← PeakTrail

Privacy Policy

Last updated: July 3, 2026

1. Data We Store

PeakTrail stores all data locally on your device using on-device storage (SQLite database and app preferences). This includes:

• GPS recordings (location, speed, elevation, timestamps)
• Heart rate and cadence data (from BLE sensors or Health Connect)
• Saved routes and waypoints
• App settings and preferences
• Cached map tiles for offline use

This data never leaves your device unless you explicitly export or share it. Uninstalling the app deletes all stored data.

2. Data We Do Not Collect

We do not operate any servers. We do not collect, receive, or process:

• Your name, email, or any account information (no accounts exist)
• Analytics or usage tracking data
• Crash reports sent to a remote server (crash logs are stored locally only)
• Your location, activities, or health data on any remote system

3. Third-Party Services

PeakTrail contacts the following free, third-party services during normal use. These services have their own privacy policies. We describe what data they can see when you use each feature:

OpenFreeMap (map tiles)

• What it is: Free vector map tiles based on OpenStreetMap data
• What they see: Your device's IP address and the geographic area you're viewing (tile coordinates reveal approximate location)
• When: Whenever the map loads tiles that aren't cached offline
• Policy: openfreemap.org

Open-Meteo (weather forecasts)

• What it is: Free weather forecast API
• What they see: Your device's IP address and the latitude/longitude of the weather request
• When: When you view weather on the map or during recording
• Policy: open-meteo.com/en/terms

Nominatim (location search)

• What it is: Free geocoding service by OpenStreetMap
• What they see: Your device's IP address and your search query text
• When: When you search for a place by name
• Policy: operations.osmfoundation.org/policies/nominatim

Overpass API (trail discovery)

• What it is: Free API for querying OpenStreetMap data
• What they see: Your device's IP address and the geographic bounding box of your search
• When: When you search for trails
• Policy: overpass-api.de

OpenRouteService (routing)

• What it is: Free routing API by Heidelberg University
• What they see: Your device's IP address and the waypoints you route between
• When: When you plan a route or get turn-by-turn directions
• Policy: openrouteservice.org/terms-of-service

Google Health Connect (Android)

• What it is: Android's on-device health data store
• What they see: PeakTrail reads and writes health data (heart rate, exercise, steps) directly to your device's Health Connect store. This data does not pass through any server.
• When: When you enable Health Connect sync in settings
• Policy: health.google

Strava segment data (optional)

• What it is: Public Strava segment leaderboards via the embed endpoint
• What they see: Your device's IP address and the segment ID you request
• When: When you tap a segment to view its leaderboard
• Policy: strava.com/legal/privacy

4. Bluetooth

PeakTrail can connect to Bluetooth Low Energy (BLE) heart rate monitors and cadence sensors. This communication is direct between your device and the sensor. No Bluetooth data is transmitted to any server.

5. Permissions

PeakTrail requests the following permissions on your device:

• Location (foreground + background): To record GPS tracks while the app is open and while your screen is locked during recording
• Bluetooth: To connect to heart rate and cadence sensors
• Physical activity: To read step count via Health Connect
• Health data: To sync workouts, heart rate, and activity data with Health Connect
• Wake lock: To keep the screen on during recording (optional)
• Notifications: To show recording status notifications

All permissions are used only for app functionality. None of the data collected via these permissions is sent to us.

6. Children's Privacy

PeakTrail does not knowingly collect any data from anyone, including children under 13. No parental consent is required because no data is collected.

7. Your Rights

Because all data is stored locally on your device, you have full control:

• Access: View your data within the app
• Delete: Delete activities, routes, or all data by uninstalling the app
• Export: Export your activities as GPX files at any time
• No data portability request needed: Your data is already on your device

8. Changes to This Policy

We may update this privacy policy as the app evolves. Changes will be posted on this page with an updated date. Since no data is collected, no individual notification is necessary.

9. Contact

Questions about this privacy policy? Email support@peaktrail.ca or open an issue on our GitHub.