Privacy Policy
Effective 16 October 2026
Gorpology™ is run by Gorpology LLC, a Wyoming limited liability company ("Gorpology", "we", "us"), which is responsible for your personal data in the app (on the web at gorpology.io and in app stores).
The short version
- We collect what the app needs to plan and record trips with your party and clubs, and nothing for advertising.
- We don't sell your data, and we don't share it for advertising.
- Your location is only recorded when you choose to (check in, record a track, live view), and only shown to the people the app shows it to.
- You can delete your account yourself, at any time, in Options > General > Account. You can ask for a copy of your data at support@gorpology.io.
What we collect and why
| What | Why |
|---|---|
| How you sign in: your email address and password (the password is stored hashed by our authentication provider), or your Google account's email and name | Your account and sign-in |
| Age confirmation and terms acceptance (date and version; your date of birth is checked at sign-up and not stored) | Our minimum age and your agreement to the terms |
| Profile: name, handle, hometown (and its map position), experience, bio, links, playlist, colour, Bokka Bot look, and the profile card made if you share your profile | Showing you to your party, friends and clubs; "routes near me" in the Atlas; your share link |
| Quests, stops, gear and readiness, notes, journal entries, field notes and trail beta, photos (which can include where they were taken) | Planning and recording trips |
| Location: check-ins, recorded tracks, live view positions, steps you log | Recording trips, showing your party where you are, activity stats, earning beans and checking contracts |
| Approximate location (city level) worked out from your connection when you open the Atlas, if you haven't set a hometown and haven't already allowed the app to use your location. Our hosting provider turns the request's IP address into a city and a rounded position (to about a kilometre); the app keeps it in memory until you close it, and it isn't stored on our servers or in your account | Showing routes near you on the Atlas front page without asking for location permission |
| Connected services and devices you choose to link (Strava, a satellite messenger's map share, an off-grid radio) | Bringing your positions and activities into the app |
| Game records: beans earned and spent, items you own, contracts and collectibles | Running the game features |
| Atlas reviews and photos you post | Shown publicly on the route's page |
| Support requests, with the screen, page and device details you send with them | Answering and fixing problems |
| Reports you make about someone else's review, photo, post or profile (the reason, your note and a copy of what you reported), and the people you block | Keeping the app safe: our administrators review reports; blocking hides that person's content from you and stops their requests and invites. The person you report or block isn't told who did it. |
| App error reports (the error, the page, the app version and your device type) sent automatically when something breaks | Finding and fixing bugs |
| Basic technical logs kept by our hosting providers (such as IP address and time of requests) | Security and keeping the app running |
Camera (Peaks Around Me): if you turn the camera on in the 3D view, the picture is used only on your device, to show peak names over it and line them up with the skyline. The frames are never stored or uploaded. A photo you take there is handed to your phone to save or share; we don't receive it.
Where laws such as the EU and UK GDPR apply, we rely on: the contract with you (to run your account and the features you use), your consent (location recording, connected services; you can withdraw it at any time), and our legitimate interests (keeping the app secure, fixing bugs, preventing cheating).
Who can see what
- Your party (people on the same quest) sees that quest's plans, stops, gear readiness, field notes and the positions shared on it.
- Your friends and clubs see your profile, club quests and entries you share to a club's feed; leaderboards only if you leave that on.
- Everyone can see Atlas routes and the reviews and photos posted on them, with your name, and your profile card if you share its link.
- Our administrators can see account details (such as your email) where needed for support, safety and running the app.
- Off-grid radio: notes and positions you send over a mesh radio network can be received by anyone listening on that channel.
Services we use
We use providers to run the app. They process data on our behalf, only to provide their service:
- Database, sign-in and file storage: Supabase.
- Hosting and server functions: Netlify.
- Email: Resend, which sends sign-up, password and support emails.
- Sign-in with Google (if you choose it) and Strava (if you connect it), under their own privacy policies.
- Purchases: if you buy bean packs, the app store you buy through (Apple or Google) or our payment provider handles the payment; we receive a confirmation, not your card details.
- Maps, terrain and satellite imagery: tile providers such as Esri, EOX, OpenStreetMap and the Overpass API, and terrain tiles hosted on Amazon Web Services. Your device requests map tiles for the areas you view, so these providers see the areas requested.
- Weather: Open-Meteo receives the coordinates of the place you're looking at.
- Place search: a geocoding service receives the place names you search for (for example your hometown).
We may also disclose data if the law requires it, to protect someone's safety, or to a company that takes over the app (which would have to keep to this policy).
Where your data is kept
Our providers store data in the United States and other countries. Where the law requires it, transfers are covered by safeguards such as the providers' standard contractual clauses.
On your device
The app stores your data on your device (browser storage and caches) so it works offline, and keeps you signed in. It doesn't use advertising or tracking cookies. Signing out clears your synced data from the device.
Security
Data is sent over encrypted connections, access to your records is limited by your account, and passwords are stored only in hashed form. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
How long we keep it
Delete your account
You can delete your Gorpology account yourself, at any time:
- Sign in at gorpology.io or in the app.
- Open Options › General › Account › Delete account, and confirm.
Or email support@gorpology.io from the address on your account and we'll delete it for you.
Deletion removes your sign-in, profile and personal content as listed below. What stays: quests you shared with other people (with you taken off them), your contributions to shared things shown as "Deleted member" with nothing that identifies you, and support threads and purchase records for as long as the law requires.
Everything else
We keep your data while your account is open. When you delete your account (Options > General > Account > Delete account), we delete straight away: your sign-in, profile, tracks and positions, photos, journal entries, field notes, Atlas reviews and photos, Bokka Bot, beans and items, friendships, blocks, club memberships, settings, connected-service tokens, support requests and reports you made, and quests only you were on. Quests you shared with other people stay for them, with you taken off them, and anything you added to shared things (a club's history, an Atlas route you edited) is shown as "Deleted member" with nothing that identifies you. Copies in our providers' backups are overwritten within about 30 days. We keep something longer only where the law requires it (for example records of purchases).
Can't sign in any more? Email support@gorpology.io from the address on your account and we'll delete it for you.
Your choices and rights
- Edit your profile and privacy settings in the app (for example who can find you, and leaderboards), and turn location recording and connected services on or off.
- Delete journal entries, photos, notes and reviews you posted, or your whole account.
- Ask for a copy of your data, or a correction, at support@gorpology.io. We'll answer within 30 days.
- Depending on where you live (for example the EU, the UK, or US states such as California), you may also have the right to object to or restrict some uses, to receive your data in a portable form, and to complain to a data protection authority. We don't sell or share personal information for advertising, and we treat everyone the same whichever rights they use.
Children
The app is for people aged 16 and over, and 16- and 17-year-olds need a parent or guardian's agreement. We don't knowingly collect data from anyone younger. If you think someone under 16 has an account, tell us at support@gorpology.io and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.
Contact
Privacy questions and requests: support@gorpology.io, or Options > Support in the app.
Gorpology LLC, 30 N. Gould St., #69979, Sheridan, WY 82801, United States. Phone: +1 307 368 9770.
See also the Terms of Service.