Privacy Policy
Takums is a map and walking game. To make it work we need some of your data — most importantly the routes you walk. This policy explains, in plain language, what we collect, why, who helps us, how long we keep it and what you can do about it.
In short
- We only record your location while you are recording an activity.
- Step data is synced only if you switch it on, and you can delete it at any time.
- The first and last 300 metres of a shared track are hidden, so others can't see where you live.
- No ads, no ad trackers, no selling of data. Ever.
- Your data is stored on our servers in Germany (EU).
- You can delete your account — and everything in it — from the app.
1. Who is responsible for your data
| Controller | WD Team, SIA |
|---|---|
| Registration number | 40203097825 |
| Address | „Priekuļi“-2, Mālpils parish, Sigulda municipality, LV-2152, Latvia |
| info@wdteam.co | |
| Phone | +371 24400020 |
We have not appointed a data protection officer, as the law does not require it for us. Write to the e-mail above with any privacy question — a real person will answer.
2. What this policy covers
This policy applies to the Takums website (takums.com and its language versions), the web map at maps.takums.com and the Takums apps for iPhone and Android (together, Takums).
3. What we process, why and for how long
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Account: name, e-mail, password (stored only as a secure hash), language, profile picture if you add one; if you sign in with Apple or Google — the identifier they give us | To create and run your account | Contract (Art. 6(1)(b) GDPR) | Until you delete your account |
| Sign-up choices: when you accepted the Terms and this policy, which version, and whether you asked for launch news | To show what you agreed to | Legal obligation to demonstrate consent (Art. 7(1)) and legitimate interest | While your account exists |
| Newsletter (only if you sign up on our website or tick the box when registering): e-mail address, language, when you signed up and confirmed, IP address at sign-up | To tell you when the apps launch and, now and then, about major Takums news | Your consent (Art. 6(1)(a)), which you can withdraw at any time using the link in every e-mail | Until you unsubscribe; unconfirmed sign-ups are deleted after 30 days |
| Activities and location: GPS tracks you record, distance, time, elevation, and the zones you claim | Maps of your walks, zones, statistics, challenges | Contract | Until you delete the activity or your account |
| Steps: daily and hourly step counts from Apple Health or Health Connect (only if you switch step sync on) | Step totals, leaderboards and step challenges | Your explicit consent (Art. 9(2)(a)) — step data may be considered health-related | Until you switch sync off and delete the data (one tap in the app), or delete your account |
| Social features: groups, teams, leagues, friends, challenges, posts, comments, reactions, trail invitations and replies | So you can take part with others | Contract | Until you delete them, leave, or delete your account |
| Places, routes and searches: saved places and folders, planned routes, share links, recent searches | So you can find them again | Contract | Until you delete them or your account |
| Connected services (only if you connect one, e.g. Strava, Garmin, Polar, Fitbit): access tokens and the activities you import | To import your activities | Contract / your request | Until you disconnect the service |
| Notifications: your device's push token | To send the notifications you allow | Consent (given in your phone's settings) | Until you turn notifications off or sign out |
| Server logs: IP address, browser/app version, requested address, time | Security, preventing abuse, fixing errors | Legitimate interest (Art. 6(1)(f)) | Up to 90 days |
| Cookie choices on the website: consent ID, your choices, anonymised IP address, browser type, time | To remember and prove your choice | Legal obligation (Art. 7(1)) | Up to 24 months |
| Messages you send us | To reply | Legitimate interest | Up to 24 months after the conversation ends |
Location. The app only uses your location with your permission. It records a track only after you press record, and — during an active recording — it may continue in the background so the track isn't broken when your screen is off. Showing your position on the map happens on your device and is not stored.
4. What other people can see
- Your display name and profile picture are visible to people in your groups, leagues and challenges.
- Zones you claim are visible to members of the league they belong to.
- For each activity you choose who sees it. When a track is shown to others, the first and last 300 metres are cut off so your home or workplace is not revealed.
- Each group member decides whether their steps are shared with that group.
- Company groups may show a combined public total — never individual tracks.
5. What we never do
- We do not show ads and do not use advertising or analytics SDKs in the apps.
- We do not sell or rent your data, and we do not track you across other apps or websites.
- We do not use step or health data for marketing, and we never share it with advertisers or data brokers.
- We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Leaderboards are just rankings.
6. Who helps us
We use a small number of service providers. They process data only on our instructions or, where noted, as independent services you choose to use.
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers where your account and activities are stored | Germany (EU) |
| Cloudflare, Inc. | Delivering the website and map quickly and protecting them from attacks | Global network; EU–US Data Privacy Framework + Standard Contractual Clauses |
| Bugzio (our own tool) | Cookie consent, site monitoring | Our servers in Germany (EU) |
| Apple Inc. | Sign in with Apple, Apple Health (on your device), push notifications | USA; Data Privacy Framework |
| Google LLC | Sign in with Google, Health Connect (on your device), push notifications (Firebase Cloud Messaging), web fonts in the web map | USA; Data Privacy Framework |
| Esri, Inc. | Satellite imagery. Your device loads imagery directly from Esri, so Esri sees your IP address and the map area you view | USA; Standard Contractual Clauses |
| Amazon Web Services | Terrain elevation data, loaded directly by your device in the same way | EU/USA; Data Privacy Framework |
| Twilio SendGrid | Sending e-mails, if we e-mail you (for example the launch news you asked for) | USA; Data Privacy Framework |
| Services you connect (Strava, Garmin, Polar, Fitbit, Huawei) | Importing your activities — under their own privacy policies | Depends on the service |
We may disclose data to authorities where the law requires it.
7. Transfers outside the EU/EEA
Our own servers are in the EU. Where a provider above processes data outside the EU/EEA, the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
8. Your rights
You have the right to:
- access your data and receive a copy;
- correct inaccurate data (most of it you can edit yourself in the app);
- delete your data or your whole account;
- restrict or object to processing based on legitimate interest;
- data portability — your tracks can be exported as GPX, and we will send the rest in a machine-readable format on request;
- withdraw consent at any time (for example switch off step sync) — this does not affect processing before withdrawal.
Write to info@wdteam.co. We reply within one month. You may also complain to a supervisory authority — in Latvia the Data State Inspectorate (Datu valsts inspekcija, Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv), or the authority in your country: Lithuania — VDAI, Estonia — Andmekaitse Inspektsioon, Finland — Tietosuojavaltuutetun toimisto.
9. Deleting your account
You can delete your account in the app or the web map (Profile → Delete account). This immediately deletes your profile, activities, zones, steps, places, routes, posts and connections from our live systems. Copies in encrypted backups are overwritten as the backups rotate. If you cannot sign in, e-mail us from the address on the account and we will delete it within 30 days.
10. Security
All traffic is encrypted (HTTPS/TLS). Passwords are stored only as secure hashes. Access to servers is limited to the people who maintain them. If a breach affecting your data ever happens, we will inform you and the authorities as the law requires.
11. Children
Takums is intended for people aged 16 and over. Younger users may use it only with the consent of a parent or guardian. If you believe a child has given us data without such consent, write to us and we will delete it.
12. Changes to this policy
If we change this policy, we will publish the new version here with a new date. If the change is significant, we will tell you in the app or by e-mail before it takes effect.
13. Contact
WD Team, SIA · „Priekuļi“-2, Mālpils parish, Sigulda municipality, LV-2152, Latvia · info@wdteam.co · +371 24400020