Wayter Privacy Policy
Last updated: 15 October 2026
Wayter is an app for finding public drinking fountains. It shows no ads and includes no analytics or tracking tools. You can use all of it without an account; if you want your progress to survive a change of phone, you can sign in with your Google account.
Who is responsible
Plastilina Labs, an independent developer based in Spain. You can write to[email protected] about anything in this policy.
What the app handles
| Data | Why | Where it stays |
|---|---|---|
| Approximate and precise location | Centre the map on you and work out how far the fountains are | On your device only, in memory, while the app is open |
| Your fountain reports (still there, drinkable, dog friendly, bottle refill) and the points you earn | Show your progress and avoid repeated answers | On your device. If you sign in, also on our server (Supabase, European Union) tied to your account, so you do not lose them when you change phone |
| If you sign in: your user id, your email address and, where available, your Google name and profile picture | Identify your account and show who is signed in | On your device and on our server (Supabase, European Union) |
| The map area you are looking at | Download the maps and the fountain list for that area | Sent to the providers listed below to serve the request |
Your location does not leave your device
The app asks for the location permission and uses it only while it is open. Your coordinates are not sent to any server, not kept in any history, and not tied to any identifier.
You can use Wayter without granting the permission: the map opens uncentred and you can pan it by hand. The permission can be revoked at any time in the Android settings.
Third-party services
To work, the app downloads maps and fountain data. Those servers receive your IP address and the map area requested, as happens when you visit any website. We do not send them your identity or any device identifier.
- OpenFreeMap and OpenMapTiles, for the maps —openfreemap.org.
- Overpass API (public OpenStreetMap instances), for the fountain list —wiki.openstreetmap.org.
- Google Play services location, which the operating system uses to obtain your position. Its processing is governed byGoogle's privacy policy.
- Supabase, acting as our data processor, hosts the accounts and reports database in the European Union (Paris region). It only receives data if you sign in —supabase.com/privacy.
- Sign in with Google, only if you tap “Continue with Google”. Google tells us your id, your email and, where available, your name and picture. We never receive your password —policies.google.com/privacy.
Fountain data comes from OpenStreetMap and is used under the ODbL licence.
What we do not do
- We never ask for a password: the account is optional and created through Google, which never shares your password with us.
- We do not ask for a phone number, an address or any personal detail beyond what the table above lists.
- We show no ads and share no data with advertisers.
- We use no analytics, profiling or cross-app tracking.
- We do not sell or pass data to third parties.
Your rights, data retention and deleting your data
Without an account, everything the app produces stays on your device: remove it all by uninstalling the app, or by clearing its data in Settings, Apps, Wayter, Storage. We keep no copy, so there is nothing for us to export or correct on your behalf.
With an account, you also have the rights of access, rectification, erasure, restriction, objection and portability over the data we hold on the server. To exercise them, or to have us delete your account and everything tied to it, write to[email protected]; we will answer within 30 days at the latest. Signing out in the app does not delete server data: for that, ask for erasure. You may also complain to the Spanish data protection authority (aepd.es).
Deleting your account removes your profile, your points, your reports and your badges, on the device and on the server. The fountains you added stay on the map, with their authorship anonymised, because they are shared public data rather than personal data. We retain nothing else after a deletion request is completed.
There is a page for this.Delete your Wayter account explains both routes — from inside the app and from here, without installing anything — and what is removed.
Children
Wayter is not directed at children under 13 and does not knowingly collect data from them.
Changes to this policy
If how the app works changes, we will update this page and the date above. Significant changes will also be noted in the Google Play release notes.