Huella · FRANKITO Trading Co.

Privacy, stated plainly

Effective 21 August 2026 · Applies to the Huella iOS app

Everything you record stays on your phone. Huella has no account system, no analytics, no ads, and no trackers. Exactly two things ever touch the network, and both are named below.

What stays on the device: your data

Every walk you record — the route, every GPS point, barometric elevation, pace, voice notes, landmark pins, imported routes, trips — is written to a local database on your phone. There is no sign-in, because there is no server holding your data to sign in to.

We cannot see your walks. Not “we promise not to look” — there is no copy anywhere for us to look at.

What touches the network, and why

Map and terrain tiles (Mapbox). Drawing the map, downloading an offline region, and the AR rangefinder’s elevation lookups request tiles from Mapbox’s servers. A tile request necessarily tells Mapbox which area of the map is being fetched, along with the app’s public access token — the same arrangement as any app that shows a map. Mapbox’s handling of those requests is covered by the Mapbox privacy policy.
Peak names (OpenStreetMap). When you download an offline region, Huella asks the community-run Overpass API for named summits in that area, once, so mountains can be identified with no signal later. The request contains a bounding box and nothing about you.

Recording a walk never requires either. With no signal, recording, history, stats and GPX export all work in full — that is the app’s founding rule. Features that genuinely need a connection (live terrain measurement in the AR view) say “no signal” plainly instead of failing quietly.

Permissions, and what each is for

Permission	Used for
Location	Recording your route, including with the screen off during a walk. Your location is written to the on-device database and nowhere else.
Motion & Fitness	The barometer, for accurate elevation gain, and motion activity, to pause recording automatically when you stop moving.
Microphone	Voice notes on the trail, recorded only while you hold the button. Stored on-device with the walk.
Camera	The AR horizon view that names peaks and measures terrain. Camera frames are rendered on screen and never stored or transmitted.

Each permission is requested only when you first use the feature that needs it, and the app works without any you decline — you just lose that one feature.

Your data is yours to keep or destroy

Export anytime. Every walk exports as GPX — an open format any mapping tool can read. No export tier, no account wall.
Delete anytime. Deleting a walk removes it and every recorded point with it. Deleting the app removes everything, because everything lives inside it.
Nothing to close. There is no account to delete, because none was ever created.

If sync ever ships

An optional backup-and-sync feature may come later. If it does, it will be opt-in, off by default, and recording will never require it — local-first is an architectural rule in this app, not a marketing line. This policy will be updated before any such feature ships.

Questions

Open an issue on the Huella repository — the same place the app’s source lives.