This Privacy Policy explains what data the TrailLegs app ("App") collects, why, and how it is used.
Controller:
As a Netherlands-based developer, we comply with the General Data Protection Regulation (GDPR) and Dutch data protection law (UAVG).
When you use community features (submitting trail reports, confirming or flagging reports), the App generates a random identifier (UUID) stored locally on your device. This identifier:
Legal basis (GDPR): Legitimate interests — preventing abuse and ensuring service integrity.
Our server temporarily logs your IP address for rate-limiting purposes on API requests. This data is stored in memory for a rolling window of one hour and is not written to a database or retained beyond that window.
Legal basis (GDPR): Legitimate interests — preventing abuse.
When you submit a community report, the following metadata is stored alongside it:
This helps us debug issues and understand report quality. It is not linked to your identity.
We do not collect analytics, crash reports, or usage metrics on our own servers. We do not use any third-party analytics SDK (no Firebase, Amplitude, or similar).
The App requests access to your device's GPS location only when you enable location features (e.g. to show your position on the map, to auto-scroll weather to your current stage). Location data is:
Exception: When you submit a community report, your device's GPS coordinates are included in the submission for quality-assurance purposes. These coordinates are not stored in our database — only the POI's trail coordinates (which come from the trail data, not your device) are persisted.
You can use the App without granting location access. Navigation features will use manual stage selection instead.
Legal basis (GDPR): Consent — you explicitly grant location permission in your device settings.
You may set a trail name (nickname) in the App's settings. If set, this name is:
You can change or remove your trail name at any time in Settings. If you remove it, future reports will be anonymous, but your trail name remains on previously submitted reports until they expire.
Legal basis (GDPR): Consent — you voluntarily choose to set a trail name.
When you submit a trail condition report (water source status, trail condition, etc.), we store:
Reports are visible to all App users and stored on our server (traillegs.app, hosted in the EU).
Legal basis (GDPR): Consent — you voluntarily submit the report.
The App integrates third-party services that process data independently. We have no control over their data practices. Review their privacy policies:
The App does not use cookies or website tracking.
| Data | Purpose | Legal Basis |
|---|---|---|
| Anonymous device ID | Rate limiting, report attribution | Legitimate interests |
| IP address (transient, 1 hour) | API rate limiting | Legitimate interests |
| GPS location (when granted) | On-trail navigation, weather for current position | Consent |
| Trail name (optional) | Displayed with your community reports | Consent |
| Community report content + coordinates + timestamp | Trail condition information for other hikers | Consent |
| App version + locale (with reports) | Debugging and quality assurance | Legitimate interests |
| Subscription status (via RevenueCat) | Unlocking subscribed features | Contract performance |
We do not use your data for advertising, profiling, or automated decision-making.
We do not sell, rent, or trade your data. Data sharing is limited to:
Stored on our EU-hosted server (traillegs.app). Reports have an expiry mechanism — older reports are automatically retired based on category and activity. You may request deletion by contacting support@traillegs.app with your report details and approximate submission date. Because reports are anonymous, we may need identifying details to locate the specific report.
Generated locally on your device. Sent to our server only with community report interactions. Not stored independently outside of report records.
Retained in server memory for up to one hour for rate limiting. Not written to a database.
Processed in real time on your device. Not stored by us. Device GPS coordinates included in community report submissions are discarded on receipt and not persisted.
Held by Apple, Google, and RevenueCat. We do not maintain our own copy of your subscription history.
We use HTTPS for all API communication and take reasonable technical measures to protect data on our servers. No system is completely secure — do not include sensitive personal information in community report text.
Our server is hosted in the EU. Some third-party services (RevenueCat, Mapbox, Expo, NASA) are US-based. Data transfers to these services are covered by Standard Contractual Clauses or other GDPR-compliant transfer mechanisms as applicable. Refer to each service's privacy policy for details.
The App is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child under 16 has submitted personal data, contact support@traillegs.app and we will delete it promptly.
If you are in the EU or EEA, you have the right to:
Because the App collects minimal data and uses no accounts, we may hold very little or no data identifiable to you.
How to exercise your rights: Email support@traillegs.app. We respond within 30 days. No charge.
Complaint: You may lodge a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag, Netherlands
www.autoriteitpersoonsgegevens.nl — Tel: +31 70 888 85 00
In summary:
We may update this Privacy Policy. When we do, we update the "Last updated" date above. For material changes, we provide notice within the App. Continued use after changes take effect constitutes acceptance of the updated policy.
For questions, rights requests, or concerns:
Trail Legs
Email: support@traillegs.app
Website: traillegs.app
We aim to respond within 5 business days, and to formal GDPR requests within 30 days.
