Trekr Privacy Policy

Effective May 1, 2026

Trekr ("we", "us", "the app") is a group travel coordination app operated by Coast Creative. This policy explains what we collect, how we use it, who we share it with, and what control you have over it. We've kept this short and plain because we want you to actually read it.

What we collect

• Account info. When you sign up, we store your email address, a display name, and (for email sign-ups) a hashed password. If you use Sign in with Apple, we receive your name and email from Apple.
• Profile info. Optional: profile photo, preferred currency, app language, and your device's timezone (used to show your "local time" to members in other timezones).
• Trek memberships and content. The treks you join, plus the expenses, settlements, meetups, itinerary items, photos, comments, and chat messages you post inside them.
• Location. Your latitude and longitude, plus the time it was recorded. We only record this while you have location sharing turned on for at least one trek, and only while the app has permission to read your location. You can turn location sharing off per-trek in Trek Settings, or revoke the OS permission entirely at any time in your device Settings.
• Push notification tokens. A device token from Apple's push service so we can send you in-app notifications. The token can't be used to read anything from your device.

How we use it

• To provide the app's core features — showing members on the map, splitting expenses, syncing itineraries, sending chat messages, etc.
• To send push notifications for activity in your treks (new expenses, meetups, comments, arrivals, itinerary reminders).
• To compute your "who's awake" timezone indicator visible to other trek members.
• We do not sell your data. We do not run advertising. The Trekr app does not use analytics or tracking SDKs.
• This website (trekrapp.com) counts page visits with Vercel Web Analytics. It uses no cookies, doesn't identify you, and doesn't follow you to other websites.

Who sees your data

• Other members of your treks can see your display name, profile photo, location (when sharing is on), and any content you post inside that trek. They cannot see your email address, password, or anything from a different trek.
• Service providers we depend on process some of your data on our behalf:
  • Supabase hosts our database, authentication, and file storage.
  • Apple Push Notification Service delivers our notifications via Expo's push relay.
  • Apple Sign In handles authentication when you use Sign in with Apple.
  • Mapbox provides geocoding for the "Where" search box on meetups and itinerary items. It receives the text you type, not your account info.
  • Open-Meteo provides weather forecasts for the Plan tab. It receives a latitude/longitude only — no account info.
• We will disclose data when required by law, court order, or to protect the safety of users.

How long we keep it

• We keep your data while your account exists. When you delete your account (Settings → Delete account), we permanently remove your profile, location, push tokens, and the expenses, photos, comments, and messages you've posted. Treks you created continue to exist for the other members; your authorship is cleared from those records.
• Backups may retain deleted data for up to 30 days in our hosting provider's backup system before they're rolled over.

Your rights

• Access. Everything we store about you is visible inside the app — your profile, your treks, your expenses, your messages.
• Export. You can export your trek's expenses and settlements as a CSV from Trek Settings. A full data export is on our roadmap; email us at the address below if you need one before then.
• Deletion. Settings → Delete account permanently removes your account. There's no undo.
• EEA / UK residents: you have additional rights under GDPR including rectification, restriction, objection, and the right to lodge a complaint with your data protection authority.
• California residents: you have rights under the CCPA including the right to know what we collect and the right to deletion. We do not sell personal information.

Children

• Trekr is not intended for users under 13. If you believe a child has created an account, email us and we'll remove it.

Security

• Data in transit is encrypted with TLS. Data at rest is encrypted by our hosting provider. Passwords are hashed; we never see them in plaintext. No system is perfectly secure — please choose a strong password and don't reuse it from other services.

Changes

• If we update this policy in a meaningful way, we'll show a notice the next time you open the app and update the effective date above. Trivial wording changes won't trigger a notice.

Contact

• Questions or requests? Email us at hello@trekrapp.com.

This policy reflects Trekr's actual data practices but is not legal advice. Last reviewed by Coast Creative on May 1, 2026.