Last updated: 8 September 2026. This policy covers the apps HABITAT and JENDRALLEK. For this website, see the website privacy policy.
Controller
Leon Jendrallek, sole trader. Address and contact details are in the legal notice.
What the apps do not do
This is the shortest part, and it matters more than the rest:
- No account for HABITAT. The map works without signing up, without a name, without an email address.
- No counting, no analytics, no advertising IDs. The apps contain no third-party analytics component and no third-party crash reporter. There is nobody for usage data to go to.
- No profile. We keep no record of who was where.
Location
HABITAT asks for your location in order to show what is nearby and to put the blue dot on the map. JENDRALLEK asks for it in order to measure the distance and pace of a run.
Without an account, your location stays on the device. It is not sent to us and not stored anywhere on our side.
There are three exceptions, and they are listed here because they are true:
- A calculated walking route. Asking for a route to a point sends the start point and the destination to the OpenStreetMap routing service (
routing.openstreetmap.de). Nobody can calculate a route without those two points. We do not store the request; what the service itself logs is covered by its own terms. - A tour with a linked account. If you link your JENDRALLEK account inside HABITAT, every finished tour is transferred there — including the recorded line, that is, a sequence of coordinates with timestamps. It then sits in our database at Supabase (servers in the EU) and can only be read with your own account. Without linking, this does not happen and the tour stays on the phone. The map itself needs none of this — it works in full without signing in.
- Recording in the background. While a tour is running, HABITAT keeps recording the route even when the screen is off or another app is in the foreground. Otherwise every tour would have gaps as soon as the phone went into a pocket. iOS shows this with a blue bar at the top, and it happens only between “Start” and “Finish” — never before, never after. We do not ask for the “Always” permission, only for “While Using”.
On the lock screen and the home screen
During a tour, HABITAT shows distance, time and pace in the Dynamic Island and on the lock screen. A widget can sit on the home screen showing how much daylight is left and when you were last outside.
Both live on the device and are drawn from there. Nothing goes to us or to anyone else; we do not even learn whether the widget is used at all.
What stays on the device
Everything the apps remember sits in the app's storage on the phone. It is not transferred to us:
- Downloaded map areas for use without a network
- Saved places, including your own note
- Recorded tours and runs — without a linked account. With an account they additionally go there, see above.
- The find of the day and which areas have been claimed
- In JENDRALLEK also: training, nutrition, sleep, care — and health entries such as illness, pain, cycle and journal never leave the device, not even to sync between two devices.
Deleting the app deletes this data with it.
Which third-party servers the apps contact
A map needs map data, and not all of it sits with us. Each of these servers sees the device's IP address — that is unavoidable when fetching data from the internet. What it additionally sees is in the last column.
| Service | App | What for | What is transmitted |
|---|---|---|---|
karten.jendrallek.euour own storage at Cloudflare |
both | The map tiles | Which part of the map is shown |
services.arcgisonline.comEsri |
both | Aerial imagery | Map section — only when aerial imagery is switched on |
nominatim.openstreetmap.org |
both | Place search | The search term you typed |
routing.openstreetmap.de |
both | Calculating walking routes | Start point and destination — see above |
overpass-api.de and two fallback servers |
both | Loading the points around you | Map section |
commons.wikimedia.org |
both | Images for places | Coordinates of the place you tapped |
api.opentopodata.org, api.open-elevation.com |
both | Elevation values for the view | Coordinates of the map section |
api.open-meteo.com |
JENDRALLEK | Weather for the run | Coordinates rounded to one decimal place (about 11 km) — enough for weather, not enough for an address |
hiking.waymarkedtrails.org |
JENDRALLEK | Marked hiking trails | Map section |
world.openfoodfacts.org |
JENDRALLEK | Food database for the scanner and the search | The scanned barcode or the search term you typed |
world.openbeautyfacts.org |
JENDRALLEK | Database for care products | The scanned barcode |
These services are run by OpenStreetMap and volunteers. We send them no name, no identifier and nothing by which a device could be recognised again.
Camera and photos
Only in JENDRALLEK, and only when you trigger it yourself: the barcode scanner reads the code on a package — no image is stored. Your own photos of meals, tours and progress, and a profile picture, stay on the device.
The emergency call
Both apps can hand your position to somebody you choose. The app opens the phone's own text-message app with your coordinates, a map link to www.openstreetmap.org and the time already filled in. It is sent by hand, by you. Nothing goes through us, and no server of ours sees it.
The message deliberately contains no name and no wording about how you are — only where you are and when. Whoever receives it takes your location out of the device; that is the point of the feature, and it happens only when you press the button.
Partner links
JENDRALLEK shows product recommendations that lead to www.amazon.de and carry a partner tag. The link is only opened when you tap it, and it opens in the phone's browser — the app sends nothing there by itself. What Amazon does once the page is open is governed by Amazon's own privacy policy. Every screen with recommendations says that they contain partner links.
The account in JENDRALLEK
JENDRALLEK can be used without an account; everything then sits on the device. If you create an account in order to use friends, duels or shared plans, that transfers your email address, username and the data belonging to those features to our provider Supabase.
Friends only see what you have explicitly released. Raw performance figures and place badges are off by default. For place badges, only the place name and the first visit are shared — never a point on the map and never where somebody was last. Turn the switch back off and the badges are deleted, not just hidden.
Legal bases
- Location, camera, photos: consent under Art. 6(1)(a) GDPR — the phone asks, and saying no has no consequences beyond the corresponding feature being unavailable.
- Fetching map data: performance of a contract under Art. 6(1)(b) GDPR — without these requests there is no map.
- Account in JENDRALLEK: performance of a contract under Art. 6(1)(b) GDPR.
Your rights
Access, rectification, erasure, restriction, data portability and objection under Art. 15 to 21 GDPR. Consent can be withdrawn at any time in the phone's settings.
Right to lodge a complaint with the supervisory authority: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Schwerin, Germany.
Changes
If what the apps do changes, this policy changes with it. The date at the top says when it was last updated.