The app collects no account data and has no backend server of its own. It does not have a backend server. All Komoot tour data fetched while you use the app stays on your device and is never transmitted to us.
Google AdMob, which serves ads inside the app, collects the Advertising ID, your IP address, and basic device / ad performance signals on our behalf, in line with Google's Privacy & Terms .
After you sign in, the app keeps the provider's session on your device: for Komoot a session token stored via Capacitor Preferences, and for Strava the session cookie held in the in-app browser's cookie store. Signing out or clearing the app's data removes it. No portable credential leaves the device.
The app communicates with the following endpoints, and only these:
api.komoot.de — fetching your Komoot tours and GPX coordinates.www.komoot.com — the in-app Komoot sign-in page.www.strava.com — the in-app Strava sign-in page, your activity list and GPX export.tile.openstreetmap.org — map tiles for the route preview.googleads.g.doubleclick.net and related).On first launch in covered regions the app shows Google's consent dialog (UMP). If you decline personalized advertising, AdMob serves only non-personalized ads.
To reset consent, go to Android Settings → Apps → Export GPX for Komoot → Storage → Clear storage. The consent dialog will appear again on the next launch.
"Komoot" is a trademark of komoot GmbH and "Strava" is a trademark of Strava, Inc. This app is not affiliated with, endorsed by, or sponsored by komoot GmbH or Strava, Inc. We are an independent third party that uses your own credentials, entered on each provider's official login page, to download your own activity data on your behalf.
The app is not directed at children under 13. We do not knowingly collect data from them.
Material changes will be reflected here with an updated "Last updated" date. The link to this page is included in the Play Store listing.
The app uses Google Firebase Analytics and Firebase Crashlytics to understand how the app is used (screens viewed, exports completed, feature usage) and to receive crash reports. This data covers app interactions, diagnostics, crash logs and a device identifier; it is not used for advertising, and Firebase ad signals are disabled. In the EEA, analytics identifiers are only enabled after the consent dialog is resolved. Data is processed by Google LLC under Google's privacy policy.
Questions or removal requests: contact@velologic-labs.eu.