Terms of Service

Last updated: January 11, 2026

Please read these Terms of Service ("Terms") carefully before using the Kanatago mobile application ("Service") operated by Kanatago AS ("us", "we", or "our"). Your access to and use of the Service is conditioned on your acceptance of and compliance with these Terms.

1. Medical & Health Disclaimer

We do not provide medical advice, diagnosis, or treatment. The step counts, distances, and other metrics provided by the app are estimates only and should not be relied upon for medical purposes. Always consult with your physician before beginning any new exercise program, including walking regimens.

2. Physical Safety and Assumption of Risk

You acknowledge that using Kanatago requires physical activity in the real world. By using the Service, you agree that:

• Situational Awareness: You are responsible for maintaining awareness of your surroundings at all times. Do not operate any app features while crossing streets, navigating traffic, or traversing difficult terrain.
• Not a Navigation Tool: The routes shown in Kanatago are virtual representations used for gameplay progress. They are not intended to be used as real-world navigation instructions. We do not guarantee that the virtual routes correspond to safe, walkable paths in the real world.
• Liability Release: You voluntarily assume all risks associated with your physical activity, including but not limited to falls, contact with other pedestrians, effects of weather, traffic, and road conditions. Kanatago AS is not liable for any personal injury, property damage, or death resulting from your use of the app.

3. User Generated Content & Conduct (Zero Tolerance)

Kanatago includes features that allow interaction with others (Teams, Chat, Avatar uploads, and Treasures). We have a Zero Tolerance Policy for objectionable content.

You agree not to post, upload, or share content that is:

• Defamatory, discriminatory, hate speech, or mean-spirited.
• Obscene, pornographic, or offensive.
• Harassing, threatening, or doxxing other users.

This policy applies to all user-generated content, including avatars, photos and text messages hidden inside "Treasures" placed on routes.

Enforcement: Users can block abusive users and report objectionable content directly within the app. Kanatago AS reviews reported content within 24 hours. Any user found violating these rules will be immediately banned and their content removed.

4. Subscriptions and Payments

Some parts of the Service are billed on a subscription basis ("Subscription(s)"). Subscriptions are managed via the Apple App Store (facilitated by RevenueCat). By subscribing, you acknowledge and agree to the following:

• Billing: Payment will be charged to your Apple ID account at the confirmation of purchase.
• Renewal: The subscription automatically renews unless it is canceled at least 24 hours before the end of the current period. Your account will be charged for renewal within 24 hours prior to the end of the current period.
• Management: You can manage and cancel your subscriptions by going to your account settings on the App Store after purchase.

5. Limitation of Liability

To the maximum extent permitted by applicable law, Kanatago AS shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses.

In no event shall Kanatago AS's aggregate liability for all claims relating to the Service exceed the greater of fifty US dollars (US $50.00) or the amount you paid Kanatago AS, if any, in the last 12 months.

6. Governing Law

These Terms shall be governed by and construed in accordance with the laws of Norway, without regard to its conflict of law provisions. Any legal action or proceeding arising under these Terms will be brought exclusively in the federal or state courts located in Oslo, Norway, and the parties hereby irrevocably consent to the personal jurisdiction and venue therein.

Privacy Policy

Your privacy is important to us. This policy explains how we handle your data.

1. Data Controller

For the purposes of the GDPR (General Data Protection Regulation), the Data Controller responsible for your personal data is:

Kanatago AS
Oslo, Norway
Contact: [email protected]

2. Data We Collect

• Health Data (Steps): We integrate with Apple Health (HealthKit) to read your step count and distance. This data is used solely to advance your progress on virtual routes. We do not use or disclose to third parties user data gathered from HealthKit for advertising, marketing, or other use-based data mining purposes other than improving health management (specifically, to support the app's core gameplay features based on your physical activity).
• Location Data: We access your location to allow you to create routes starting from your current position and to determine if you have reached the location of a hidden Treasure. We do not continuously track your background location for movement; movement is calculated via step count.
• User Content: We collect the routes you create, images you upload for avatars, photos and text messages you upload as "Treasures," and the messages you send in team chats.
• Account Info: Your email address and username are stored to manage your account. If you choose to sign in or link your account using your Apple ID, we also store the unique identifier provided by Apple and any email address or name you choose to share via the "Sign in with Apple" service.

3. How We Store and Protect Your Data

We use Supabase, a secure industry-standard backend service, to store your user profile, chat history, treasure data, and route progress.

• Encryption: All data is encrypted in transit (using SSL/TLS) when moving between your device and our servers. The database is also encrypted at rest to protect against unauthorized physical access.
• Chat Privacy: To maintain a safe community and comply with safety requirements, chat messages are encrypted in transit and at rest on our secure servers. This allows our moderation team to review content that has been reported by users for violating our Terms of Service. Access to this data is strictly limited to authorized personnel for safety and support purposes.
• Public Content (Avatars): To ensure performance and gameplay functionality, profile avatars and team avatars are stored in storage buckets with public read access. This allows other users participating in the same route to see your avatar or the treasures you have left behind. Your private account data, health data, and email address are never stored in these public buckets.

4. Third-Party Services

We share minimal data with trusted third-party services to operate the app:

• Mapbox: Used to render maps and calculate virtual route geometries.
• RevenueCat: Used to process and manage subscription status.
• Apple Authentication: Used to verify your identity when you sign in or link your account using your Apple ID.

5. Your GDPR Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can correct inaccurate data directly within the app settings (e.g., username, profile photo).
• Right to Erasure ("Right to be Forgotten"): You can delete your account at any time via the app settings, which permanently removes your data from our servers.
• Right to Data Portability: You have the right to request your data in a structured, machine-readable format.

6. Data Deletion

You have the right to delete your account at any time. You can do this directly within the app settings via the "Delete Account" button. This will permanently remove your profile, steps history, treasures, and chat logs from our servers.

7. Contact Us

If you have questions about this Privacy Policy or Terms of Service, please contact us at [email protected].