Privacy Policy

Account & profile information. Name, email address, phone number, a profile photo you upload, a short bio, your home zip code/city, and the activities you're interested in. If you sign in with Google, we receive your name, email, and profile photo from Google instead of you typing them in.

Location information. We geocode your zip code (and event locations organizers enter) into an approximate latitude/longitude, used only to show you nearby events and to filter by distance. Your home coordinates are never shown to other users. An event's exact address is hidden from attendees until the organizer accepts them onto the roster. See our Safety page for how that gating works.

Emergency contact information (optional). Name and phone number for someone to reach in an emergency. This is entirely optional and off by default, and it's never shown to other members unless you turn on sharing for a specific group or event. Because this is information about someone else, you're responsible for having their okay before adding them.

Content you create. Events and groups you create, join requests and their answers, roster/attendee status, in-app event chat messages, feedback you submit, and reports you file about other users.

Uploaded files. Profile photos, group logos, and PDF itinerary/detail documents you attach to an event.

Verification status. Whether you've requested and received identity verification, and the timestamp. This is a self-attestation reviewed by an admin, not a government-ID check.

Device & usage information. Standard web request data (IP address, browser type, timestamps) processed automatically by our hosting and database providers. If you use TrekOut as an installed app (PWA) with a spotty connection, a pending check-in can be queued locally on your device. That queue stays only on your device, not our servers, until it syncs.

Cookies. We use only the cookies required to keep you signed in (issued by Supabase Auth). We don't use advertising or cross-site tracking cookies, and we don't run any third-party analytics or ad-tracking scripts.

To operate the core features of TrekOut: creating and joining events and groups, showing nearby events, connecting organizers with attendees, sending sign-in links and account-related email, moderating reports and enforcing our safety rules, and improving the app. We do not use your information for targeted advertising, and we do not sell your personal information.

With other users, by design. TrekOut is a social app. Your name, profile photo, and the activities/events you organize or attend are visible to other members according to the app's privacy rules. For example, your name is generally shown as first name and last initial to people you haven't connected with, your exact address is hidden until an organizer accepts you, and emergency contact details stay private unless you opt in. We describe these rules in more detail on our Safety page.

With service providers who help us run TrekOut, under agreements that limit what they can do with your data:

• Supabase: our database, authentication, and file storage provider.
• Vercel: hosting and content delivery.
• Resend: delivers our transactional sign-in and account emails.
• Google: if you choose "Continue with Google" to sign in.
• OpenStreetMap (Nominatim) and Zippopotam.us: turn a zip code or place name you enter into map coordinates. Only the text you searched is sent to them.
• OpenStreetMap tile servers: your browser loads map images directly from OpenStreetMap when you view a map, which exposes your IP address to them the same way loading any embedded map does.

For legal reasons. If required by law, or to protect the safety of our members.

We do not sell your personal information to anyone.

We keep your information for as long as your account is active. You can delete your own account at any time from your Profile page. When you do, we remove or scrub your personally identifying fields (name, email, phone, photo, bio, exact location, and so on) immediately. We keep a minimal, anonymized record tied to events or groups you created, so other members' event history and rosters stay intact, rather than deleting those rows outright and breaking other people's records. No personally identifying information about you remains attached to that record after deletion.

• Access and update most of your profile information anytime from your Profile page.
• Turn off sharing your attending events with friends, or emergency contact sharing with a group/event, at any time.
• Delete your account and personal data as described above.
• Block another user or report a problem directly from their profile.
• Contact us (below) to ask what information we hold about you or to request a copy.

If you are a California resident, you have additional rights under the CCPA to know, delete, and opt out of the sale of personal information. As noted above, we don't sell personal information. You can exercise the other rights using the contact information below.

TrekOut is only for people 18 years of age or older. It's not directed at children, and we do not knowingly collect information from anyone under 18. You confirm you meet this requirement when completing your profile.

We use industry-standard safeguards to protect your information, including encrypted connections, database-level access controls, and row-level security policies that limit exactly which data each user can read. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

If we make material changes to this policy, we'll update the effective date above and, where appropriate, notify you directly.

TrekOut is based in North Carolina, and this policy is governed by North Carolina law. In the event of a data breach affecting your personal information, we'll notify you as required under North Carolina's data breach notification law and any other law that applies to you.

Questions about this policy or your information? Contact us at ben@boutietteconsulting.com.