Privacy Policy

Introduction

TrailSync ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this Privacy Policy carefully. By using TrailSync, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide Directly

• Account Information: When you create an account, we collect your email address, display name, and password.
• Profile Information: You may choose to provide additional information such as profile photos, experience level, fitness level, certifications, dietary restrictions, medical notes, and emergency contact information.
• Trip Data: Information you create while using the app, including trip details, routes, waypoints, gear lists, meal plans, expenses, messages, and action items.
• Beta Signup: Email address and trip frequency when you sign up for our beta program.

Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including features used, pages visited, and time spent in the app.
• Device Information: We collect information about your device, including device type, operating system, unique device identifiers, and mobile network information.
• Location Data: When you use route planning features, we collect location data you manually enter (trailhead locations, waypoints). We do not track your real-time location.
• Analytics: We use Google Analytics to understand how users interact with our website and app. This includes page views, button clicks, and user flow data.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the TrailSync Service
• Create and manage your account
• Enable trip collaboration features with other users you invite
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about beta testing opportunities, new features, and updates (with your consent)
• Monitor and analyze trends, usage, and activities to improve the Service
• Detect, prevent, and address technical issues and security vulnerabilities
• Comply with legal obligations and protect our rights

How We Share Your Information

With Other Users

When you invite participants to a trip, they can see information you've shared about that trip, including your profile information (name, photo, experience level, dietary restrictions, etc.). You control what profile information you share.

Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Supabase: Database hosting and authentication
• Resend: Email delivery service
• Mapbox: Mapping and route planning services
• OpenWeatherMap: Weather forecast data
• Google Analytics: Website and app analytics

These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Encryption of data at rest in our databases
• Row-level security policies ensuring users can only access their own data and trips they're invited to
• Secure authentication using industry-standard JWT tokens
• Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. You may delete your account at any time, which will result in the deletion of your personal data and all associated trip data you created (except data shared in trips where you are not the organizer).

We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Your Rights and Choices

Access and Update

You can access and update your account information and profile at any time through the app settings.

Delete Your Account

You can delete your account at any time through the app settings. This will permanently delete your personal information and trip data you created.

Marketing Communications

You can opt out of receiving promotional emails by following the unsubscribe instructions in those emails. We will still send you transactional and account-related emails.

Do Not Track

We do not currently respond to "Do Not Track" signals from web browsers.

Your California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including the right to:

• Access your personal data
• Correct inaccurate personal data
• Request erasure of your personal data
• Object to or restrict processing of your personal data
• Data portability
• Withdraw consent at any time

Children's Privacy

TrailSync is not intended for use by children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using TrailSync, you consent to the transfer of your information to the United States and other countries.

TestFlight Beta Testing

If you participate in our TestFlight beta program, Apple may collect additional information about your device and app usage for crash reporting and analytics purposes. This data is governed by Apple's TestFlight privacy policy. Beta versions may be less stable and secure than release versions.

During beta testing, we may collect additional diagnostic information, including crash logs and usage patterns, to improve the app before public release.

Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by TrailSync. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

For material changes, we will provide additional notice (such as an email notification or in-app notification).

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: info@trailsync.app
Website: https://trailsync.app

---

Summary of Key Points

• We collect information you provide (account, profile, trip data) and some automatic data (usage, device info)
• We use your information to provide and improve the Service
• We share data with trip participants you invite and necessary service providers
• We implement strong security measures including encryption and row-level security
• You can access, update, or delete your data at any time
• We do not sell your personal information
• We comply with CCPA, GDPR, and other privacy regulations
• Contact us at info@trailsync.app with any questions