TrailBound Privacy Policy
Last updated: September 30, 2026
TrailBound is a mobile app for off-road riders. It is operated by Josh Sharrer, doing business as TrailBound, United States ("TrailBound", "we", "us"). This policy explains what information the app collects, why, who can see it, and the choices you have. Contact: support@trail-bound-app.com.
1. Information you give us
- Account details: email address, display name, username, and a password (stored only as a hash by Firebase Authentication).
- Optional profile details: profile photo, bio, and a free-text location (for example "Moab, UT").
- Machines you add to your garage: type, make, model, year, optional nickname, and optional photo.
- Content you create: rides (title, date, meet-up point, route, participants), trails, trail photos and condition reports, points of interest, groups, and messages you send in direct or group chats (text, photos, short video clips, shared locations, ride invites).
- Social data: friend requests and friendships, the list of users you have blocked, and any abuse reports you submit (which include your user ID and the description you write).
2. Information collected automatically
- Precise location. With your permission, TrailBound reads your device location while you are using the app to show nearby trails and rides and to center the map. While you are recording a ride, the app collects coordinates, altitude, speed, heading, and timestamps at regular intervals so the track can be saved. On Android this runs as a foreground service with a visible notification so recording continues while the screen is off; on iOS it uses background location while a recording is active. Location is not collected when you are not using the app and no recording is active.
- Recorded ride tracks are stored in our database with a visibility setting you control (private or public) and are also cached on your device.
- Push notification token. If you allow notifications, a device token issued by the Expo push service (delivered through Google FCM on Android and Apple APNs on iOS) is stored with your account so we can send you notifications.
- Crash and diagnostic data. When the app crashes or logs an error, Sentry receives the device model, operating system version, app version, the error details, a short trail of recent in-app actions, and your user ID. We do not capture screenshots.
- Local storage. A copy of your profile, your notification preferences, and in-progress ride tracks are kept on your device so the app loads quickly and recording survives a restart.
3. Sign-in providers
If you sign in with Google or Apple, we receive the identifier, name, and email address that the provider shares with us (and a profile photo from Google). Apple may provide a private relay email if you choose to hide yours. We do not receive your Google or Apple password.
4. How we use information
- To run the app: accounts, rides, trails, groups, chat, friends, and ride recording.
- To show your profile and the content you share to other members.
- To send push notifications you have turned on (ride reminders, ride and group activity, chat messages, friend requests). You can turn each category off in Profile → Notifications.
- To send account emails such as email verification and password reset. We do not send marketing email.
- To diagnose crashes and keep the app stable.
- To enforce our Terms of Service, including reviewing reports of abusive content.
We do not sell personal information and we do not share it for advertising. The app contains no ads.
5. What other members can see
- Your display name, username, and profile photo.
- Your bio, location text, and the machines in your garage (make, model, year, nickname, and photo). Everyone signed in can see these, or only your friends if you set your profile to private in Profile → Privacy.
- Rides you organize or join, including the meet-up point and route.
- Trail photos, condition reports, and points of interest you add.
- Messages in chats you take part in, and the groups you belong to.
- Recorded rides you mark as public. Private recordings are visible only to you.
Profile photos, trail photos, and group images are served from links that do not require sign-in, so anyone with the link can view them. Your email address is never shown to other members.
6. Service providers
We use these providers to run TrailBound. Each processes data only to provide its service to us.
- Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Functions, Hosting) — https://firebase.google.com/support/privacy
- Google Maps SDK for map display — https://policies.google.com/privacy
- Sentry for crash reporting — https://sentry.io/privacy/
- Expo push notification service, which relays notifications through Google FCM and Apple APNs — https://expo.dev/privacy
- Google Sign-In and Sign in with Apple, if you choose to use them
Your data is stored on Google Cloud servers in the United States. If you use the app from outside the United States, your data is transferred to and processed there.
7. Data retention
We keep your information while your account is active. Recorded ride tracks remain until you delete them or delete your account. Crash data is kept by Sentry for 90 days. Backups are rotated within 30 days. If you delete your account we remove the data described in section 8 promptly, normally within 7 days.
8. Deleting your account
You can delete your account inside the app: open the Profile tab and tap Delete Account (also available under Profile → Privacy → Delete Account). You will be asked to confirm twice. Deletion removes your profile, machines, profile and machine photos, recorded ride tracks, friend links and requests, block list, notification settings, push tokens, and your sign-in credentials (including revoking Sign in with Apple). Rides and trails you created remain available to the community with your name removed. Messages you sent remain visible to the other participants of that chat and are shown as from "Deleted User".
If you cannot access the app, you can request deletion at https://trail-bound-app.com/delete-account or by emailing support@trail-bound-app.com with the subject "Delete my TrailBound account" from the email address on the account.
9. Your choices
- Turn location, camera, photo, and notification access on or off in your device settings at any time. The app still works without location, but nearby features and ride recording need it.
- Choose which notification categories you receive in Profile → Notifications.
- Mark recorded rides private or public, and delete individual recordings.
- Set your profile to private in Profile → Privacy so that only friends see your bio, location, and garage.
- Block or report any member from their profile or from a message.
10. Children
TrailBound is not directed to children and you must be at least 13 years old (or older where local law requires) to use it. We do not knowingly collect information from children under 13. If you believe a child has created an account, email support@trail-bound-app.com and we will delete it.
11. Your rights
Depending on where you live you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. For users in the European Economic Area and United Kingdom, our legal bases are performance of our contract with you (running the app), your consent (location, photos, notifications), and our legitimate interest in keeping the app secure and stable; you may also lodge a complaint with your local data protection authority. California residents have the right to know what personal information we collect, to delete it, and not to be discriminated against for exercising these rights; we do not sell or share personal information as defined by the CCPA. To exercise any right, email support@trail-bound-app.com. We will verify your request using the email address on your account and respond within 30 days.
12. Security
Data is encrypted in transit (TLS) and at rest on Google Cloud. Access to your data is restricted by Firebase security rules so that only you and the members you share content with can read it. No system is perfectly secure, so please use a strong password and keep your device updated.
13. Changes to this policy
If we change this policy we will update the date above and publish the new version in the app and at https://trail-bound-app.com/privacy. Material changes will be announced in the app before they take effect.
14. Contact
Josh Sharrer, doing business as TrailBound, United States
Email: support@trail-bound-app.com