
  • Sexually explicit, exploitative, or otherwise inappropriate content.
  • Spam, scams, impersonation, malware, fraud, or attempts to misuse the service.
  • Uploading or sharing content you do not have the right to use.

2. Moderation and enforcement

We may review, restrict, remove, or moderate user content and accounts when needed to keep the service safe, comply with law, investigate abuse, or enforce these terms. This may include reviewing reports about memories, comments, profile photos, chat content, and AI-generated content.

Users can report content and block other users directly within the app. Repeated or severe violations may lead to content removal, loss of community privileges, account suspension, or permanent bans.

3. Community consent

Before using certain community features, the app may ask you to explicitly accept the Terms of Service, Privacy Policy, and Community Rules. If you do not accept them, some posting or sharing features may remain unavailable.

Privacy Policy

1. Data controller

Kanatago AS
Oslo, Norway
Contact: [email protected]

2. Data we collect and process

  • Health and motion data: Depending on the step source you choose, we may process device motion data, Apple Health data, Android Health Connect data, or Garmin Connect data to power virtual route progress and related gameplay features. We do not sell this data or use it for advertising.
  • Location data: We may access limited device location to center maps, help create routes, or support app features. Virtual progress is driven by steps, not by storing continuous real-world GPS history.
  • Virtual location context for AI: AI features may use virtual route context such as route location names, virtual weather, and virtual progress. We do not send your real-world GPS history to the AI provider. For some AI features, personal data such as usernames, route names, and user-generated memory contents may be replaced with placeholders before processing.
  • User content: We process routes, chat messages, memories, memory comments, avatars, uploaded images, and other media so the service can work.
  • Content and AI reports: When you report user-generated or AI-generated content, we may store the report reason, the reported content, AI feature metadata, route or location context, and your user identifier so we can review and act on violations.
  • Account and identity data: We store data such as your email, username, and platform identity provider identifiers to manage your account. If you choose Apple Sign In or Google Sign In, we and our authentication providers may process the provider-specific identifier and basic account information needed for authentication, account linking, and recovery.
  • Notification and communication data: If you allow notifications, we may store push tokens and notification preferences so we can deliver chat, route, memory, comment, trail duel, and related notifications.
  • Service communication data: We use your registered email address and related communication records to send account, security, support, billing, subscription, legal, and other service-related notices that are necessary or proportionate to operate and administer the app.
  • Optional marketing communications: Where we offer newsletters, product announcements, or promotional updates, we handle those separately from service-related notices and in accordance with applicable law and your communication preferences.
  • Route sharing and access control data: If you create private or managed routes, we may store invite lists, admin email lists, team membership, and related access-control data so you can manage shared experiences.
  • Operational sync metadata: To keep syncing reliable, we may store technical metadata such as step source status, sync checkpoints, source-switch timestamps, start offsets, last successful sync times, and error information.
  • Opt-in analytics: If you consent, we collect limited product analytics events to improve the app. We do not use your health data, route names, username, email, or real-world coordinates for analytics.

Health Connect and motion permission details

  • Android Activity Recognition / physical activity: On Android, Kanatago may request physical activity access so the app can read step-related motion data from the device where available and keep your virtual route progress updated.
  • Health Connect read access: If you choose Health Connect as your step source, Kanatago requests read access to step data so it can calculate route progress, sync totals, and support related gameplay features.
  • Background access: If you separately allow Health Connect background access, Kanatago may read step data when you are not actively using the app so route progress can stay current.
  • Access to past data: If you separately allow Health Connect access to past data, Kanatago may read eligible historical step data that Health Connect makes available so we can set up or repair your step totals more accurately.
  • Limited use: We use health, fitness, and motion data only for the in-app features that depend on step progress, source syncing, route gameplay, reliability, fraud-prevention, and user-requested support. We do not sell this data and we do not use it for advertising, marketing profiling, credit decisions, insurance decisions, housing decisions, employment decisions, or data-broker purposes.
  • User choice: You can stop sharing Health Connect or motion data by changing your step source, revoking the permission in Android or Health Connect settings, or deleting your account.

3. How we store and share data

We use Supabase and other service providers to operate the product. Data is transmitted using encryption in transit, and storage access is controlled according to the feature. The database and storage systems are managed with access controls designed to limit access to authorized personnel and systems.

We do not sell personal data. Health, motion, and related account data is primarily processed within Kanatago and stored through our infrastructure providers where needed to operate, secure, support, and legally maintain the service.

Visibility in shared routes

When you voluntarily join a shared route or team, other participants in that route may be able to see your display name, avatar, current step contribution, and virtual location on the route map.

Visibility of community content

Content you choose to post in shared areas of the service, such as chat messages, shared route memories, memory comments, and route-related media, will be visible to users who have access to that conversation or route.

Security and storage notes

  • Encryption: Data is encrypted in transit using SSL/TLS.
  • Session security: Authentication session tokens are stored using encrypted secure storage provided by the platform where available.
  • Avatar and profile photos: Some avatar images may be more broadly accessible by direct link than restricted route-only content.
  • Restricted shared media: Memories and other restricted shared media are stored with access controls intended to limit visibility to authorized users.

4. Third-party services

Depending on the enabled feature, Kanatago may use trusted service providers to operate the app, billing, authentication, AI features, analytics, notifications, and infrastructure.

  • Supabase: Authentication, database storage, file storage, and server-side functions.
  • Mapbox: Maps and route visualization. Mapbox may also collect de-identified or anonymous telemetry related to map usage in accordance with its own privacy practices. Where the Mapbox attribution or information control is shown in the app, users can use it to access Mapbox information and telemetry choices.
  • Google Gemini: AI-generated app features based on virtual context rather than real-world GPS history.
  • Google Sign-In: Authentication and account linking where available.
  • OpenWeather: Virtual-location weather context for some AI or route experiences.
  • RevenueCat: Subscription and purchase status management.
  • Apple Authentication: Sign in with Apple and account verification features.
  • Apple Health / HealthKit: Step-count data on iOS if you choose Apple Health as your step source.
  • Health Connect: Step-count data on Android if you choose Health Connect as your step source.
  • Garmin Connect: Imported step-related data if you connect Garmin.
  • Expo Application Services: App delivery and over-the-air update infrastructure.
  • Expo Notifications: Push notification delivery if enabled.
  • PostHog: Opt-in product analytics.
  • Apple and Google Play services: Platform services related to billing, downloads, updates, and app distribution.
  • Resend: Email-related workflows where applicable.

When Health Connect or other health integrations are enabled, we use the received step data only for Kanatago features and for the limited infrastructure needed to store, sync, secure, and support the app. We do not sell Health Connect data, and we do not permit advertising use of it by service providers on our behalf.

5. Legal bases and retention

Where GDPR applies, we generally process personal data because it is necessary to perform our contract with you, because you have given consent, or because we have legitimate interests in securing, operating, improving, moderating, and administering the service.

Service-related communications are generally processed because they are necessary to perform our contract with you, comply with legal obligations, or pursue our legitimate interests in operating, securing, supporting, and administering the service. Optional newsletters or promotional communications are handled separately in accordance with applicable law and your communication preferences.

We retain data for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain safety and abuse-prevention systems. When you delete your account, we will remove or anonymize personal data that is no longer required to be retained.

Health and motion data, including Health Connect step data and related sync metadata, is retained only as long as reasonably needed to provide route progress, preserve step-source integrity, investigate sync issues, protect against abuse, and comply with legal obligations. When no longer needed, it is deleted or anonymized.

6. Your rights

  • You may request access to the personal data we hold about you.
  • You may request correction of inaccurate data.
  • You may request deletion of your app account data.
  • You may request portability where applicable.
  • You may request restriction of, or object to, certain processing where applicable.
  • You may withdraw analytics consent in the app settings.

7. Account deletion

You can request deletion inside the app or, if you cannot access the app, through the public workflow at account-deletion.html. That page explains what is deleted, what may be retained for legal, security, financial, or abuse-prevention reasons, and how long manual deletion requests may take.

8. Contact

If you have questions about privacy, terms, support, or deletion, contact [email protected] or use support.html.

Account Deletion

The public deletion page is available at https://kanatago.app/account-deletion.html. It is public, reachable without login, and intended for store reviewers and users who cannot access the app.

You can also delete your account from within the app where supported. Manual deletion requests may require identity verification before processing.