Privacy Policy

Last Updated: September 11, 2026

Trstmap is a map of places recommended by people you choose to add as friends. This policy describes what the Trstmap app and this website collect, why, who it is shared with, and how to get it deleted. Trstmap is operated by OlympusML. For anything in this policy, write to contact@olympusml.com.

1. What we collect

  • Account: your email address, and the name your Apple or Google account returns when you sign in. Sign in with Apple can hide your real address behind a private relay address; we only ever see what Apple sends.
  • Profile: the username you pick, your display name, and the profile picture you upload.
  • Places you save: the name of the place, its coordinates, the note you write about it, and whether you marked it private or shared with friends.
  • Friends: the friend requests you send and accept. A friendship exists only when both people accept it.
  • Location: with your permission, your device location, used to show where you are on the map and to bias place search toward what is near you. We do not store a history of where you have been.
  • Technical: app version and operating system version, so the app can fetch the right update.

There is no advertising SDK and no third-party analytics in the app. We do not track you across other companies' apps or websites.

2. Why we use it

To run the service and nothing else: to keep you signed in, to show your places on your map, to show your places to the friends you accepted, to let friends find you by username, to deliver app updates, and to keep accounts secure.

Under the GDPR our legal basis is the performance of our contract with you (providing the app), your consent where you grant location access, and our legitimate interest in keeping the service secure.

3. Who sees your information

  • Your friends. People whose friend request you accepted see your username, display name, profile picture, and the places you marked as shared, including the notes on them. Places you mark private stay private. Removing a friend stops it.
  • Mapbox serves the map and place search. Rendering the map and searching sends map coordinates and your search terms to Mapbox.
  • Google Places supplies details and photographs for places you open, which means the place you look at is sent to Google.
  • Apple and Google handle sign-in when you choose their button.
  • Expo delivers over-the-air app updates; the update request carries your app and operating system version.

We do not sell your personal data, and we do not share it with data brokers or advertisers. We disclose data to authorities only where the law requires it.

4. Where it is stored

Your account, profile, places and friendships are stored in a database we run ourselves on our own servers in Portugal, inside the European Union. Your profile picture is stored on the same infrastructure.

5. Deleting your data

You can delete any saved place from the app at any time. To delete everything, open Settings > Delete Account in the app: that removes your profile, your places, your friendships and your profile picture. The deletion is immediate and cannot be undone.

If you cannot reach the app, email contact@olympusml.com from the address on the account and we will delete it for you. Backups are kept for up to 14 days and are then overwritten, so a deleted account disappears from backups within that window.

6. Your rights

If you are in the European Economic Area or the United Kingdom you have the right to access, correct, export, restrict or delete your personal data, and to object to processing. Write to contact@olympusml.com and we will answer within 30 days. You may also complain to your national supervisory authority; in Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).

7. Children

Trstmap is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

8. Security

Traffic between the app and our servers is encrypted with TLS. Access to your rows in the database is enforced per user by row-level security, so one account cannot read another account's private places. No system is perfect: if we ever discover a breach affecting your data, we will tell you and the relevant authority as the law requires.

9. Changes

If this policy changes we will update the date at the top of this page, and for material changes we will say so in the app.

10. Contact

OlympusML — contact@olympusml.com. Support questions are answered on our support page.