Deutsch · English · Español · Français · Nederlands

CLAYM privacy policy

App and website claym.me · Last updated: 31 October 2026

This is a translation for your convenience. Only the German version is legally binding.

1. Who is responsible?

The controller for data processing in the CLAYM app and on the website claym.me is the provider named in the legal notice. If you have questions about privacy, write to us at hello@claym.me or use the contact details in the legal notice.

2. What is CLAYM about?

CLAYM is a game: you record tours on foot, running, by bike or e-scooter. From your route we work out which streets you have explored and award points and territory for them. To do this, we have to process your location data during a tour. We do not sell data, show no advertising and do not pass your data on to third parties for advertising purposes.

3. What data we process

Account: email address, player name and password (stored only in encrypted form as a hash). Purpose: sign-in and running the game. Legal basis: Art. 6(1)(b) GDPR (contract/use of the app).

Location data and tours: Only while you are actively recording a tour (also with the screen locked) does the app store position, time, accuracy and altitude, and transfer them to our server after the tour ends. From this we calculate distance, duration, speed, elevation profile, explored streets and points. Outside a tour, your location is only used to centre the map on you and to plan a loop from your location; it is not stored. Legal basis: Art. 6(1)(b) GDPR. To detect unfair tours (e.g. by car or train), we check the speed (Art. 6(1)(f) GDPR, legitimate interest in a fair game).

Photos and notes that you add to a tour are stored on our server. Only you can see them.

Planned tours: If you plan and save a tour in the “Plan” section, we store in your account its name, the way of travel (e.g. cycling), the chosen points with their names and the calculated route with length, duration and elevation. A copy is kept on your device so that you can view the tour offline and export it as a GPX file. Only you can see your planned tours. The route is calculated by our own server with the software BRouter from OpenStreetMap data; no data is passed to other providers for this. Legal basis: Art. 6(1)(b) GDPR.

What other players see: your player name, your points, your rank in the leaderboard, the number of kilometres, sections and complete streets you have explored, and which streets belong to someone else’s territory. Nobody but you sees your tours, routes, photos, notes and email address. So choose a player name that is not your real name.

Friends: If you add friends, we store who is friends with whom, open requests, blocks and your personal invitation code (valid for 7 days). Friends only see each other’s public information listed above and your shared leaderboard – no tours, routes or locations. Anyone who opens an invitation link sees your player name. You can end friendships and block players at any time; deleting your account removes everything. Legal basis: Art. 6(1)(b) GDPR.

Signing in with Face ID or fingerprint: The biometric check takes place exclusively on your device. We receive no biometric data. Only a sign-in key is stored on the device in protected storage (Keychain or Android Keystore).

Anonymous usage statistics: So that we can improve the app, it records which screens are opened and which features are used (e.g. “tour started”, “loop planned”), together with device type, operating system, app version, screen size and language. For this we use the Umami software on our own server. No cookies are set, and neither your player name, your email address nor your location is transmitted. On receipt, the country or region is roughly derived from the IP address; the IP address itself is not stored. You can turn the statistics off at any time in your profile under “Anonymous usage statistics”. Legal basis: Art. 6(1)(f) GDPR (improving the app).

Website claym.me: The website sets no cookies, uses no advertising services, and loads fonts and all other content from our own server. Only your browser remembers your choice of language (local storage); it is not sent to us.

Visitor statistics for the website: To see which pages are read and where waiting-list sign-ups come from, we also use the Umami program on our own server for claym.me. It records the page viewed, the page you came from, campaign details in the link (e.g. utm_source), browser, operating system, device type, screen size, language and whether you signed up for the waiting list (with language, country and referring link, without player name or email address). No cookies are set and nothing is stored on your device. On receipt, the country or region is roughly derived from the IP address and, together with the browser identifier, an encrypted identifier that changes monthly is formed to count visits; the IP address itself is not stored. If your browser sends “Do Not Track”, nothing is recorded. Legal basis: Art. 6(1)(f) GDPR (improving the website).

Waiting list: Before the app launches, you can reserve a player name on claym.me. For this we store your desired player name, your email address, your country, the language of the page, which link you came through (e.g. from a forum) and the times of sign-up and confirmation. The country is preselected based on your connection and you can change it: to do so, we look up your IP address in a country database (DB-IP) on our own server; only the country is stored, not the IP address. You receive an email with a confirmation link; your name is only reserved after you click it. We delete unconfirmed sign-ups after 48 hours. Purpose: keeping your name free until launch, informing you once by email when the app launches, and evaluating how many people from which countries are interested in CLAYM (as a count only). The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, e.g. by email to hello@claym.me or via the unsubscribe link in our emails; we then delete your entry and the name becomes free again. We send the emails through our own mail server.

Server logs: Each access to our server logs the IP address, time, requested address and app identifier, in order to secure operation and fend off attacks; this also applies to visits to the website claym.me (Art. 6(1)(f) GDPR). The logs are deleted after 14 days.

4. Services of other providers

Hosting: Our server is operated by Hetzner Online GmbH in Germany (data processing on our behalf under Art. 28 GDPR).

Map tiles: The app loads the map images directly from OpenFreeMap. OpenFreeMap receives your IP address and the map section displayed, but not your tours. Map data © OpenStreetMap contributors.

Weather: For the weather information of a tour, our server queries Open-Meteo (Switzerland) for the weather at the approximate starting point and start time. Neither your IP address nor account data is transmitted.

Place search (Geoapify): If you search for a place while planning a tour or tap a point on the map, our server sends your search term or the coordinates of the tapped point and the centre of the visible map area (so that results near you come first) to Geoapify (KEPTAGO LTD, Paphos, Cyprus) and receives matching places. Your IP address, player name and account data are not transmitted. Legal basis: Art. 6(1)(b) GDPR.

App Store / Google Play: Downloads, updates, test versions (TestFlight) and future subscription purchases go through Apple or Google. Their privacy policies apply.

We determine place names for recorded tours from our own OpenStreetMap data on our server, without an external service. Only the place search when planning uses Geoapify.

5. How long we store data

If you delete your account in your profile, we immediately remove your account, all tours, planned tours, photos, points and your territory. In backups the data remains for at most 14 days.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Just write to us at hello@claym.me or use the contact details in the legal notice. You can also lodge a complaint with a data protection supervisory authority, e.g. the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).

7. Changes

If the app or the legal situation changes, we will adapt this policy. You can always find the current version at claym.me/datenschutz/en and in the app.