Privacy policy

Last updated: October 2026

This explains what personal data the app and website collect, why, who else sees it, and how to delete it. The short version: your location is shared only while you switch sharing on, only with the groups or friends you pick, and you can delete your account and data yourself at any time.

Who we are

The controller of your data is [legal entity name and address]. Questions or requests: [contact e-mail].

What we collect, and why

• Account — e-mail address, display name and a password (stored only as a one-way hash). Optional: bio, profile picture, phone number. Needed to sign you in and show your name to people you interact with.
• Live location — only while you have switched sharing on for a group or a friends room, your phone sends its position about every 10 seconds (also in the background if you allow it). Members of that group or room can see it. We keep only the last known position, in temporary storage for at most a few hours, so that others can see where you were last seen; we do not build a location history from it. Switching sharing off, or the timer you chose ending, stops it.
• Recorded activities — if you record or import a route or a ski/bike day, the GPS track and its statistics are stored in your account until you delete them. A day is visible to others only when you share it with a group or publish the route. Public route downloads hide the first and last stretch (your privacy zone, 200 m by default).
• Photos — photos you upload are re-encoded and the camera’s metadata (including GPS position) is removed. A photo has a map position only if you choose to place it.
• Group chat — messages are relayed live to members who are online and are not stored on our server; they are kept on each member’s phone.
• Notifications — a push token for your device, so we can alert you (for example when a group member has not been seen for a while, or about a meetup).
• Bookings and payments — what you book and the booking details. Card payments and subscriptions are handled by Stripe; we never see your card number.
• Partner links — when you tap a labelled “Partner link” we record which offer and page it came from (and your account if you are signed in), to measure what is useful and reconcile commissions. See the affiliate disclosure.
• Technical data — your IP address is used briefly to limit sign-in attempts and protect against abuse. If error reporting is switched on we send crash and error reports (Sentry) with personal details removed — no e-mail address, no coordinates, no message text.

Who else sees it

• People in the groups or friends rooms you share with, and anyone you publish a route, review or blog post to.
• Our service providers, only as needed to run the service: hosting ([hosting country]), file storage, Stripe (payments), and Sentry (error reports, if enabled).
• Map tiles come from OpenStreetMap-based servers, which see your IP address and the area you view, like any website.
• We do not sell your data and we do not use advertising trackers.

Your choices and rights

• Delete your account — in the app: Profile → Delete account. This removes your profile, recorded days, location data, group memberships, friends, favourites and notifications, cancels any subscription, and deletes the groups and routes you own.
• What stays, without your name (shown as “Deleted user”): bookings and messages that other people or businesses rely on, and reviews, blog posts and events you wrote in other people’s spaces.
• Stop sharing your location at any time from the map or the sharing control; revoke location permission in your phone’s settings.
• You can ask us for a copy of your data, to correct it, or to object to its use: write to [contact e-mail]. You may also complain to your data-protection authority.

How long we keep data

Account data until you delete the account. Live location: last position only, for a few hours at most. Recorded days and routes: until you delete them or your account. Records we must keep for accounting or legal reasons: as the law requires, without your name after deletion.

Children

The service is not meant for children under 16.

Changes

If this policy changes in a way that matters, we will tell you in the app or by e-mail.