Privacy Policy
Last updated: 20 October 2026
Camino at Home is built so that your health data never leaves your iPhone. This policy explains what the app and this website process, why, and what your rights are.
Who is responsible
ZeitFlow UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany, email evgenii@zeitflow.de, is the controller under the EU General Data Protection Regulation (GDPR). We have not appointed a data protection officer because the law does not require one for us.
The app
Distance from Apple Health
With your permission, the app reads from Apple Health:
- walking and running distance;
- wheelchair distance;
- cycling distance, only if you switch on "Count cycling".
It reads no other health data. The app adds these distances up per day and keeps the result in a database on your iPhone, to show where you would be on your chosen Camino. This data never leaves your device. It is not sent to us or to anyone else, and it is not used for advertising or marketing.
You give this permission in the system's Health dialog (Art. 9 (2) (a) GDPR). You can withdraw it at any time in Settings → Apps → Health → Data Access & Devices → Camino at Home. Deleting the app deletes the on-device database.
iCloud
The app stores your Pilgrimage (the Camino you chose, its start date and its status) in iCloud key-value storage under your Apple Account, so that a new or restored iPhone can continue where you left off. This sync is run by Apple, and we have no access to it. It holds no health data. The legal basis is performing the service you asked for (Art. 6 (1) (b) GDPR). You can turn off iCloud for the app in your iPhone's settings.
Notifications
Morning notes are created on your iPhone from data that is already there. Nothing is sent to a server for them.
The route map
When you open the route map, the map tiles come from Apple Maps. Apple receives your IP address and the area shown, under Apple's privacy policy, but not your distance or Pilgrimage.
Purchases
The Pilgrim Pass is sold through Apple's App Store. Apple processes the payment under its own privacy policy, and we receive no payment details. To check that a purchase is valid and to unlock it on all your devices, the app uses RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA. RevenueCat receives the App Store transaction data and a random app user ID that is not linked to your name or email. The legal basis is performing the contract (Art. 6 (1) (b) GDPR). Transfers to the USA rely on the EU–U.S. Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses.
What the app does not do
The app has no user account, no analytics or advertising SDK, and does no tracking across apps or websites. If you have chosen in iOS to share analytics with app developers, Apple may pass us anonymous crash reports, under Apple's terms.
This website
The website is served by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, through Cloudflare Pages. To deliver the pages and protect them from attacks, Cloudflare processes your IP address, the time of the request, the page requested and your browser's user agent. Our legitimate interest is running a secure website (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU–U.S. Data Privacy Framework.
The website sets no cookies, uses no analytics and loads no third-party fonts or scripts. The typeface is served from this site.
Email to us is hosted by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as our processor. If you email us, we use your message and address only to answer you (Art. 6 (1) (b) or (f) GDPR) and delete them once the matter is closed, unless the law requires us to keep them.
Your rights
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time, with effect for the future. Because your health data stays on your iPhone, you control it directly there.
You also have the right to complain to a supervisory authority. The authority for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.
Children
Camino at Home is not directed at children under 16.
Changes
We update this policy when the app or the website changes. The date at the top shows the current version.