Privacy policy

Draft. This describes what the product does today. It has not been reviewed by a lawyer and must be reviewed and finalised before public launch.

What we collect

• Account: your email address and password (stored as a hash by our authentication provider), and your display name and unit preference if you set them.
• Your content: trails you save and, once available, journal entries, photos and reviews. Content is private unless you choose to make it public.
• Location: only when you press "Trails near me" and your browser permits it. We use it to run that search and don't store it. Location tracking for hikes is not available yet; when it is, it will be opt-in.
• Photos for identification: sent to our server and onward to the identification provider to get a result. They are processed in memory and not stored by us unless you save them to your journal (not yet available).
• Basic technical logs: such as errors and request times, without your photos or precise location.

Who processes data for us

Supabase (database, authentication, storage); our hosting provider (once chosen); and, if you use plant identification, the identification provider (Pl@ntNet, when enabled). We list providers here before enabling them.

Your choices

You can sign out at any time. Account deletion and data export are being built; until then, contact us and we will do it manually. We will not sell your personal data.

Retention

We keep your data while your account exists. Identification usage records (date, provider, status, cost) are kept to enforce usage limits and measure costs.

Last updated: 2026-10-16 (draft).