Privacy Policy
Last updated: 28 July 2026
This policy explains what Thrift Map does with your data. It is published by Hugo Software.
The short version: Thrift Map has no accounts, collects no personal data, contains no advertising, and contains no analytics or tracking of any kind. Your location never leaves your device.
No accounts, no personal data
The app never asks for your name, email address, phone number or any other identifier. There is no sign-up and no login. We hold no user records, because there are none to hold.
Location
If you allow it, the app reads your device's approximate or precise location. It is used for exactly two things, both on your device only:
- Centring the map on where you are.
- Sorting nearby shops by distance from you.
Your location is not sent to our servers, not stored anywhere, not written to any log, and not shared with anyone.
Location is optional. If you decline the permission, the app still works — you can search for any city or area by name.
What is sent over the network
To draw the map, the app makes requests to our backend at thrift.bnj.app, which is a caching proxy in front of public OpenStreetMap services. It sends:
- The map viewport — the rectangle of the map currently on your screen — so we can return the shops inside it. This is the area you are looking at, not your position, and it carries no identifier of you.
- Search text you type when looking up a city or area.
Our proxy keeps a short-lived shared cache: shop results by rounded area for about 10 minutes, and search results by search term for about 1 hour. This cache is shared across everyone and is not tied to any user. Our servers keep only ordinary, transient web request logs for operational purposes; they are not used to build a profile of anyone.
No advertising, no analytics, no tracking
The app contains no advertising SDK, no ad network, no advertising identifier, no analytics SDK, and no crash-reporting SDK. Nothing tracks you across other apps or websites.
Third parties
Using the app causes requests to these services, which is inherent to loading a map:
- OpenStreetMap (Overpass API and Nominatim) — shop data and place-name search.
- CARTO — map tile images.
Like any web request, these carry standard technical information including your IP address. We do not control those services; their own privacy policies apply.
Google Play processes all subscription payments. We never receive your card or payment details — only aggregate, anonymised sales reporting from Google.
Stored on your device
The app stores one thing locally: a flag recording that you have seen the introduction screen. Your subscription status is read from Google Play, not stored by us. Uninstalling the app removes all local data.
Children
The app is not directed at children and collects no data from anyone, of any age.
Your rights
Because we collect and store no personal data, there is no personal data of yours for us to access, correct, export or delete. See the Data Removal page for details.
Changes
If this policy changes, the updated version will be published on this page with a new date.