Komoot
- The policy says your content is not used for AI training.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Outdoor maps with GPS, ads trackers, a content license, and an optional AI guide that is not used to train models.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, GPS tours, device IDs, IP, and sometimes contacts, age, gender, and precise location.
Read the exact line
Privacy policy
“Identifiers collected by mobile apps: Advertising Identifier (IDFA), if consented Device IDs (e.g., IMEI, Android ID, or similar identifiers)”
Training
They run the app, personalize it, make heatmaps, measure ads, and send optional Local Guide prompts to Anthropic.
Read the exact line
Privacy policy
“Anthropic does not use your prompts submitted through Local Guide to train its AI models.”
Sharing
Staff processors, payment firms, Anthropic for Local Guide, and ad/analytics partners if you consent.
Read the exact line
Privacy policy
“To generate answers, we use Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland ("Anthropic") as our processor”
Kept
Account delete keeps backups 30 days; Live Tracking 28 days; some records 6–10 years.
Read the exact line
Privacy policy
“If you delete your user account, your profile will be completely and permanently deleted. However, we will keep backup copies of your data for a period of 30 days”
Controls
You can delete your account, opt out of heatmaps, and turn off analytics and profiling in privacy settings.
Read the exact line
Privacy policy
“If you do not want your location data to be and for the purpose of creating Global Heatmaps, you can opt out at any time by going to Account settings > Privacy”
Fine print
German law; “as is” with a 100 euro cap; you them; paid plans can auto-renew.
Read the exact line
Terms of service
“IN NO EVENT SHALL KOMOOT’S TO YOU UNDER THIS AGREEMENT EXCEED THE GREATER OF 100 EURO OR THE AMOUNTS (IF ANY) PAID BY YOU TO KOMOOT DURING THE PREVIOUS TWELVE (12) MONTHS”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off Global Heatmaps
Account settings > Privacy, untick the Heatmaps checkbox
Turn off analytics and profiling trackers
App privacy settings, or website footer Privacy Settings / cookie banner
Delete your account
Profile > delete account on the komoot website, then follow the instructions
Cancel paid Premium before renewal
Profile, or email/letter with username and registered email
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues over what you uploaded or how you used the app, you may have to pay Komoot’s legal bills.
Read the exact line
Terms of service
“He hereby agrees to , komoot, its successors, assigns, affiliates, agents, directors, officers, employees and shareholders from and against any and all claims”
For example, if a photo you posted on a tour is copyrighted and the owner sues Komoot, you could be on the hook for lawyer fees.
The license they take over your public tours, photos, and GPS can last even after you leave.
Read the exact line
Terms of service
“The rights that are granted komoot according to the above clause 13.1 of the content uploaded by a user does not expire on the date in which the contract for the use of the services of komoot according to paragraph 18 is terminated”
For example, a public Highlight you posted could stay usable on their platform after you delete your account, though they say it is no longer tied to your profile.
They do not promise the maps or routes will be correct or always work.
Read the exact line
Terms of service
“THE PLATFORM, INCLUDING, WITHOUT LIMITATION, THE WEBSITE, THE APPS AND ALL CONTENT AND SERVICES ACCESSED THROUGH OR VIA THE WEBSITE, THE APPS OR OTHERWISE, ARE PROVIDED “AS IS”, “AS AVAILABLE”, AND “WITH ALL FAULTS”.”
For example, if a suggested trail is closed or unsafe, the terms say they are not guaranteeing that information.
If you allow profiling, Meta can learn that you opened or signed up after seeing an ad.
Read the exact line
Privacy policy
“A Meta-provided tool that notifies Meta when someone who came from one of our Meta ads takes an action in the app (such as opening it or signing up).”
For example, tapping a Facebook ad for Komoot can tell Meta you installed the app so they can target similar people.
Connecting your address book lets them look at your contacts to find other Komoot users.
Read the exact line
Privacy policy
“if you accept, we will use your contacts to suggest people you may know who are also on komoot.”
For example, if you tap yes, they can match your phone book against Komoot accounts and suggest friends.
Paid plans keep charging for another full period unless you cancel.
Read the exact line
Terms of service
“After that, the paid services extend by the same duration with each renewal period if they are not canceled by the user or komoot.”
For example, a yearly Premium plan can roll into another year if you do not cancel in Profile.
The optional AI route chat is not used to train Anthropic’s models.
Read the exact line
Privacy policy
“Anthropic does not use your prompts submitted through Local Guide to train its AI models.”
For example, asking Local Guide for a hike from your town should not become training data for the AI company.
Live Tracking GPS is not kept forever; they say it is removed after 28 days.
Read the exact line
Privacy policy
“Your location data will be deleted after 28 days.”
For example, a safety-contact live map of today’s ride should be gone from their systems after four weeks.
They run a bug bounty and take security reports.
Read the exact line
Privacy policy
“If you have discovered a vulnerability on our Services and report it to us, we will process your contact details as well as other information you have provided”
For example, a researcher can report a hole in the app and they process that report under their reward program.
Public comments on routes can be sent to the AI company to summarize trails for other people.
Read the exact line
Privacy policy
“We also send the public comments that you and other komoot users have left on your routes and Highlights to Anthropic, so that it can generate summaries and insights about routes for other Local Guide users.”
For example, a public tip you left on a mountain path may be fed to Anthropic to write a Local Guide summary.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- prompt
- What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
How we got here · grade A · score 57/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect more than account and tours: device IDs, advertising IDs, IP, GPS, and optionally contacts, age, gender, and precise location.
Does it record your voice, face or body, and what happens to that?
The documents do not describe recording your voice, face, or body as biometric data.
Are your chats and uploads used to train AI models, and is that off by default?
They say Anthropic does not train on Local Guide prompts. They do not describe using your chats to train their own models.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use third-party profiling and ad tools such as Meta Advertising SDK, Adjust, Firebase, and Google Analytics, with consent for profiling cookies.
Do they sell or share your data, and can you opt out?
Data goes to processors and, with consent, ad and analytics partners. Public comments can go to Anthropic. Cookie and heatmap opt-outs exist.
What rights do they take over what you type and what the AI makes?
You grant a non-exclusive right to show and edit uploads on the platform, and that right does not end when you leave.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete your account in Profile. They keep backups for 30 days, then delete unless law requires longer.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build personalization from tours, followers, and account data for emails and product personalization, without a described memory editor.
Do they commit to basic security, and have they leaked data?
They describe a security vulnerability reward program for reports about their services.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated. They may notify for material changes; terms treat silence for six weeks as acceptance.
Can they close your account without warning, and can you get your data out first?
You can delete the account in Profile. They may block after notice and terminate for cause; they do not describe a data-export step before they close you.
If something goes wrong, who pays?
The service is “as is,” liability is capped at 100 euro or a year of fees, and you must indemnify them for claims about your content.
Do subscriptions renew on their own, and can you get a refund?
Paid plans with a minimum term renew for the same length. Many prepaid fees are not refunded if you cancel; EU buyers get a 14-day withdrawal.
The privacy policy is 9,313 words at a college graduate level (Flesch reading ease 36.2); the terms are 4,750 words at a professional or legal expert level.
