Privacy policy — TrailBivvy

TrailBivvy is still in development and not on the App Store. This policy describes the current development build and this website. It will be reviewed and updated before release.

At a glance

The app needs no account. It contains no analytics, no advertising, no tracking and no third-party SDKs.
Your trips, waypoints, photos, reports and settings stay on your iPhone. TrailBivvy runs no server and receives none of this data.
To show maps and weather, the app requests them from the providers listed below. These requests contain no identifiers, and the weather request uses a position rounded to about 100 m.
This website sets no cookies, uses no analytics and loads nothing from other websites. It is hosted by Cloudflare, which processes connection data to deliver it.

Who is responsible

The controller responsible for the processing described here is:

LyteFast Email: stephane.sprauer@gmail.com

The TrailBivvy app

Data that stays on your iPhone

The app stores the following data only on your iPhone. None of it is sent to TrailBivvy.

Data	Where it is kept	What it is for
Your current position (GPS)	In memory while the app runs	Map, navigation, Sleep Tonight and the Safety screen
Recorded trips and tracks	App database on your iPhone	Trip statistics and calibrating your walking pace
Your walking-pace factor	App settings on your iPhone	Arrival times that match your pace
Personal waypoints and notes	App database on your iPhone	Your own markers, such as a possible camp or water
Waypoint photos	App files on your iPhone, with iOS file protection	Notes for yourself
Your reports (for example a dry spring or a blocked trail)	App database on your iPhone, private	Your own observations
Downloaded maps and trail data	App files, excluded from iCloud backup	Offline use
Cached weather forecasts	App files	Showing the last forecast offline, with its fetch time
Settings	App settings on your iPhone	Your preferences, such as map layers and units

Tracks and waypoints leave your iPhone only if you export or share a GPX file yourself. If you back up your iPhone (for example with iCloud Backup), iOS may include the app’s data in that backup, which remains under your control.

Data that leaves your iPhone

These requests are the only data the app sends. None of them contains an advertising identifier, a device identifier, an account or a user ID.

Map tiles. When you view the map, the app requests map images for the visible area from the official map service of that country: swisstopo (Switzerland), IGN (France), basemap.at (Austria), BKG (Germany and a Europe overview), IGN España (Spain), Kartverket (Norway) or USGS (USA). While you view the map, only the provider covering the centre of the map is asked. As with any online map, that provider sees which map area is requested and your device’s IP address. Apple Maps draws the map where none of these maps applies and underneath the BKG Europe overview, under Apple’s privacy policy. Tiles you have downloaded are shown from your iPhone without a request.
Offline downloads. When you download a trek for offline use, the app requests the map tiles for the whole route corridor from each provider whose map the corridor crosses — for example swisstopo and IGN for a route through Switzerland and France. Those providers see the requested area and your device’s IP address.
Weather. When the app needs a forecast, it asks Open-Meteo for the weather at a position rounded to three decimal places (about 100 m) and an elevation rounded to 10 m. Open-Meteo also sees your IP address. The forecast is cached on your iPhone with these rounded values.
Protected areas. When online, the app may ask the Swiss federal geoportal (geo.admin.ch) which protected areas lie in the visible map area.
In-app purchases. Only if you open the TrailBivvy Pro screen does the app use Apple’s StoreKit, which Apple handles entirely. In the development build every feature is unlocked.

The trail catalogue needs no request: trail packs are built into the app.

Permissions

Location “While Using” for the map, navigation and planning.
Background location only while you record a trip or navigate. iOS shows the location indicator while it is in use.
Notifications only if you turn on background off-route alerts.

The Safety screen can prepare a message with your coordinates, altitude and a map link and hand it to the iOS share sheet. TrailBivvy never sends it by itself: you choose whether and with whom to share it.

What the app does not do

No account, no analytics, no advertising and no tracking. The app contains no third-party SDKs, and its privacy manifest declares that it does not track you. iCloud sync is designed but switched off; if it is ever added, it will be opt-in and your data would live in your own private iCloud database. We will update this policy before any new data flow is released.

This website

This website is a set of static pages. It sets no cookies, uses no analytics or tracking, contains no forms and loads no scripts, fonts or images from other websites. It is hosted for us on Cloudflare Pages, a service of Cloudflare, Inc. When you visit, Cloudflare processes technical connection data — such as your IP address, the page requested, the time and your browser’s user agent — to deliver the pages and to protect the service against abuse. We do not collect data about visitors ourselves.

When you contact us

If you write to us — for example to report a data problem, to ask for the trail data TrailBivvy derives from OpenStreetMap, or as a journalist — we process your email address, your message and anything you include, such as coordinates or photos. We use them only to answer you and, where you report a data problem, to check and correct the data. Your messages are stored by our email provider, Google (Gmail).

Purposes and legal bases

Data on your iPhone is processed by the app on your device, under your control, to provide the features you use. We do not receive it.
Requests to map, weather and geoportal services are needed to show the maps, forecasts and protected areas you ask for. Where the EU General Data Protection Regulation (GDPR) applies, the legal basis is the provision of the service you use (Art. 6(1)(b) GDPR) and our legitimate interest in a working app (Art. 6(1)(f) GDPR).
Delivering this website relies on our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
Answering your messages relies on our legitimate interest in answering enquiries and keeping the data accurate (Art. 6(1)(f) GDPR) or, where you ask us to do something for you, on steps taken at your request (Art. 6(1)(b) GDPR).

Where the Swiss Federal Act on Data Protection (FADP) applies, personal data is processed only for the purposes above.

Recipients

Each of these services processes the requests it receives under its own privacy policy:

Map services: swisstopo, Federal Office of Topography (wmts.geo.admin.ch, Switzerland); IGN (data.geopf.fr, France); basemap.at (mapsneu.wien.gv.at, Austria); BKG, Federal Agency for Cartography and Geodesy (sgx.geodatenzentrum.de, Germany); IGN España (www.ign.es, Spain); Kartverket (cache.kartverket.no, Norway); USGS, U.S. Geological Survey (basemap.nationalmap.gov, USA).
Protected areas: the Swiss federal geoportal geo.admin.ch.
Weather: Open-Meteo (api.open-meteo.com).
Apple: Apple Maps where no official map applies and underneath the BKG Europe overview, and StoreKit if you open the TrailBivvy Pro screen.
Website hosting: Cloudflare, Inc., which hosts this website for us.
Email: Google (Gmail), which stores the messages you send us.

The map services are those of the country they map — swisstopo and geo.admin.ch (Switzerland), IGN (France), basemap.at (Austria), BKG (Germany), IGN España (Spain), Kartverket (Norway) and USGS (USA) — and the app contacts each of them directly from your iPhone, for maps of its own area (BKG also for the Europe overview). For Open-Meteo, Apple and Cloudflare, the countries where data is processed and the safeguards for transfers outside Switzerland and the EU/EEA are being confirmed and will be listed here before release.

How long data is kept

Data on your iPhone is kept until you delete it. You can delete trips, waypoints and reports in the app and offline downloads under More → Downloads. Deleting the app removes all of its data from your iPhone.
The services listed above keep request data according to their own policies.
We do not collect data about visitors to this website ourselves. Cloudflare may keep connection logs to deliver and protect the website; how long it keeps them is being confirmed and will be stated here before release.
Messages you send us are kept only as long as needed to deal with your request, unless the law requires us to keep them longer.

Your rights

Depending on the law that applies to you, you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country. Because the app keeps your data on your iPhone and TrailBivvy runs no server, we usually hold no personal data about you, apart from any messages you send us. You can view, export and delete your data directly in the app.

To exercise your rights or ask a question, contact us: