Privacy Policy

1 Who we are

Trail Navigator is provided by E. Fagerman Apps & Stuff AB, Sweden. We are the controller of personal data processed to operate Trail Navigator. Contact us about privacy or your rights at erik.fagerman@appsandstuff.se.

This policy explains how the app handles navigation, local GPX routes, accounts, Ride Groups and Alerts. Group features share identifiable information, including precise location when you choose to share it. Buying a subscription does not automatically create a Trail Navigator account or enable group sharing.

2 Information we process

Accounts and profiles. When you use Sign in with Apple, Firebase Authentication processes your account identifier and authentication information. We store your profile name and initials, and authentication credentials needed to maintain and revoke your sign-in connection. Your own phone number and an emergency contact name and phone number are optional.

Groups. We process group names, owners, memberships, roles, invitation records and related identifiers and timestamps. Your profile identity is associated with your group membership.

Location and Alerts. Navigation uses your precise location when permitted by iOS. If you enable group location sharing, we process your current location, location timestamp, movement information and sharing status. Alerts include their sender, category, status, timestamps and any location or other content included in the alert.

Technical and support data. Our services and providers process connection and security information such as IP addresses, device and app information, authentication and app integrity checks, installation or session identifiers, and operational logs. If you contact us, we receive your email address and the information you send. Avoid including unnecessary sensitive information.

Purchases. Apple processes App Store payments. The app receives purchase and subscription entitlement information to enable paid features. We do not receive your payment card details.

3 Who can see your group information

Members of a group can see other members’ names and initials, information about the group, and Alerts shared with that group. Members can also access any phone number and emergency contact details you have added to your profile. These details are optional and can be removed from your profile.

When you share your location with a group, other members can view it. Groups are permanent: membership does not end when a ride ends. A member does not have to be riding or have that group selected as their current group to access shared information. Share only with people you trust and review your memberships regularly.

An invitation link can allow its recipients to join the group while the invitation is valid. Handle invitation links carefully. The group owner can manage membership. Leaving a group or being removed ends access through that membership, but cannot erase screenshots or other copies independently made by recipients.

If you provide another person’s emergency contact details, tell them that their name and phone number will be stored and shared with your group members, and provide them with this policy. Add only someone who has agreed to be your contact. They can contact us to exercise their data protection rights.

4 Your location controls and local GPX files

You can pause group location sharing, leave a group, or change location permissions in iOS Settings. Location may be used in the background for navigation or group sharing when those features are active and iOS permits it. A denied permission may limit the relevant feature. Signing in alone does not start group location sharing.

Pausing live sharing does not necessarily remove a location already attached to an active Alert. Cancel the Alert separately when appropriate. Updates and removals depend on connectivity and server processing, so other devices may briefly display older information.

Imported and saved GPX files and the local route library are stored on your device. This release does not upload or synchronise that library to Firebase, including when you sign in. Device backups and files you export or share are controlled by the services and destinations you choose.

Map and navigation features use Mapbox. Requests can include search terms, precise coordinates and route geometry needed to provide those features. Local GPX storage therefore does not mean that coordinates used for online navigation stay entirely on your device.

5 Why we process data

For users in the European Economic Area, we process account, subscription entitlement and group information, and location needed for features you request, to perform our agreement with you. Providing optional information is your choice; without information or permissions needed for a feature, we may be unable to provide it.

We rely on legitimate interests to secure and operate the service, prevent unauthorised access, investigate failures and respond to enquiries. Our legitimate interest in processing an emergency contact’s limited details is to enable the contact function requested by the member, with access restricted to their groups. We weigh these interests against the affected person’s rights.

We also process information where necessary to comply with legal obligations or establish, exercise or defend legal claims. If processing requires your consent under applicable law, we will request it and you may withdraw it. An iOS permission controls device access; this policy itself is not a blanket request for consent.

6 Service providers and international processing

Google Firebase and Google Cloud provide authentication, databases, backend processing and security checks for accounts, groups and Alerts. Apple provides Sign in with Apple, App Store purchases and device services. Mapbox provides maps, search and navigation and may process usage, location and diagnostic data under its own terms and privacy information.

Providers process data on our behalf and, for certain activities, as independent controllers. Their privacy information explains their own processing: Firebase privacy and security (https://firebase.google.com/support/privacy), Apple Privacy Policy (https://www.apple.com/legal/privacy/en-ww/), and Mapbox Product Privacy Policy (https://www.mapbox.com/legal/privacy).

These providers operate internationally and data may be processed outside the European Economic Area, including in the United States. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses. Contact us for information about the safeguards applicable to your data.

We may disclose information where required by law or necessary to protect legal rights or the security of the service. Group sharing described above involves identifiable data; it is not limited to anonymous statistics.

7 How long information is kept

Account and profile information is kept while your account remains active, unless you remove it earlier. Group records are kept while needed for the group and its memberships, subject to account and group deletion.

Live group sharing maintains a current position rather than a stored ride history. When a pause or removal is processed, the live coordinate is cleared. Stale records are cleaned up automatically. An Alert’s location is removed when the server processes its cancellation or expiry. Alert and invitation records are scheduled for cleanup seven days after their expiry; automatic deletion can occur later because cleanup is asynchronous.

Account deletion is processed in the background and retried if interrupted. A limited deletion record, including the account identifier and cleanup status, is kept during processing and scheduled for removal eight days after completion to prevent delayed requests from recreating deleted data.

Security logs, provider records and backups may have separate retention periods. Their retention depends on the purpose of the record, incident investigation, recovery needs and applicable legal requirements. Such records may therefore remain after removal from the active service. Contact us for information about the retention applicable to a particular record.

8 Deleting your account and exercising your rights

You can request account deletion in the app or contact us by email. Deletion removes your account and associated server data through the cleanup process. Groups you still own are deleted; transfer ownership first if the group should continue. A device-local GPX library is separate from the account and is not a cloud backup restored by signing in.

Uninstalling the app does not delete your server account. Deleting your account or uninstalling the app does not cancel an App Store subscription; manage cancellation through Apple’s subscription settings.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where it is the basis for processing. These rights are subject to legal conditions. We may need to verify your identity before acting on a request.

Contact erik.fagerman@appsandstuff.se to exercise your rights, including if you are listed as an emergency contact. You may also complain to the Swedish Authority for Privacy Protection, IMY (https://www.imy.se/en/), or your local supervisory authority.

9 Children and policy updates

Trail Navigator is not intended for children under 13. If you believe a child has provided personal data contrary to applicable requirements, contact us so we can investigate and take appropriate action.

We will update this policy when our processing changes and show the updated date. We will provide additional notice of material changes where required. If a new purpose requires consent, publishing an updated policy does not replace that consent.