Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how Scout It ("Scout It", "we", "us") collects, uses, and protects your personal data when you use the Scout It mobile app and website. We are committed to protecting your privacy and handling your data in line with the EU General Data Protection Regulation (GDPR). Please read this policy together with any in-app consent prompts.

1. Who we are

Scout It is operated by Kobalt Digital B.V., the data controller responsible for your personal data.

Address: Koelmalaan 350, 1812 PS Alkmaar. Chamber of Commerce (KvK) number: 68839383. For any privacy question or request, contact us at hello@kobaltdigital.nl.

2. Data we collect

Depending on how you use Scout It, we may collect the following categories of personal data:

  • Profile data: a username you can set in the app. It is stored only on your device and is used to prefill your name when you join a hunt; it is sent to our servers only at that point. Scout It has no user accounts or logins, and we do not store login credentials.
  • Location data: precise GPS location while you are playing a hunt, used for geofencing and to keep you within the play zone. Location is collected only while the app is in use, unless you explicitly enable background location.
  • Photos and camera data: photos you take and upload as proof to complete challenges.
  • User-generated content: your display name, scores, and submitted photos, which may be visible to other players in the same hunt and on leaderboards.
  • Hunt and group data: hunt codes you enter and the groups you join.
  • Device and technical data: push notification token, device type and operating system, app version, and diagnostic or crash logs.

3. How and why we use your data

We process your personal data for the purposes and legal bases below:

  • To provide the game and let you take part in a hunt (legal basis: performance of a contract).
  • To enable location-based gameplay, geofencing, and proximity alerts (legal basis: your consent).
  • To let you take and upload proof photos and display content to other players (legal basis: performance of a contract and your consent).
  • To send push notifications about your hunt (legal basis: your consent).
  • To secure our service, prevent abuse, and fix bugs through diagnostics (legal basis: our legitimate interest).

4. Sharing with third parties

We do not sell your personal data. We share data only with service providers (processors) that help us run Scout It, and only to the extent necessary. These providers are required to protect your data to the same standard set out in this policy.

The categories of providers we use include:

  • Cloud hosting and database providers: DigitalOcean.
  • Push notification services: Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM).
  • Map and geocoding providers: OpenStreetMap (map tiles) and Nominatim (OpenStreetMap geocoding).
  • Diagnostics and crash reporting: Flare (error monitoring) and Google Analytics.

5. Data retention and deletion

We keep your personal data only as long as needed for the purposes described in this policy, or as required by law.

We do not operate user accounts. Your username, proof photos, and scores are linked to a specific hunt and are kept for the duration of that hunt and for 60 days afterwards. Diagnostic logs are kept for 60 days. After these periods we delete or anonymise the data, except where we must keep it to comply with a legal obligation.

6. Deleting your data

Scout It does not require an account or login. The username you set is stored only on your device and you can change or remove it there at any time. Data linked to a hunt (your username, photos, and scores) is automatically deleted after the retention period described in section 5. To request earlier deletion of data tied to a hunt, email us at hello@kobaltdigital.nl.

7. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Access: request a copy of the data we hold about you.
  • Rectification: ask us to correct inaccurate or incomplete data.
  • Erasure: ask us to delete your data ("right to be forgotten").
  • Portability: receive your data in a portable format.
  • Withdraw consent: withdraw any consent you gave (for example for location), at any time.
  • Complain: lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Children and minors

Scout It is used for activities such as birthday parties and school trips and may be used by children. In the Netherlands, the minimum age to consent to data processing is 16. If you are under 16, a parent or legal guardian must give consent on your behalf before you use the app.

For users we know to be minors, we limit data collection to what is necessary for gameplay, we do not use their data for behavioural advertising, and we apply additional safeguards for location and photo data. Parents, guardians, schools, or event organisers can contact us at hello@kobaltdigital.nl to review, restrict, or delete a child's data.

9. How we protect your data

We use technical and organisational measures to protect your data, including encryption of data in transit, access controls, and limiting access to personal data to staff who need it. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard practices.

10. International data transfers

Your data is primarily processed within the European Economic Area (EEA). Where a provider processes data outside the EEA (for example certain push notification or diagnostics services), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. We encourage you to review this policy periodically.

12. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact Kobalt Digital B.V. at hello@kobaltdigital.nl or Koelmalaan 350, 1812 PS Alkmaar.