Privacy Policy

Placeholder policy for the MVP. Replace before public launch.

What we store

Your profile, the normalized route geometry derived from each upload, and your computed trail progress. We do not retain the raw uploaded file — once parsed, we keep only the normalized geometry and a one-way SHA-256 hash of the original (used for de-duplication and optional proofs). Photos you add are stored in private storage and shown only per your chosen visibility (only you, friends, or public).

What we never do

We don’t sell your data, run AI on your private activity data, show one user’s data to another without an explicit public profile, or put personal GPS coordinates, names, or emails on any blockchain.

Provider data

If you connect Strava, its data is shown only to you, never on public profiles, and is treated as a temporary preview. For permanent history, upload your own exports. You can disconnect at any time, and we honour deletions and revocations.

Deletion

You can delete any activity, which removes its geometry, matches, and progress contribution. Account deletion removes all associated data. (We don’t hold raw upload files to delete — only the derived geometry and hash, which go with the activity.)

Trust layer

Optional proofs anchor only a SHA-256 hash of a privacy-safe manifest. The on-chain value reveals nothing about your route or identity.