Privacy Policy

Information we collect

• Account details. Your name, email address, and optional username. If you sign up with email, we store your password only as a one-way hash. If you sign in with Google, we receive your name, email address, and profile photo from Google.
• Profile photo. If you upload an avatar, we store the image.
• Location. With your permission, the app uses your device's location to show where you are, plan routes from your position, and give turn-by-turn guidance. We don't keep a history of your location on our servers.
• Saved routes. When you save a route, we store its start and end points (including place names), the route path, elevation, distance, duration, and directions.
• On-device data. Your settings (theme, voice guidance, orientation, guidance style), a short-lived copy of your current route so it survives a reload, and offline copies of app files are stored in your browser or device, not on our servers.

How we use it

• To create and secure your account and sign you in.
• To find, display, and navigate routes, and to save and reopen routes you choose to keep.
• To send password-reset emails you request.
• To protect the service, for example by limiting repeated sign-in attempts.

Who we share it with

We share information only with the service providers that run parts of the app for us:

• Mapbox — maps, place search, and directions. Locations and search text you use for routing are sent to Mapbox to get results.
• Google — sign-in, if you choose “Continue with Google.”
• UploadThing — stores profile photos you upload.
• MongoDB — our database, which stores account details and saved routes.
• Our email provider — delivers password-reset emails.
• DiceBear — if you have no profile photo, a placeholder avatar is generated from your username (or an internal account ID if you have none). Your email address isn't sent.

We may also disclose information if required by law.

Shared route links

Every saved route has its own link, and anyone who has that link can open the route without signing in, whether or not you've shared it. They can see the route's map, start and end points (including place names), distance, elevation, and directions. The link doesn't show your name or email address. Links are hard to guess, but treat them like the route itself: deleting a saved route turns its link off.

How long we keep it

We keep your account details and saved routes until you delete them or delete your account. You can delete individual saved routes at any time.

Deleting your account

You can delete your account from Settings → Delete account in the app. This permanently removes your account details, saved routes (which also turns off their links), and uploaded profile photos from our systems, and signs you out on every device. To do that, we keep a one-way hash of your email address and the deletion time for 30 days; it can't be used to recover your email. If you can't sign in, contact us and we'll delete your account for you.

Your choices

• You can turn off location access in your device or browser settings at any time; route planning from your position won't work without it.
• You can update your name and username in your profile.
• You can ask us for a copy of your data or to correct it by contacting us.

Children

Hillfinder isn't directed to children under 13, and we don't knowingly collect their personal information.

Security

Data is sent over encrypted connections and passwords are hashed. Your list of saved routes and your account details are only available when you're signed in, but an individual saved route can be opened by anyone with its link (see “Shared route links”). No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we'll update the effective date above and, for significant changes, let you know in the app.

Contact

Questions or requests about your privacy: 17antonio.ortiz@gmail.com.