Privacy Policy

Alpstrack ("we", "us") is a mobile app for discovering, planning, and recording mountain routes: hiking, ski touring, trail running, and similar activities. This policy explains what information we collect, why we collect it, who we share it with, and the choices and rights you have over it.

Account & profile

Creating an account uses Google or Apple sign-in. We store your display name, email address, profile photo, bio, home region, preferred sport, and unit preference (metric/imperial), as provided by you or the sign-in provider.

Location data

If you grant location permission, Alpstrack uses your device's GPS to center the map and show your position on the trail. If you start recording a route, we log a continuous trail of GPS points (with altitude and timestamps) for the duration of the recording and save it to your account once you stop. You can deny or revoke location permission at any time in your device settings; the map remains usable without it, but you won't be able to record routes.

Push notifications

Every notification is opt-in, from Profile > Notifications: nearby field reports, a daily summary of field reports, avalanche bulletin alerts for the massifs you choose, and Alpstrack news. To send them we store your device's push token, its notification permission status and the app's language. Only while "Nearby reports" or the daily summary is turned on, we also store your device's approximate position (rounded to about 1 km), updated when you open the app, to work out which reports are near you; it is never shown to other users, and it is deleted from our servers as soon as you turn both off. The massifs you follow for avalanche alerts are stored with your account. You can turn any notification off at any time, in the app or in your device settings.

Recorded & imported activities

Routes you record, and activities imported from a connected wearable (see below), are stored against your account with their session stats: distance, duration, elevation gain/loss, heart rate, cadence, speed, power, and similar data where available. Each route or activity has a visibility setting you control: public, friends only, or private.

Connecting a wearable (Suunto, COROS)

Alpstrack optionally supports linking a Suunto account so your workouts sync automatically. This is entirely opt-in. You're sent to Suunto's own login page in your device's browser, so your Suunto password is never seen by Alpstrack; once you approve the connection, Suunto gives us an access token scoped to your workout data, which we store securely to keep your account synced. We import your workout history (up to one year back) at linking, and new workouts automatically afterward. Only workout summaries are imported (sport, duration, distance, elevation, heart rate, and similar stats), not GPS tracks or lap data. You can disconnect your Suunto account at any time from your profile.

Linking a COROS account works the same way: you sign in on COROS's own page, and COROS gives us an access token for your workout data. We import your workouts from the last three months at linking (the furthest back COROS allows), and new workouts automatically afterward. Only workout summaries are imported (sport, duration, distance, pace, cadence, calories), not GPS tracks, heart rate or daily health data.

On iPhone, you can also import workouts from Apple Health (including those recorded on an Apple Watch). This is opt-in: Alpstrack asks for read-only access through Apple's own permission screen, and you can revoke it at any time in the Health app's settings. We read only workouts of outdoor sports (hiking, running, skiing, snowboarding, climbing, cycling) from the last year and new ones afterwards: their date, duration, distance, elevation gain, calories, average and maximum heart rate, and GPS route. They are stored as activities in your Alpstrack account, like the ones you record in the app. We never write to Apple Health, never read other health data (sleep, steps, medical records...), and never use Apple Health data for advertising or share it with third parties.

Importing your Strava history

You can import your history from Strava by uploading the account archive Strava lets you download (Settings > My Account > Download or Delete Your Account on strava.com). This is opt-in and one-off: Alpstrack never connects to your Strava account. The archive is uploaded to a private storage area that only our import service can read. We import your activities (date, sport, name, description and private note, duration, distance, elevation, heart rate, cadence, speed, power, laps and GPS track), the routes you created on Strava, and your activity photos (with the time and position stored in them), all as private: nobody else sees them until you change their visibility. We also keep each activity's original file (as recorded by your watch or phone) in private storage, so it can be re-read when Alpstrack supports more of its data. Everything else in the archive (your followers, kudos, comments, messages, contacts, gear, logins and settings) is never read. The archive itself is deleted from our servers as soon as the import has succeeded; if an import fails, it is kept so the import can be retried, and is deleted once it succeeds.

Content you post

Comments you post on a place are attributed to your display name and visible to other users, as are favorites and activities you choose to share. This is content you post directly and knowingly.

Map and place data

Hut, bivouac, and track information shown in the app (including photos) is sourced from public and community mountain-data providers, such as refuges.info, camptocamp.org, and skitour.fr. This is public reference data about places and routes, not personal data about you.

Device & usage data

We automatically collect crash reports and general usage analytics (such as which screens are used) via Firebase Crashlytics and Analytics, to maintain and improve the app.

When you use the app signed in, we store basic technical details about each device you use it on, with your account: the app version, the operating system and its version, the device model and manufacturer, the device's language and region, its time zone, whether it is a simulator, and the Firebase Analytics identifier of the installation. We use them for support, to fix bugs that affect a given device or version, and to know which app versions are still in use. We don't store your device's name or any hardware identifier.

Service providers

Alpstrack is built on a small number of infrastructure providers, each of which may process data on our behalf under their own security and privacy commitments:

We do not sell your personal data, and we do not use it for advertising.

Retention & deletion

We keep your account data and activity history for as long as your account is active. You can delete individual routes, activities, or comments at any time from within the app. To delete your account entirely, see how to delete your account. We'll delete your profile, recorded routes, imported activities, and posted content, except where we're required to retain limited records for legal or security purposes.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to certain processing, or to withdraw previously given consent (such as a wearable connection). To exercise any of these rights, contact us at contact@alpstrack.com; we'll respond within the timeframe required by applicable law.

International transfers

Our infrastructure providers may process and store data in countries other than your own. Where this involves a transfer out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

Children's privacy

Alpstrack is not directed at children under 13 and does not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. If we make material changes, we'll notify you through the app or by email before they take effect. The effective date above always reflects the most recent version.

Contact

Questions about this policy, or requests relating to your data, can be sent to contact@alpstrack.com.