Privacy Policy
Last updated: 6 October 2026
Syria Trails ("we") is operated by Anas Akramah (independent developer). The app is an atlas of Syria's landmarks and maps. We collect the least we need for the features to work, we do not sell your data, and we show no ads built on you.
1. What we store on our servers
| Data | Why | How long |
|---|---|---|
| An account id (anonymous for a guest: no name, no email) | So saved places, trips and visits work | Until you delete the account. A guest account unused for 180 days is deleted automatically with everything in it |
| Your email and display name (if you create an account) | To sign in and recover the account | Until you delete the account |
| Saved places, trips, their stops and your notes | They are the app's own features | Until you delete them or the account |
| Ratings (stars only, no text) and likes | To show a place's average rating and like count | Until you delete the account |
| Verified visits: the place and the time of verification only | Your "passport" history and the visitor counter | Until you delete the account |
| A place-view log: (account, place, day) | To count one view per person per day | 35 days |
| Your settings: language, interests, home governorate, notification and location choices | To personalise the app | Until you change them or delete the account |
| Edit suggestions you send, and the contact detail if you wrote one | To improve content and reply to you | Until handled or removed by our periodic cleanup |
| Crash reports (error type, a few technical lines, app version, operating system) | To fix bugs | 90 days |
Crash reports are tied to your account id (no name, no email). Before sending we strip email addresses, long numbers and coordinates from the text.
2. Location
- We do not store your location and do not build a movement history, and we never use location for advertising.
- When you tap "Log a visit" we send your live coordinate once to a server function that computes the distance to the place and returns only yes/no. The coordinate is not written to any table or log; only the fact that the visit was verified, its time and the place are kept.
- Knowing that you are "near a place" (to highlight the Save or Visit button) is computed on your device and is not sent.
- If you refuse location permission, the whole app works except visit verification.
- To protect verification from forgery we reject mock locations and limit new visits per hour and the travel speed between two visits.
3. Photos
- A keepsake photo you take with the camera stays on your device and is not uploaded to our servers. Saving it to your gallery or sharing it is your choice.
- Landmark photos in the app are licensed; the photographer's name and the licence are shown with each photo and included on the share card.
4. Permissions
- Location: only for visit verification and showing proximity (optional).
- Camera: for the keepsake photo (optional).
- Notifications: if you turn them on (optional).
- Gallery: to save a keepsake photo or share card if you choose to.
5. What we do not do
We do not sell your data, share it with advertisers, or use third-party tracking, advertising or analytics libraries. The map is drawn from administrative-boundary data and does not load tiles from external map services.
6. Who processes the data
We store and run the data through Supabase (database, authentication and storage on cloud infrastructure). Your data may be processed in a country other than yours. We require the hosting provider to protect it, and give direct access only to those who need it to run the service.
7. Security
We protect data with encryption in transit (HTTPS), row-level access rules so each user sees only their own data, and rate and size limits against abuse. No protection is absolute; we fix any vulnerability reported to us promptly.
8. Your rights
- Deletion: from "Account → Security" you delete your account and all data tied to it immediately and permanently. You can also request deletion without the app at https://syriatrails.com/delete-account or by the email below.
- Access, correction, a copy: write to the email below and we reply within 30 days.
- Turn off notifications and location at any time in the app or device settings.
- Objection and complaint: you may object to processing and contact the data-protection authority in your country.
9. Children
The app is not directed at anyone under 13, and we knowingly collect no data from them. If we learn of an account belonging to a child under that age, we delete it.
10. Changes
If we change this policy materially we tell you in the app before it takes effect and update the "Last updated" date.