Gradovi — a guide to the castles of Slovenia
Gradovi collects nothing about you. There is no account, no cloud, no advertising and no measurement, and the app holds no internet permission at all, so it has no means of sending anything anywhere. The castles you have marked as visited, your wishlist, your favourites, your best quiz score and your settings are written into the app's own private folder on the handset and stay there.
What follows says exactly what is kept, why one part of it deserves more thought than a list of ticks usually gets, what the app is not permitted to touch, and what you may ask of the company that publishes it.
Gradovi is published by AK Kamnosestvo d.o.o., a stonemasonry company registered in Slovenia at Brilejeva ulica 13, 1000 Ljubljana, with Isaja Aksalić answering for it. Under the General Data Protection Regulation the company is the controller for this app — a role with very little to do here, because the app puts no personal data into anybody's hands.
A note before it is wondered about: the address this page sits on does not carry the company's name. It is a domain the company holds, and the site on it is operated by AK Kamnosestvo d.o.o. Unremarkable, but the kind of mismatch that is better explained than left hanging.
Write to grad@aerosdis.college.
Five things, none of which describes a person:
No name, no email address, no account, no device identifier and no advertising ID appears anywhere in that, because the app asks for none and generates none. Android keeps every app's private folder beyond the reach of all the others, and that folder is this one's whole memory.
That first line deserves a second look. A set of castles marked as visited, read together, is a travel history: which corners of the country you go to, how far you range from home, when you were somewhere, and — read alongside a wishlist — where you are likely to turn up next. Nobody thinks of it that way while tapping a tick, and that is precisely why it is worth saying.
The app never asks where you are. It holds no location permission, consults no satellite, reads no network position and could not find you if it tried. Everything in that list is there because you put it there, which is the only reason a diary like this is safe to keep — and it stays on the handset for the same reason.
Beyond the missing internet and location permissions, there is no camera, no microphone, no contacts, no photo library and no access to your wider storage. A guide that carries its own text and draws its own illustrations needs none of them.
All of this is checkable rather than a matter of trust: the permission list appears on the store page and on the handset, before and after installing, and a version that wanted a network or a location would have to add a line there in the open.
There is no ad network in this build, no analytics library, no crash reporter, no attribution kit and no social sign-in. In a game that absence is about not being watched. In a guidebook it is also about the writing: the moment a travel guide takes money, the question of which places it praises, and in what order, stops being a question of merit. No castle here is in the list because someone paid for it to be, no entry is sponsored, and nothing is ranked by anything but what the authors thought was worth the climb.
Everything the app knows travels with it, which is why it works in a valley with no signal. The other half of that bargain: nothing in it refreshes itself. Opening hours, entry prices, a track closed for repairs or a keep shut for restoration will not reach the app between releases, so check before you set off.
And where an entry passes on a legend, it is passing on a legend. The stories attached to these walls are worth knowing as stories; they are a different kind of claim from the year a chronicle first wrote a name down, and the app does not pretend otherwise.
One thing happens above the app's head. Where backup to Google Drive is switched on, Android may copy the app's small data file — the visit list included — into your own Google account alongside the backups of everything else installed. That copy is yours, falls under Google's terms rather than ours, and never comes near the company, which has no account there to open.
It is also the only route by which a year of ticks survives a new handset. Android's own settings decide it, for the whole phone or for this app alone, and given what the list amounts to, that is a decision worth making deliberately.
Installing is a transaction between you and Google, logged against your Google account. A developer sees totals afterwards in a console: installs by country, the spread of Android versions, how a rating is moving. No individual row sits beneath those figures for anyone here to open, and nothing in them touches a castle, a tick or a score.
Google's own part runs under Google's privacy policy at policies.google.com/privacy.
Everything sits in one folder, so there is a single action and nobody to write to. Uninstalling Gradovi takes the visits, the wishlist, the favourites, the score and the settings with it, and Android's app settings will clear the app's storage while leaving it installed, which empties the diary and returns the completion ring to nothing.
Both are immediate, neither can be undone, and neither needs anything from us — there was never a second copy anywhere to delete.
Everything above concerns data that never arrives. Email is the exception. Writing leaves the company holding an address and whatever the message says, kept while the matter is live and for a reasonable while afterwards in case it returns, and then deleted.
It is used to reply and for nothing else: no list, no onward sharing, no marketing, and nothing that touches the stonemasonry side of the business. The lawful basis is legitimate interests, in answering people who take the trouble to write. Nothing in an email can be joined to anything in the app, because the app carries no identifier to join it to.
In Slovenia the General Data Protection Regulation is applied alongside the Personal Data Protection Act, Zakon o varstvu osebnih podatkov (ZVOP-2). Together they give you the right to be told what is held about you, to receive a copy, to have it corrected or erased, to restrict its use, to object, and to take it elsewhere in a portable form. Turned on this app, those requests will find an empty shelf. Turned on the mailbox above, they work in full, cost nothing and are answered within a month.
Send them to grad@aerosdis.college. The supervisory authority is the Information Commissioner, Informacijski pooblaščenec, at ip-rs.si, which will hear a complaint whether or not you have raised the matter here first. Anyone living elsewhere in the EEA may go to their own national authority instead.
One date appears on it, beneath the title, and that is the edition in force. Where something genuinely alters what happens to data — any collection at all, any third-party component, any permission added, anything leaving the handset — the order does not vary: this page is rewritten first, the Data safety declaration in the Play Console is corrected in the same sitting, and the release responsible goes out after both.
A sentence tidied for clarity is not such a change, and brings nothing with it but a newer date.
Kamnosestvo
AK Kamnosestvo d.o.o.
Brilejeva ulica 13, 1000 Ljubljana, Slovenia
Responsible: Isaja Aksalić
Lahko nam pišete tudi v slovenščini.
© 2026 AK Kamnosestvo d.o.o.