Name: Hospitalero
Author: Wise Pilgrim SL

Question 1

Who's behind Hospitalero?

Accepted Answer

Wise Pilgrim SL was founded by Michael Matynka, a pilgrim with over 20 years of experience in the Camino de Santiago. He published the first mobile app for the Camino in 2012.

Question 2

Why, and how can it be free?

Accepted Answer

This app was created as a direct response to the proliferance of other solutions which present obvious security risks due either to their design intent or technical implementation. It is free because nobody should have to pay for privacy; my business model is based on providing quality data and quality tools. Funding comes from users who donate, upgrade, or otherwise lend their support.

Question 3

Does it work across all of Spain?

Accepted Answer

Yes. Royal Decree 933/2021 applies to all accommodations in Spanish territory, and Hospitalero works with the central SES.HOSPEDAJES system of the Ministry of Interior.

Question 4

What do I need to get started?

Accepted Answer

Just a phone with iOS 16+ or Android 8+, and your SES.HOSPEDAJES access credentials. If you don't have them, instructions can be found on our getting started page.

Question 5

What if the pilgrim doesn't have the app?

Accepted Answer

You can enter the data manually. QR scanning is the fastest method, but pilgrims don't need the app for you to register them. The app includes a quick tool to copy instructions for sending via WhatsApp or email, so you can inform the pilgrims prior to their arrival.

Question 6

Does data pass through your servers?

Accepted Answer

Your SES credentials and plaintext guest data never pass through our systems. After submission to the Ministry, an encrypted copy of the guest record is stored on our cloud infrastructure for the 3-year legal retention period — but it's encrypted with your password, so we can't read it.

Question 7

Can I cancel a submission?

Accepted Answer

Yes. In the submission history you can review all your communications and cancel the ones you need to.

Question 8

Can I use Hospitalero alongside my current system?

Accepted Answer

Yes. Hospitalero works independently of any PMS, channel manager, or check-in tool you already use. You can use it as your primary registration method or alongside your existing setup — for example, using Hospitalero specifically for walk-in pilgrims while your PMS handles online bookings.

Question 9

Do I need to create an account?

Accepted Answer

No. No account, no registration, no email. Simply download the app and enter your details. Everything is stored only on your phone.

Question 10

Can I include my family in the QR?

Accepted Answer

Yes. You can add family members — partner, children, minors — with their relationship type. One QR for the whole family.

Question 11

Is the QR safe to show?

Accepted Answer

Yes. The QR data is obfuscated — compressed and encoded so it's not human-readable or usable by a standard QR scanner. If someone scanned it accidentally, they'd see meaningless data. Only the Hospitalero app knows how to decode it. It's not military-grade encryption, but it's designed so casual scanning reveals nothing useful.

Question 12

What personal data does Hospitalero collect?

Accepted Answer

From pilgrims: nothing — all data stays on the pilgrim's phone. From hospitaleros: only your albergue profile (name, location, and optionally services/pricing you choose to share). Guest check-in data is encrypted on your device before upload — we store it but can't read it.

Question 13

How does Hospitalero comply with GDPR?

Accepted Answer

By architectural design, not just policy. Guest data is encrypted client-side with AES-256-GCM before it reaches our servers — we literally cannot read it. We collect only what Royal Decree 933/2021 requires, nothing more. Records auto-delete after the 3-year legal retention period. No tracking, no analytics, no profiling.

Question 14

Can I request deletion of my data?

Accepted Answer

Local data: uninstall the app and it's gone. Albergue profile: email us or deactivate your account. Encrypted check-in records: these are retained for 3 years as required by law (Royal Decree 933/2021) and cannot be deleted sooner — but they auto-delete when the legal period expires. No action needed.

Question 15

Do you sell or share data with third parties?

Accepted Answer

No. Guest data goes directly from the hospitalero's device to the Ministry of Interior — we're not even in the middle. We don't sell, share, or use data for marketing. The only third party involved is Supabase (database hosting), which stores encrypted blobs it can't read.

Question 16

Do I need internet to generate or show the QR?

Accepted Answer

No. The QR is generated and displayed entirely on your phone — no internet connection needed at any point. The only moment internet is required is when the hospitalero submits the check-in data to the Ministry from their device.

Question 17

What format is the data sent in?

Accepted Answer

XML through the Ministry of Interior's SOAP API, following the official XSD schemas (tiposGenerales.xsd, altaParteHospedaje.xsd).

Question 18

How long are check-in records kept?

Accepted Answer

Encrypted check-in records — the data submitted to the Ministry when a guest registers — are kept for 3 years from creation, as required by Royal Decree 933/2021. After that, they're automatically deleted. Pilgrim data entered in All Caminos stays only on the pilgrim's phone and is never stored on our servers.

Frequently asked questions

General

For hospitaleros

For pilgrims

Privacy & GDPR

Technical