Privacy Policy

Effective date: 9 August 2026
Last updated: 9 August 2026

This policy explains what Peace to This Place (“the app”) does with your information. It covers the app on both Android and iOS.

---

Peace to This Place is provided by Grid and Garden (“we”, “us”), of 116 AGNES RD STE 200 KNOXVILLE TN 37919.

For the purposes of the UK/EU GDPR we are the data controller for the limited processing described below. You can reach us at contact@gridandgarden.com.

Your walks, your notes and the people you record stay on your device. There is no account, no server operated by us, no analytics, no advertising and no tracking. We cannot see your data.

The only information that leaves your device is:

1. Coordinates and address text sent to Google Maps, so the app can draw a map,
   find an address and plan a route.
2. Anything in an export file that you choose to create and share.

What	Detail
Journeys	The sequence of locations recorded while a walk is running, its start and end time, and the transport type
Encounters	The time, your notes, whether you have marked it complete, and optionally the location
Saved and cached routes	Routes you saved, and previously generated route data, so the app does not repeat network requests
Settings	Language, measurement units, and notification preferences
App lock	If you set a PIN, only a salted PBKDF2 hash of it is stored. The PIN itself is never stored

This is held in a private database and in private app preferences that other apps on your device cannot read.

Backups. On Android, this data is excluded from Google cloud backup and from device-to-device transfer, so it does not leave your phone that way. On iOS, app data is included in your iCloud or local device backup if you have backups switched on. Those backups are held in your own Apple account under Apple’s terms, not by us. To move your data deliberately, use the app’s export feature rather than relying on a backup.

The app collects precise location, and only while a walk you have started is in progress.

• Recording begins when you start a walk and stops when you end it.
• Recording continues while the app is in the background or the screen is off,
  so that a walk is not cut short when you put your phone away. While this is
  happening, a notification is shown so it is never recording invisibly.
• Recorded locations are written to the local database on your device.

You can refuse location permission, or revoke it later in system settings. The rest of the app, your history, your encounters, your notes, importing and exporting, continues to work; only the map and route planning stop.

To draw maps, search for addresses, plan routes and render static map images, the app sends requests to Google Maps Platform (Maps SDK for Android and iOS, Geocoding API, Directions API and Maps Static API) at maps.googleapis.com.

Those requests contain only what is needed to answer them typically a coordinate or a piece of address text. They do not carry your notes, your encounters or your journey history, and they do not carry an account identifier, because the app has none.

Google processes that data as an independent controller under the Google Privacy Policy. Google is established outside the UK/EU, so this involves an international transfer; Google’s own transfer safeguards apply.

This is the only network service the app contacts.

You can export your data to a file, optionally encrypted with a password you choose. The file is created on your device and goes wherever you send it. Once you share or save it, it is outside the app’s control and outside ours.

If you encrypt an export, keep the password. Without it the file cannot be recovered — not by you, and not by us.

The app can show a notification while a walk is running, and can suggest a walk at a time you have historically set out. That pattern analysis runs entirely on your device using walks already stored there; nothing is sent anywhere to produce it. Notification permission is requested when you start your first walk, not on launch, and you can decline or revoke it in system settings.

Nothing. There is no account system, no telemetry, no crash-reporting service, no advertising identifier, and no third-party analytics SDK. We operate no server that receives your data, so there is no store of it for us to search, sell or hand over.

We do not sell or share personal information, and we do not use it for cross-context behavioural advertising, targeted advertising, or profiling.

Because the data stays on your device, most of this is not processing we carry
out at all. Where it is:

• Precise location, and requests to Google Maps — your consent, given through the system permission prompt and by choosing to start a walk. You may withdraw it at any time in system settings, with no effect on the lawfulness of anything done before.
• Storing your journeys, notes and settings on your device — necessary to perform the service you asked the app for.

Your data stays on your device until you remove it.

• Delete a single encounter or a whole journey in the app, and it is removed from the local database.
• Uninstalling the app removes all of it.
• On iOS, also delete any device backup that predates the uninstall if you want no copy to remain in your own Apple account.

We hold no copy, so there is nothing for us to delete on our side and no deletion request to send us.

Under the UK/EU GDPR you have rights to access, correct, erase, restrict, object to and port your personal data. Under the California Consumer Privacy Act you have rights to know, delete, correct, and opt out of sale or sharing we do not sell or share, so there is nothing to opt out of.

Because your data never reaches us, you exercise these rights directly: view and correct entries in the app, export them with the export feature, delete them in the app or by uninstalling, and control location and notification access in system settings. We cannot action a request about data we do not hold. If you believe we have handled something wrongly, contact us at contact@gridandgarden.com; you may also complain to your data protection authority (in the UK, the Information Commissioner’s Office).

Data is held in the app’s private storage, which the operating system isolates from other apps. Network requests use HTTPS. App-lock PINs are stored only as a salted PBKDF2 hash. Optional export encryption uses AES with a key derived from your password.

No method of storage is perfectly secure, and data on a device is only as protected as the device — a screen lock and up-to-date OS matter more here than anything the app can do.

The app is not directed at children, does not knowingly collect data from children, and has no account system through which a child could register. If you believe a child has used the app in a way that concerns you, the data is on that device and can be removed by deleting it in the app or uninstalling.

If this policy changes, the updated version is published at this URL with a new effective date at the top. Material changes will also be noted in the app’s release notes.

contact@gridandgarden.com
Grid and Garden, 116 AGNES RD STE 200 KNOXVILLE TN 37919