Privacy Policy

Overview

Furthr ("Furthr," "we," or "us") is a hiking-log app that helps you record hikes, track trail mileage, save photos taken on the trail, and share progress with friends. Furthr is operated by Ian Sacco, who is the data controller for your personal information under applicable privacy law. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have about that information. It covers both the Furthr app and our website, hikefurthr.app.

By creating an account or using Furthr you agree to this policy. If you do not agree, please do not use the app.

Information You Provide

Account information. When you sign up with email and password we collect your email address, a hashed password, your chosen display name, and your username.

Sign in with Apple. If you sign in with Apple, we receive an identifier from Apple plus the email and (on first sign-in only) the name you choose to share. If you use Apple's "Hide My Email" feature, we only ever see Apple's private relay address - we never receive your real email.

Sign in with Google. If you sign in with Google, we receive an identifier, your email, and your basic profile (name and avatar URL) as authorized by Google.

Profile content. Anything you add to your profile - display name, username, and avatar image - is stored so it can be shown in the app, along with preferences you set (such as the kinds of trails you like).

Hike content. Trail names, dates, day-by-day notes, photos and videos you attach, private map markers you place, and the social activity you generate (friends, friend requests).

Messages and groups. If you use Furthr’s social features, we store the direct messages you send and receive, the groups you join, and the content you post to groups (such as shoutbox posts, trail magic posts, and summit posts) so we can deliver them to the people you’re sharing with.

Reports and blocks. If you report a user, message, or post, we record who filed the report, who was reported, the reason you give, and a snapshot of the reported content so we can review it even if it is later edited or deleted. If you block someone, we store that block so we can keep them from contacting you. If we restrict or suspend an account for violating our Terms, we keep a record of that action.

Feedback. If you send feedback or a bug report from inside the app, we store your message and any screenshots you attach.

Information Collected Automatically

Location data. With your permission, Furthr reads your device location in two ways. While a hike is being recorded, it reads your location continuously — including in the background — so it can compute mileage, build a track of your route, and keep recording if you lock your phone; that track is saved with the hike. Outside a hike, it reads your location only in the foreground and only while a feature needs it: to show where you are on the map, to suggest trails near you on the home screen and in recommendations (your position is sent to our servers to rank nearby trails and is not stored), to prioritize nearby results in place search (which is handled by MapTiler), and to record weather for a completed hike (see below). Furthr never reads your location in the background unless you are recording a hike. You can revoke location permission at any time in your device settings; some features will stop working without it.

Weather. After a hike is finished, Furthr can record the weather you hiked in. To do that our servers send a small number of coordinates taken from that hike's recorded track (up to six points, with their elevation where we have it) and the date range of the hike to Open-Meteo, a weather data provider, and save the temperatures and conditions it returns alongside the hike. The request is made by our servers rather than by your device, and it carries no account, email, or device identifier - Open-Meteo receives nothing that identifies you.

Photos and media. With your permission, Furthr can read photos and videos from your camera roll so you can attach them to a hike, and can look through your library for photos taken on a hike’s dates so it can offer them to you. We only upload the items you choose to attach. Before a photo or video is uploaded, Furthr removes the location metadata (EXIF and QuickTime GPS tags) embedded in the file. Furthr does not use your device’s camera or microphone.

Notifications. Furthr shows an activity feed inside the app (for things like friend requests and group activity) and displays a persistent device notification while a hike is being tracked so recording keeps running. Furthr does not currently send remote push notifications.

Security checks. When you create an account, sign in, or reset your password, we use Cloudflare Turnstile to verify that the request comes from a human and not an automated program. Turnstile runs silently in the background and evaluates signals from your device to make that determination - it does not show puzzles and does not track you across other apps or websites. Cloudflare's handling of this information is described in the Cloudflare Turnstile Privacy Addendum.

Usage analytics. Furthr records basic in-app activity — which screens you open and which actions you take — together with your account identifier and username, so we can understand how the app is used and improve it. This is processed on our behalf by PostHog. It is never used for advertising, and we do not track you across other apps or websites. You can turn usage analytics off at any time in Settings.

Diagnostic logs. We retain minimal application logs (such as error reports and request timestamps) to keep the service running and debug issues. These logs do not include your hike content. Crash reports are processed on our behalf by Sentry, and application logs by Axiom.

Network data. Like any online service, our servers and the service providers listed below receive your device’s IP address whenever the app makes a network request. We use IP addresses for security, rate limiting, and abuse prevention — not to track you.

App updates. When the app starts, it checks Expo’s update service for over-the-air updates. That request carries standard technical details (such as your app version) and your IP address, but no account information.

How We Use Your Information

To create and operate your account, including signing you in across devices.

To record, save, and display your hikes, photos, mileage, and stats.

To deliver social features: showing your profile to friends, fulfilling friend requests, and delivering your messages and group posts.

To keep the service secure, review reports, moderate content, and detect abuse.

To understand how the app is used, so we can fix problems and improve it.

To respond to support questions you send us.

We do not sell your personal information. We do not use your hike data, location, or photos for advertising.

How Your Information Is Stored and Shared

Furthr stores your account, profile, hikes, photos, videos, and messages with our infrastructure provider, Supabase. Data is encrypted in transit (HTTPS) and at rest by the underlying database and storage service. Photos, videos, and avatars are stored at unlisted addresses: they are not listed anywhere, are not searchable, and are shown only to the people the app shares them with, but anyone who obtains the exact link to a file can view it. Permanently deleting a photo or hike, or deleting your account, removes the underlying files.

We share data only with the service providers we need to operate Furthr: Supabase (database, authentication, file storage, edge functions), Apple (for Sign in with Apple), Google (for Sign in with Google), Cloudflare (bot protection during account creation and sign-in, and delivery of trail map data), MapTiler (base map tiles and place search), Open-Meteo (weather for a completed hike), Expo (delivery of app updates), Sentry (crash reports), Axiom (application logs), PostHog (product analytics), and Resend (transactional email, such as the link to a copy of your data). These providers process data on our behalf and are bound by their own privacy and security commitments.

We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to protect our rights, the safety of users, or to comply with a legal request.

Our Website

Our website, hikefurthr.app, is hosted by Vercel, which receives your IP address and standard request logs when you visit. If you join the waitlist, we store the email address you enter, the platform you visited from, and the page you signed up on, and we send you a confirmation email through Resend. If you submit an account-deletion request through the website, we store the email address you enter so we can process the request. IP addresses on these forms are used only for rate limiting and abuse prevention. Pages on our site load fonts from Google Fonts, which receives your IP address when a page loads.

Data Retention

We keep your account information and content for as long as your account exists. Hikes and days you move to the Trash are permanently deleted 30 days later, or sooner if you delete them yourself or delete your account. Data-export archives are automatically deleted after 7 days, and creating a new export deletes the previous one. Diagnostic logs and crash reports are retained for a limited period and then deleted. Moderation reports are kept while the accounts involved exist so we can enforce our Terms. If you request account deletion through our website, we keep the request record (the email you entered and the account it matched) for 90 days after the request is completed so we can confirm it was honored, then delete it. When you delete your account, the data described below is removed immediately; residual copies in encrypted backups and server logs are purged on a rolling basis.

Your Choices and Rights

Access and correction. You can view and update your profile from inside the app at any time.

Data export. You can download a complete copy of your data from Settings > Export Data. The export is a ZIP archive containing your profile, hikes (including GPX tracks of your routes), photos, messages you’ve sent, group activity, and social data. A download link is shown in the app and emailed to you, and the archive stays available for 7 days.

Account deletion. You can permanently delete your account from Settings > Delete Account. Deleting your account removes your auth record, profile, hikes, hike days, photos and videos, GPS tracking points, messages, group posts, map markers, reports, feedback, friend connections, and stored files such as your avatar. This action is immediate and cannot be undone. You can also request deletion from our website at hikefurthr.app/delete-account if you no longer have the app installed.

Permissions. Location, photos, and notification permissions can each be revoked from your device's system settings.

Analytics. You can turn off usage analytics in Settings; Furthr then stops recording your in-app activity on that device.

Data requests. If you have questions about your data or want to make a request, contact us at the email below and we will respond.

Regional Privacy Rights

Depending on where you live, you may have legal rights over your personal information — including the rights to access, correct, export, or delete it, and to object to or restrict certain processing. The export and deletion tools above are how we honor those rights; contact us for anything they don’t cover.

Furthr’s data is processed and stored in the United States. If you use Furthr from outside the U.S., your information is transferred to and processed in the U.S.

Where the GDPR or UK GDPR applies, we process your information to perform our contract with you (running the service you signed up for), for our legitimate interests (keeping the service secure, debugging, and improving it), and with your consent where required (such as device permissions). You can exercise your rights with the tools above or by contacting us; we respond to verified requests within one month. You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident: we do not sell or share your personal information as those terms are defined in the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.

Children's Privacy

Furthr is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated in the app or by email when reasonable.

Contact

Questions about privacy? Reach us at hikefurthr@gmail.com.