Privacy Policy
Camino de Mount Doom — last updated June 2026
Camino de Mount Doom is a fitness step-tracking app operated by an individual developer in Poland (European Union). This policy explains what data we collect, why, and your rights.
What we collect
- Account data: email address and display name when you sign up.
- Step data: daily step counts synced from your Garmin watch via Connect IQ and/or your Oura Ring via the Oura Cloud API.
- Group data: group membership and invite codes if you join a fellowship.
- Technical data: a per-user API key used by the watch app to authenticate step sync requests.
- Oura OAuth tokens: if you connect an Oura Ring, we store your Oura access and refresh tokens in order to sync daily step counts on your behalf. No other Oura health data (sleep, readiness, heart rate, etc.) is accessed or stored.
Why we collect it
We use this data to track your cumulative walking progress on a map, show your position to members of groups you join, and keep your account and watch connected. We do not sell your data or use it for advertising.
Where data is stored
Data is stored in Supabase (PostgreSQL) in the EU region. Step sync requests are processed by Supabase Edge Functions. Garmin relays watch data through the Garmin Connect app on your phone. Oura step data is fetched directly from the Oura Cloud API using OAuth tokens you have authorised.
Retention
We keep your data while your account is active. Daily step logs and profile totals are retained to show your journey progress. You may delete your account at any time from the Profile screen in the web app, which removes your profile and associated data.
Your rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate data (e.g. update your display name).
- Erasure — delete your account and all associated data in the app.
- Portability — request a copy of your data in a machine-readable format.
- Object to processing where applicable, and restrict processing in certain cases.
- Lodge a complaint with your local data protection authority.
Contact
For privacy requests or questions, email yurimalcz+camino@gmail.com.