Privacy

What PopMuro collects, why, and how to get rid of it.

Last updated 11 October 2026

PopMuro is made by Happy Path. This policy covers the PopMuro iPhone app and this website. If something here doesn't match what the app actually does, that's a bug, so tell us and we'll fix it.

What we collect

An account you didn't have to make

When you first open the app it signs you in anonymously and gives you a random user ID. That ID is attached to everything you make, so the app knows which stickers are yours to move, edit and delete. You don't have to give us a name or an email to use PopMuro.

If you want your stickers to survive a new phone, you can link an account on the You tab with Sign in with Apple or with an email address and password. If you use Sign in with Apple and choose to hide your address, we only ever see Apple's relay address. We ask Apple for your name as part of that flow but we don't store it. If you sign up with an email address, we send a verification email to it and store the address with your account.

Where you are

When you save a sticker, we store the location where you left it. When you're out with the app open, we use your location to work out which stickers are close enough to be worth looking for, and to draw the Discover map around you. Location is precise, because it has to be: the app can't find a specific wall otherwise. It's stored alongside the spot you saved, and it's part of what other people see.

The app only asks for location while you're using it. It doesn't track you in the background, and it doesn't keep a history of where you've been beyond the spots you chose to save. Where you are right now isn't stored unless you save a sticker there. The app does use it while it's open: it asks our server which spots are nearby, Apple Maps uses it to draw the map around you, and the 3D engine gets it too (see "Who else touches it"). None of them get a running log of where you go.

What you make

The stickers you make: the text you type, the font and colours you pick, and any emoji, Genmoji or Apple stickers you drop in from the keyboard. All of that is flattened into one image, and that image is uploaded so it can be shown to other people at the spot where you left it.

What the camera sees

This is the part worth reading properly.

To bring a sticker back to the same spot on the same wall, the app has to recognise that wall again. When you save, it looks at the camera feed and works out a set of numeric descriptions of visual features, meaning corners, edges and patterns of texture, along with how far away each one is. Those numbers are what gets uploaded. They're not a picture, and they're not designed to be turned back into one.

It also saves one photo of the spot, with your stickers drawn on it, so that when someone comes looking, the app can show them what to point their phone at. That photo is a real picture of a real place, it's uploaded, and it's visible to other people using the app, on the Discover map and in the Look tab.

While the Look tab is open, the app is always comparing what the camera sees against the stickers saved nearby, so they can appear without you doing anything. That comparison happens entirely on your phone.

Think about the photo before you save somewhere private. If you leave a sticker in your kitchen, the picture of your kitchen goes with it. The same goes for people: don't save a spot with someone's face in it. If a photo shows you or your home and you want it gone, email us and we'll take it down.

Reports you file

If you report someone's sticker, we store the report: which sticker, who made it, who reported it, a link to the sticker image, and the rough area it was in. We keep the link so the report still makes sense if the sticker is moved or edited before we look at it. There's no way in the app to see or withdraw a report once it's filed.

When the app crashes

If PopMuro crashes, it sends a report the next time you open it: where in the code it fell over, which iPhone you have, which version of iOS, and how long the app had been running. It's handled by Firebase Crashlytics and tied to a random install identifier, not to you or your account. We use it to find the bug and fix it, and for nothing else.

Settings on your phone

Your preferences, a local copy of your sticker library and a cache of other people's sticker images stay on your device. They go away when you delete the app.

On this website

If you ask for a beta invite on the front page, we store your first name, last name and email address so we can send you one. If you send a bug report from the help page, we get your message, your browser's name and screen size (so we can reproduce layout problems), and, if you fill it in, your email address so we can write back. The site doesn't set analytics cookies and doesn't have a tracking pixel on it. There's nothing here for a Do Not Track setting to turn off, so we don't respond to it.

What we don't do

• We don't track you across other apps or websites.
• There are no ads, and no advertising networks in the app.
• There's no analytics SDK. Nothing records which screens you open, how long you stay, or what you tap. Crash reports are the one diagnostic we collect, and they're described above.
• We don't sell your data, and we don't share it for anyone else's advertising.
• We don't build a profile of you, and we don't use your data to train models.

Everything you leave is public

PopMuro is a public wall. Any sticker you save can be found and seen by anyone else using the app, along with the photo of the spot and its location. The Discover map shows every saved spot nearby to everyone. There is no private or friends-only mode in this beta. Don't put anything in a sticker that you wouldn't put on an actual wall in an actual street.

Who else touches it

We use a small number of companies to run the app. Google holds our data and may only use it to run the service for us. Apple and Niantic handle their pieces under their own privacy policies, linked below.

• Google (Firebase): sign-in, the database, file storage, and crash reports. Your stickers, spots, photos, reports and beta signup live on Google Cloud infrastructure, in the United States. See Firebase's privacy information.
• Apple: Sign in with Apple; App Attest, which confirms that requests are coming from a real copy of the app rather than a script; and Apple Maps, which draws the Discover map and the walking routes on it.
• Niantic Spatial (Lightship): the 3D engine that reads surfaces so stickers can sit on them. It runs on your phone, but it talks to Niantic's servers to check its licence, and may send them your location, heading and some device details while the camera is open. See Niantic Spatial's privacy policy.

We may also hand something over if we're legally required to, or if we need it to deal with abuse or protect someone's safety.

Deleting it

In the app: You → Delete Account. That deletes your stickers, the spots you saved and their photos, your uploaded images, and your email address if you linked one, then deletes the account itself. If you signed in with Apple, it also revokes the app's Apple token. It can't be undone and we can't get any of it back for you.

If you'd rather keep everything and just step away, sign out on the same screen.

Two things survive. If you popped a sticker onto a spot someone else saved first, the sticker itself is deleted so it stops showing up, but the record of where it sat stays with that spot until its owner deletes it; it holds no image and nothing about you beyond your old random ID. And reports: if you filed one, or one was filed about you, we keep it after the content is gone. Otherwise abuse reports could be erased by deleting an account, which would make them useless.

How long we keep things

Stickers and spots stay until you delete them or delete your account. Beta signup emails are kept until the beta ends. Bug reports from the website are kept until we've dealt with them. Crash reports are kept by Firebase for about 90 days. Reports about stickers are kept while the beta runs and for a reasonable period after, in case of repeat problems. Like any online service, Google's servers see your IP address when the app talks to them; we don't look at it. This is a beta, so we may also clear data between builds. If we're going to wipe something, we'll say so on this site first.

Your rights

Depending on where you live, you may have the right to ask what we hold about you, to have it corrected, or to have it deleted. Delete Account covers the last one straight away, with the two exceptions explained under "Deleting it". For anything else, including taking your email off the beta list, email hello@popmuro.com and we'll get back to you within a month. If you never linked an email, we have no way to tell which account is yours, so use Delete Account in the app instead.

If you're in the EU or UK

Happy Path, a small studio in California, USA, is the "controller" of this data. We use it because it's needed to run the app you asked for (your account, stickers, spots and photos), and because we have a legitimate interest in keeping the app working and safe (crash reports, abuse reports, App Attest). Everything is stored in the United States. Google is certified under the EU-US Data Privacy Framework and its UK extension; Apple and Niantic handle their parts under their own policies. On top of the rights above, you can object to how we use your data, ask for a copy in a portable form, and complain to your local data protection authority. We'd love it if you tried us first.

Children

PopMuro isn't intended for children under 13, and we don't knowingly collect anything from them. If you think a child has been using the app, email us and we'll delete the account.

Changes

If we change this policy we'll update the date at the top. If the change is a significant one, like collecting something new or using something differently, we'll say so in the app before it takes effect.

Contact

Happy Path, California, USA: hello@popmuro.com