Privacy Policy

Last updated: 5 July 2026

This Privacy Policy explains how Codewen Inc ("Codewen", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the Traileo mobile application and related services (the "Service"). Codewen Inc is the data controller for the personal data described here.

If you have questions, contact us at privacy@traileo.earth or by post at Codewen Inc, [POSTAL ADDRESS TBD].

1. Summary

• Traileo is an outdoor-activity app for recording, publishing, and discovering trails.
• We collect the information you provide (account, profile, content) and information generated by using the app (precise location during recording, activity statistics).
• We show no advertising, use no third-party advertising or tracking SDKs, and do not collect the iOS advertising identifier (IDFA). We do not track you across other apps or websites.
• We use a small set of providers (Google/Firebase, Apple, RevenueCat, Mapbox, Sentry) to run the Service.
• You can delete your account and associated data from within the app at any time.
• EEA/UK users have rights under the GDPR (Section 9).

2. Who this Policy applies to

The Service is intended for users aged 16 and over. It is not directed to children under 16, and we do not knowingly collect their personal data (Section 11).

3. Information we collect

3.1 Information you provide

• Account & authentication: email address, and — when you sign in with Apple or Google — the identifier and email those providers share. Passwords are handled by Firebase Authentication and never stored by Codewen in readable form.
• Profile: first and last name, date of birth, country, time zone, and any profile or background photos you upload.
• User content: trails you record and publish, trail cover and preview images, map markers, and social interactions (friend requests, connections).

3.2 Information generated by using the Service

• Precise location: while you are actively recording a ride (Freeride or Soloride), the app collects precise GPS location in the foreground and background to build your track. Location is collected only while a recording session is active. You can stop recording at any time.
• Recorded tracks & activity data: the coordinate trace, distance, duration, elevation, and derived statistics of your rides.
• Social graph & usage: your connections and the trails and profiles you save or interact with.
• Diagnostics: if crash and error reporting is enabled, technical diagnostic data (device model, OS and app version, crash/stack-trace information). We configure our diagnostics provider to avoid capturing precise location and directly identifying information.

3.3 Information from third parties

• Sign-in providers (Apple, Google): the identity token and basic account details you authorize.
• Subscription status (RevenueCat / Apple): whether you hold an active subscription and its tier and renewal state. Apple processes your payment; we do not receive your full payment card details.

4. How we use your information

• create and manage your account and authenticate you;
• provide core features — recording, publishing, discovering, and saving trails; leaderboards; and social connections;
• display maps and perform trail and place search;
• manage subscriptions, entitlements, and free-tier quotas;
• maintain security and integrity (including preventing fraud, abuse, and manipulation of statistics or leaderboards);
• diagnose crashes and improve stability and performance;
• communicate with you about the Service, including push notifications you enable; and
• comply with legal obligations.

5. Legal bases for processing (EEA/UK)

• Performance of a contract (Art. 6(1)(b)) — to provide the account, recording, publishing, social, and subscription features you request.
• Legitimate interests (Art. 6(1)(f)) — to secure the Service, prevent abuse and fraud, and diagnose crashes, balanced against your rights.
• Consent (Art. 6(1)(a)) — for precise location during recording (via the iOS location permission), push notifications, and other optional processing. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data to comply with law.

6. How we share information

We do not sell your personal data. We share it only as described here.

6.1 With other users

Content you make public — published trails, your public profile, leaderboard standings, and activity you share with connections — is visible to other users according to your visibility settings (including Ninja Mode and per-trail visibility).

6.2 With service providers (sub-processors)

6.3 Legal and safety

We may disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of Codewen, our users, or the public.

6.4 Business transfers

If Codewen is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to this Policy.

7. International data transfers

Our providers may process and store data in the United States and other countries. Cloud Functions and certain processing are configured for the European region where feasible. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. When you delete your account in the app, we delete your profile and associated personal data, including recorded tracks, saved-trail library, uploaded images, live-recording data, and statistics, and we remove your references from other users' social graphs. Some data may be retained for a limited period where required for legal, security, fraud-prevention, or backup purposes, then deleted or anonymized.

9. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You can edit most profile data and delete your account in the app. EEA/UK users may also lodge a complaint with their local data protection authority. To exercise a right, use the in-app controls or contact privacy@traileo.earth.

10. Security

We use industry-standard measures including encryption in transit (TLS), authenticated access, and server-side access-control rules. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

11. Children

The Service is not directed to and may not be used by anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact privacy@traileo.earth and we will delete it.

12. Push notifications & permissions

We request iOS permissions for location (to record rides, including in the background), notifications, and camera/photo library (to add profile and trail images). You control each permission in iOS Settings; denying one disables that feature but not the rest of the app.

13. No advertising or cross-app tracking

Traileo contains no advertising, integrates no advertising or analytics-tracking SDKs, and does not access the iOS advertising identifier (IDFA) or request App Tracking Transparency permission. We do not build cross-app or cross-site profiles of you.

14. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after changes take effect constitutes acceptance.

15. Contact

Codewen Inc
Email: privacy@traileo.earth
Post: [POSTAL ADDRESS TBD]