Karn

Privacy

Last updated: 27 October 2026

Karn is made by Nicola Aresta (the “controller”). This page explains what the Karn app and this website collect, why, and what you can do about it. Short version: there are no ads and no third-party tracking.

What the app uses on your device

Location. With your permission, Karn uses your device's location to show where you are on the map, to point the camera views at the right peaks and stars, and to record a hike when you ask it to. Your location is processed on your device; a recorded hike stays on the device unless you sync it.

Camera and motion sensors. Used only live, for the peak and sky views. Nothing is recorded or uploaded.

Map and trail requests. To show trails and map tiles, the app asks our servers and OpenFreeMap for the area you are looking at. Like any web server they see your IP address; it is used for delivery and abuse protection only and is not tied to a profile.

Your account

Karn asks you to sign in (Sign in with Apple, Google, a passkey, or email and password) to protect access to trail data. We store your email address, a stable account identifier from the sign-in provider, your saved places and, if you choose to sync them, your diary notes and photos. This lets you keep them across devices. The legal basis is the performance of the service you asked for.

You can delete your account and all of its data at any time from the Profile screen in the app.

Where data lives

Servers run in the European Union: Google Cloud (Milan), Neon Postgres (Frankfurt), photos on Cloudflare R2 with EU jurisdiction, account emails through Resend (EU). These providers act as processors on our behalf.

This website

This site sets no cookies and runs no analytics. It is served by Cloudflare, which processes technical request data (such as IP address) to deliver and protect it.

Your rights

Under the GDPR you may access, correct, export or delete your data, and object to or restrict its processing. Write to hello@karntrails.com. You may also lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Karn is not directed at children under 14.