Privacy Policy
This policy explains what MightyMaps ("we", "us") collects when you use the service at mightymaps.app, why, and who else touches it. It is written to be read rather than to be impressive.
1. What we collect
1.1 Information you give us
- Account details — your email address and your name, if you provide one.
- Map content — the titles, places, notes, dates and colours that make up your maps.
- Your messages to the assistant — the full chat history for each map, kept alongside it so you can see how a map got to where it is.
- Payment details — handled by Stripe. We never see or store your card number; we keep a record of what you bought, when, the amount, and a link to Stripe's receipt.
- Anything you email us — including whatever you attach or quote.
1.2 Information collected automatically
- Country — worked out from your IP address when you sign up, and stored as just the country. We do not keep the IP address on your account.
- Sign-in and usage events — sign-ups, sign-ins, maps created and deleted, messages sent to the assistant (including the text of the message), credit purchases and errors. These are used to run and debug the service and to understand how much it costs to operate.
- Server logs — the ordinary record every website keeps of the requests it receives, including IP address and browser. Deleted automatically after 30 days.
- A daily activity marker — a note that your account was used on a given day, with nothing else attached. Deleted automatically after 60 days.
1.3 What we do not do
- We do not run advertising or third-party analytics tracking on the site.
- We do not sell or rent your personal information to anyone, for any purpose.
- We do not use your maps or chats to train AI models.
2. Cookies
We use the minimum needed to keep you signed in between visits, and nothing else. There are no advertising cookies and no analytics cookies, so there is no cookie banner to dismiss. Clearing your browser data signs you out.
3. How AI features use your data
Building or editing a map sends the following to Google's Gemini AI, which generates the map:
- your message,
- the recent chat history for that map,
- the current contents of that map.
This is sent solely to answer your request. Google processes it under its own terms as a service provider to us. We do not use your content to train models, and we do not send your account email or payment details to the AI provider.
AI output can be wrong. Locations, distances, opening times and any other fact on a generated map should be checked before you rely on it — see the Terms of Use.
4. Who else processes your data
- Amazon Web Services — hosting, storage and sign-in. Your data is stored in the United States.
- Google — the Gemini AI that builds and edits maps.
- Stripe — payment processing. Stripe is the merchant of record for credit purchases and handles the transaction and any applicable tax.
- MailPace — delivery of transactional email such as sign-in codes and receipts.
We may also disclose information if we are legally required to, or to investigate abuse, fraud or a security problem. If the service is ever sold or transferred, account data would transfer with it.
5. Public maps
Maps are private by default. When you switch a map to public it becomes readable by anyone who has its link, which means anything you put on it — notes, addresses, phone numbers, names — is public too. We do not list or index public maps ourselves, but a link you share anywhere can be crawled, copied or forwarded like any other URL. Switching a map back to private takes the page down.
Do not put anything on a public map that you would not put on a public web page.
6. Support access
We can access your account data, including your maps and chat history, when it is necessary to provide support, diagnose a fault, investigate abuse or comply with the law. We do not read your maps for any other reason.
7. How long we keep things
- Account and map data — for as long as your account exists.
- Server logs — 30 days, then deleted automatically.
- Daily activity markers — 60 days, then deleted automatically.
- Business and financial records — including purchase records, kept as long as tax and accounting law requires, even after an account is deleted.
8. Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Email support@mightymaps.app from the address on the account and we will action it within a reasonable time. Deleting an account removes your account record, your maps and your chat history; anonymous aggregates and records we must keep for accounting are the exception.
If you are in the EEA or the UK, our legal bases are performing our contract with you (running the service), our legitimate interests (security, debugging, understanding cost) and consent where it applies. If you are in California, you have the rights described in the CCPA, including access and deletion; we do not sell personal information. In either case, the request process is the same email address above.
9. International transfers
The service is hosted in the United States, and our processors operate in the United States and elsewhere. Using MightyMaps means your data is transferred to and processed in those countries, which may have different data-protection laws than your own.
10. Security
Your data is encrypted both in transit and in storage, sign-in is handled by a dedicated authentication service rather than by us, and access to live systems is restricted. No system is perfectly secure, and we cannot promise yours will never be affected by a breach.
11. Children
MightyMaps is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, email us and we will remove it.
12. Changes
We will update this page when the service changes and move the "last updated" date. For material changes we will email account holders. Continuing to use the service after a change means you accept the updated policy.
13. Contact
Privacy questions and data requests: support@mightymaps.app.
Short version: we store your account, your maps and your chats; the AI provider sees your messages and maps in order to answer them; Stripe handles payment; nobody buys your data; public maps are public. Ask us to delete it all and we will.