UmayPrivacy policy
In short
- Umay asks for no account. It collects no name, e-mail address or phone number.
- Camera frames are processed on the device only, at the moment they are seen. They are not recorded, stored or sent.
- There are no ads and no usage analytics.
- Maps, settings and logs stay on your device. Data leaves it only when you choose to publish a map or share a file yourself.
Who we are
Umay is an open-source project by Bedirhan Tong (AppValence). The source code is public on GitHub, so everything below can be checked against the code. See the support page to get in touch.
Permissions and why they are needed
| Permission | Purpose | What happens to the data |
|---|---|---|
| Camera | Detect people in front of you and read text on signs. | Frames are processed in memory on the device and discarded. Not recorded, not sent. People detection and text reading run on the device. |
| Location | Android requires the location permission to scan for Bluetooth beacons. The foreground guidance service also runs under it. | Umay does not collect, store or send your GPS location. Indoor position is computed on the device from step sensors and Bluetooth signals. |
| Bluetooth | Scan the beacons in a building to correct the position. | Signal strength is used on the device. It is written to a map only while a map is being surveyed. |
| Microphone | Listen to your question when you tap “Ask something”. | Listens only after you tap the button. Umay does not record or store audio. Turning speech into text is done by the speech recognition service on your phone (see below). |
| Notifications | The notice shown while guidance runs, so it can continue with the screen off. | No data is processed. |
| Vibration | Signal instructions by vibration. | No data is processed. |
Spoken questions
“Ask something” uses Android's speech recognition service. Umay does not connect to a server of its own for this. Whether your speech is transcribed on the device or on a server depends on the recognition service selected on your phone (on most phones, Google's) and its settings, and is governed by that service's privacy policy. The transcript is matched only against the building map on the device and then discarded. Umay stores neither the audio nor the text.
Data stored on your device
- Building maps: maps you surveyed or imported (place names, floor information, Bluetooth signal fingerprints).
- Settings: speech rate, step length and similar preferences.
- Field log (off by default): if you turn it on in the Files screen, indoor position, steps, signal strength, air pressure and the instructions given are written to a file during guidance. It contains no images or audio. The file does not leave your device until you share it.
- Crash reports: if the app crashes, the stack trace is written to a file on the device. It is never sent automatically; you can share it if you wish.
Maps and settings may be included in your Google account backup if Android's own backup is turned on. Field logs and crash reports are excluded from backup. This is an Android feature; no data goes to a Umay server.
You can delete all of this from the Files screen, or by uninstalling the app.
Shared map pool
This feature is optional. Browsing and downloading buildings in the pool requires no sign-in. When you choose to make a map public, the following is uploaded:
- the building name, floor count, point count and file size,
- the map itself: the place names you gave, indoor coordinates and Bluetooth signal information,
- the update time and a randomly generated anonymous identifier.
An uploaded map can be read and downloaded by anyone. Do not put personal information (your name, home address) in building or place names. The app asks for confirmation before publishing.
Publishing uses Firebase Anonymous Authentication; no e-mail, name or phone number is requested. The anonymous identifier is not tied to anything that identifies you and exists only so that you can remove the map later. You can unpublish from Files > Shared map pool; only the device that uploaded the map can do this. See the data deletion page (in Turkish) for what to do if that is not possible.
Third parties
- Google Firebase (Cloud Firestore and Anonymous Authentication): only when you use the shared map pool. Google may process technical data such as the IP address under its own policy.
- Google ML Kit text recognition: reads sign text on the device; images do not leave the device.
- Your phone's speech recognition and text-to-speech services: services on your device, as described above.
Umay uses no ad network, no usage analytics and no crash-reporting service.
Your rights
You can ask whether data about you is processed, request information, and request correction or deletion. You can remove a map you published from within the app. If that is not possible, follow the steps on the data deletion page. If you are in Turkey, Article 11 of Law No. 6698 (KVKK) applies.
Children
Umay is not directed at children and does not knowingly collect data from children.
Changes
If this policy changes, the new version is published on this page with its date. Earlier versions are visible in the GitHub history.
Contact
See the support page or GitHub issues.