Effective: July 30, 2026
MapFill is a game that reveals a world map as you physically move. Privacy is simple here because the app is built to keep your data on your device.
Location
MapFill uses your device's location (including in the background, if you allow "Always" access) for exactly one purpose: revealing the map around where you are. Your location history is converted into revealed map chunks and stored only on your device. It is never uploaded, shared, or sold: no server ever receives your location, with or without a multiplayer account.
If you revoke location access in Settings, the app stops revealing new areas but your existing map remains.
Map data
To draw the map, the app downloads public map tiles from OpenFreeMap (openfreemap.org), a free service based on OpenStreetMap data. Like any web request, tile requests expose your IP address and the general map area being viewed to that service. No account, identifier, or precise location is sent.
When location tracking is interrupted (for example, iOS pauses the app during a drive), the app reconstructs the missed road path by sending the two gap endpoint coordinates to the OSRM public routing service (router.project-osrm.org). Only those two points are sent — never your location history — and no account or identifier accompanies the request.
Multiplayer (optional)
If you open Profile and pick an explorer name, MapFill creates an anonymous account and stores exactly three things on our server (hosted on Supabase): your chosen username, your total chunk count, and your km² explored. There is no email, password, or contact information — the account is anonymous.
Adding a friend is a request the other person has to accept; a friend code on its own does not give anyone access to your data. Friends can see those three things — nothing else. By default, your location history and map shape never leave your phone. If you never pick a name, no account is created and nothing is stored.
Map sharing (optional, off by default)
Profile has a "Share my map" switch, off unless you turn it on. With it on, the app also uploads the outline of your revealed map — which chunks you have uncovered — so friends you have mutually added by code can view its shape from the Scoreboard. This is the map outline only: it carries no timestamps, no routes in order, and it is never your live location. It is visible only to your mutual friends, not to the public leaderboard.
Turning the switch off deletes the uploaded copy from the server immediately, not just future updates. Deleting your account deletes it as well.
Reporting a name
If you report another player's username as offensive, we store the reported name, the time, and an anonymous identifier for the account that reported it, so the report can be reviewed. Nothing else is recorded, and the reported player is not told who reported them.
Analytics and tracking
MapFill contains no analytics, no advertising, no third-party tracking SDKs, and does not track you across apps or websites.
Data deletion
Your revealed chunks and settings live on your device; deleting the app deletes them. If you created a multiplayer account, "Delete account" in Settings removes your username, friend code, scores, friend links, and any shared map outline from the server.
Contact
Questions: mapfill.app@gmail.com
Changes
If a future version adds features that change any of the above, this policy will be updated first and the change noted in the app's release notes.