Privacy Policy
Short version: we collect the minimum needed to run a mapping service with accounts, we don't run ads, and we never sell your personal data.
1. What we collect
| Data | When | Why |
|---|---|---|
| Email address | Pro checkout / billing status lookups | Link your Stripe subscription to Pro access |
| Email address (updates list) | Footer signup or checkout (consent shown at both) | Product updates & promos — every email carries a one-click unsubscribe link, and unsubscribing never affects your account or Pro access |
| Payment details | Checkout | Handled entirely by Stripe — card numbers never touch our servers |
| Random device id | Generated in your browser | Syncs your tracks/waypoints across sessions without an account |
| GPS tracks, waypoints, photos | Only when you record them | Field sync + offline packs; photos stay on-device unless synced |
| Clicked points & prediction scores | Map clicks / 👍👎 feedback | Model calibration (the "learning loop") — coordinates, not identity |
| Auggie chat messages | When you chat | Sent to Anthropic's Claude API to generate the answer; not used to train models |
| Page-view counts | Visiting | Anonymous counters (path + day) — no cookies, no fingerprinting, no IP stored by us |
2. What we don't do
- No selling or renting personal data. Ever.
- No third-party ad trackers or ad networks.
- No precise-location harvesting — GPS recording only runs when you press Start, and stays in your browser until you sync.
3. Where data lives
Local first: tracks, waypoints, and photos live in your browser's storage (localStorage/IndexedDB) and work fully offline. When you sync or subscribe, data is stored on Cloudflare's edge platform (D1 database) in the United States. Map tiles and telemetry from Mapbox are governed by Mapbox's privacy policy.
4. Service providers
Stripe (payments), Cloudflare (hosting, database, AI inference), Anthropic (Auggie's language model), Mapbox (base maps). Each receives only what it needs to do its job.
5. Retention & deletion
Billing records persist while your subscription is active and as required for tax/legal purposes. Field-sync data persists until you delete it in-app. To wipe everything tied to your email or device id, contact [email protected] — we'll confirm deletion within 30 days.
6. Children
The Service is not directed at children under 13 and we don't knowingly collect their data.
7. Changes
Material changes get posted here with a new date. Continued use after changes is acceptance.