Grow knowledge in living Ponds

HopMap is designed to operate entirely on your device without collecting, storing, or transmitting any personal or user data to us or third parties. All processing—such as creating, editing, saving, and reviewing HopMap files (e.g., .HopMap or .json formats)—happens locally in your device's memory or storage.

• No Personal Data Collected: We do not collect, access, or store any personally identifiable information (PII), such as your name, email address, device ID, location, or usage analytics.
• No App Activity Data: We do not track your interactions within the App, such as features used, session duration, or content created.
• No Device or Performance Data: No crash reports, diagnostics, or telemetry are sent off-device.
• Local Files Only: HopMap files you create are saved to your device's local storage. Any sharing (e.g., via copy/paste, export, or OS share sheet to services like Google Drive) is initiated and controlled by you, and we do not facilitate or monitor these actions.
• Media Content (Images & GIFs): Using the new Media mode, you can add images and animated GIFs directly to your canvas. These media files are stored entirely locally as part of your .HopMap files (embedded as base64 or protobuf attachments). The app never uploads, scans, moderates, or transmits any media content off your device.
• Encryption Feature: Encrypted saving uses a user-provided password to secure file contents on-device via AES-CBC encryption with PBKDF2 key derivation. The password is used only during save/load (held briefly in memory and not persisted) and is not stored, transmitted, or accessible to us. We do not guarantee recoverability (e.g., lost passwords mean irrecoverable files) or security against advanced attacks—this is a convenience feature, not a professional encryption tool. For encrypted files, thumbnails and review previews use a static placeholder image (a frog on a lilypad) to avoid exposing content.

In summary: No data of any kind is sent to the developer or any third party except for standard Google Play Billing requests (handled securely and privately by Google) when checking subscription status or processing a purchase.

Billing Data: Google may collect standard billing info (e.g., payment method, transaction history) per their Privacy Policy. We access none of it—your subscription is processed end-to-end by Google.

To provide core functionality, HopMap requests the following Android permissions. These are used solely for on-device operations and do not involve data transmission:

We request these permissions at runtime where required and explain their use. You can revoke them via your device settings at any time, though this may limit App functionality.

HopMap integrates minimal third-party services, all focused on local or anonymized operations:

• Google Play Billing: For freemium features (e.g., subscriptions to unlock advanced modes). All payment processing, including purchase data and billing info, is handled entirely by Google. We receive no payment details, user identifiers, or transaction history—only an anonymized entitlement token confirming whether premium features should be unlocked (no payment details, no email, no name, nothing else). To support seamless offline use, HopMap caches this token locally after initial verification, granting access until the end of your paid billing period. For accuracy (e.g., cancellations or refunds), the app performs light verification checks on launch or resume when online—connect periodically to ensure continued access. See Google's Privacy Policy for details.
• Flutter Plugins: We use open-source libraries (e.g., file_picker, share_plus, flutter_local_notifications) for local file handling and notifications. These do not collect or share data off-device. Full list available in our pubspec.yaml (if hosted).

No advertising SDKs, analytics tools (e.g., Firebase Analytics), or trackers are included.

Since we collect no data:

• Use: All "data" (e.g., your canvas content) is processed ephemerally on-device for App features only, including local encryption/decryption during save/load.

Offline Subscription Access: Premium features remain active offline by trusting the cached paid period end-date. On cancel or payment failure, access continues until that date (your full paid time—no extras added). Refunds (Google's ~48-hour window) revoke immediately upon detection. We recommend connecting online occasionally (e.g., weekly) for verification—it's quick and keeps everything current.

• Sharing: We do not share, sell, or disclose any information about you. User-initiated shares (e.g., exporting files) are your responsibility and not mediated by us.

In the event of a device backup (e.g., via Google Drive), that's controlled by your OS/account settings—not the App.

HopMap now supports Media mode, which lets you add images and animated GIFs to your canvas. These become part of your local .HopMap files.

• All content you create—including any media—is stored only on your device and remains under your complete control.
• We do not review, moderate, scan, or have any visibility into the specific images, GIFs, or other content users add.
• Important: When you share a .HopMap file in any way, the recipient receives everything in that file, including any images or GIFs you added. Conversely, files you receive from others may contain media that is inappropriate, explicit, offensive, or unsuitable for certain audiences (including children).
• The developer cannot guarantee the suitability or appropriateness of any content in user-shared files. Please exercise caution and discretion when opening .HopMap files received from others.

This is a fully local, user-controlled app. You are responsible for the content you create and share.

HopMap is designed for users of all ages, including children aged 6 and above.

We do not collect, use, store, or share any personal information from any user — including children. No accounts, no analytics, no identifiers, no crash logs, nothing leaves the device except when the user explicitly shares a file themselves.

Because no personal information is ever collected or transmitted, HopMap fully complies with the Children’s Online Privacy Protection Act (COPPA), GDPR-K (EU/UK), and all similar children’s privacy laws worldwide. Parental consent is not required.

HopMap has been designed from the ground up to fully comply with Google Play Families Program policies and is intended to participate in the program.

In the Google Play Data safety section the app is declared as:

• No data collected
• No data shared

This declaration is accurate and complete.

All local operations use standard Android security (e.g., scoped storage for files). Encryption is implemented on-device but is not audited or warrantied for compliance (e.g., GDPR/HIPAA). We do not store data, so there's no central breach risk. Keep your device secure and use strong locks for sensitive HopMap files. Remember: Lost passwords cannot be recovered by us.

Depending on your location (e.g., GDPR in EU, CCPA in California), you may have rights to access, correct, delete, or object to data processing. Since we collect none, these are N/A—but contact us for clarification. For Google-handled billing data, exercise rights via your Google Account.

We may update this policy to reflect App changes. Significant updates will be notified in-app or via Play Store. Continued use after changes implies acceptance. Check back periodically.

For questions, concerns, or to exercise rights: Email hopmapdev@proton.me. We're a solo dev project, so responses may take a few days.

Thank you for using HopMap—we're building it to empower your ideas, not track them!