Take it outside. Android is out.
Version 1.0.0, ready to install.
One file, Android 7.0 and up. Location is the only permission it ever asks for, and never in the background: the catch happens with the screen open. Recording audio and drawing over other apps were cut from the manifest before the build.
The rest of it, since the file is yours to open: physical activity, declared by the sensors package for a pedometer this app never calls; biometrics, for the sign-in library; reading storage, dead on Android 13 and up. Then internet, network state and vibration. Location is still the only one that ever prompts.
download the apkComing soon. Same game, same account.
The iOS app is on its way: the same map, the same catch, and the same account you already have here.
Until then the site is the app: Safari, the same location, the same fragments. Add it to your home screen and what you give up is one sensor reading, not the game.
Four prompts. Three of them are warnings.
Every one of them is the phone doing its job on a file that did not come from a store, and every one of them is the price of not waiting for one. Here they are in order, with what each is actually saying, so you meet them knowing they were expected.
1. Chrome: this type of file can harm your device.
It says that about every APK ever downloaded, because it is a warning about the file type and not a verdict on this file. There is a Download anyway underneath it. Nothing about the sentence changes if the file is fine, which is precisely why it is not much use for telling whether it is.
2. Android: not allowed to install unknown apps from this source.
Correct, and it should be. The permission is granted per source, it drops you on a Settings screen and hands you back, and you can switch it off again the moment the install finishes. Nothing here needs it a second time.
3. Play Protect: it has not seen this app before.
Also correct. Google scans what people install and vouches for what it has met at scale; a file handed out from one page has by definition not been met. The way past it is More details, then Install anyway, one tap deeper than it looks.
4. Then the ordinary one: do you want to install this app?
Yes. That is the install, and it is the last of them. Nothing is asked for here: location gets its own prompt later, on the catch screen, only after you have tapped a card that explains it first, and it is asked nowhere else in the app.
Then it asks you to sign in, because the map is behind an account. Use the same one you use here, Google or X, and it is the same wallet, the same catches, the same handle, since there is only ever one of it. The app also offers Apple, which this site does not: pick that and you have quietly started a second, empty account with your name on it, and there is no merge in either direction. Then it asks whether you are 18 and outside the United States, now that there is an account for the answer to belong to.
The Play listing is on its way and will update itself when it lands. The app is not waiting for it.
A phone that can prove you stood there.
The browser has to ask permission for the motion sensor and can be handed zeroes by an in-app browser. Here it is a real sensor read at a known rate, alongside a position that arrives on its own, which is the difference between a catch that goes through and one the server cannot verify.
GPS that behaves like a game.
A fix that keeps up with you while you walk, instead of a web page asking again every time you switch away.
Your account, unchanged.
Not a companion app with its own login. The same account, holding the same tokens, on whichever screen is nearest.
An icon, on the home screen.
Which sounds like nothing until you have tried to find a bookmark while standing outside a GameStop.
One account, no seed phrase, nothing to pay. The whole thing is documented and the vault is countable.