Privacy Policy

PakTrails publishes this website and the PakTrails mobile app for Android and iOS. For anything in this policy, write to paktrails.pk@gmail.com. This policy covers both the website and the app.

If you never sign in: nothing that identifies you. Our servers keep ordinary web request logs, which include an IP address, for up to 30 days so we can spot abuse and diagnose failures.

If you create an account: your email address, your name and profile picture if your sign-in provider supplies one, and which provider you used. You may optionally add a phone number, birth year, gender and home town in your profile; all four are blank unless you fill them in.

What you create: the trails you save, the trails you mark as completed, the reviews you write, and the photographs and captions you upload. Reviews and photographs are published publicly beside the trail, with the name on your account.

If you subscribe: the plan, its status and dates, and a reference issued by the payment processor. We never see or store your card details.

The app asks for location access so it can show your position on the trail map and tell you which way you are facing. It asks only for access while you are using the app: it does not request background location and cannot track you when it is closed.

Position readings are used on your device and are not transmitted to us, stored on our servers, or shared with any third party. If you decline the permission the app still works; the map simply will not show a blue dot.

You can withdraw the permission at any time in your device settings, under Apps → PakTrails → Permissions on Android or Settings → Privacy & Security → Location Services on iOS.

When you download a trail, the route, the map area and the photographs are copied onto your phone so they work with no signal. That copy stays on your device. We record nothing about which trails you downloaded beyond the fact that you saved them to your account, and you can delete a download from inside the app at any time.

We use a small number of services to run PakTrails. Each is named here because a policy that says “third-party providers” without naming them tells you nothing:

• Supabase hosts our database and file storage, in a data centre in Mumbai, India. Your account and everything you create is stored there.
• Firebase Authentication (Google) verifies your sign-in and holds your email address and authentication identifier.
• Sign in with Google and Sign in with Apple are used only if you choose them. They tell us your email address and, where you allow it, your name and picture. Apple lets you hide your real address behind a relay, and that works normally here.
• MapTilerserves the map tiles. Drawing a map means requesting tiles from them, so MapTiler receives your device’s IP address and which part of the map is being drawn. It does not receive your GPS position or anything about your account.
• Vercel hosts this website and sees the request logs described above.

Each of these is bound by its own agreement to protect the data it handles to at least the standard set out here. We do not share your data with anyone else, and we do not sell it. There are no advertising networks and no behavioural analytics in the app or on this site.

Your account and the things you create are kept until you delete them or delete your account. Web request logs are kept for up to 30 days. Payment records are kept for as long as tax and accounting law requires.

You can delete your account from inside the app: open Profile, scroll to Account, and choose Delete Account. This removes your account, your saved and completed trails, and your reviews and photographs. It cannot be undone.

You can also ask us to do it, or ask for a copy of what we hold, or ask us to correct something, by writing to paktrails.pk@gmail.com from the address on your account. We answer within 30 days.

Withdrawing consent means either deleting your account or, for location, turning the permission off in your device settings. Neither requires our involvement.

Everything the app and the website send travels over HTTPS. Access to the database is restricted per user by row-level security, so one account cannot read another’s data. No system is perfectly secure, and we do not claim otherwise; if we ever discover a breach affecting you we will tell you.

PakTrails is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child has created an account, write to paktrails.pk@gmail.com and we will remove it.

If what we collect changes, this page changes with it and the date below is updated. Material changes will also be announced in the app.