Orienteer Privacy Policy

1. Introduction

Orienteer is operated by Barleycorn Industries LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and share your personal information when you use the Orienteer mobile application and website (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in using a third-party provider (such as Google or Apple), we receive basic profile information from that provider as authorized by you.

2.2 Location Data

Orienteer collects precise GPS location data from your device. This is central to how the app functions. Specifically:

• Foreground location: When the app is open, we collect your precise GPS location to detect when you reach checkpoints during orienteering runs, to show courses near your current location, and to display your position on the map.
• Background location: During an active orienteering run, the app continues to collect your precise GPS location even when it is in the background or your screen is off. This ensures checkpoint detection works reliably and your route is recorded accurately while you run.
• Live location sharing: During group runs, your real-time location may be shared with other runners participating in the same course so you can see each other on the map.
• Approximate location: We may use your IP address to determine your approximate location for showing nearby courses when precise GPS is unavailable.

Location data is transmitted to and stored on our servers as part of your run history. You can control location permissions at any time through your device settings.

2.3 Activity and Run Data

We collect data about your orienteering activities, including checkpoint visits, route history, run start and end times, and performance statistics.

2.4 Device Information

We collect device identifiers and user agent information to provide the Service, troubleshoot issues, and improve performance.

2.5 Motion and Sensor Data

On supported devices, the app may access motion sensor data to optimize battery usage during location tracking.

2.6 Camera

The app may request access to your camera for scanning QR codes to join courses or events.

2.7 User-Generated Content

You may upload or create content through the Service, such as photos, text, team names, and course information.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the orienteering features of the Service
• Detect checkpoint visits and record your routes during orienteering runs
• Show courses and events near your location
• Share your live position with other runners during group runs
• Maintain your run history and activity statistics
• Process payments for premium subscriptions
• Send you important notifications about your runs and account
• Diagnose technical issues and improve app performance
• Comply with legal obligations

4. Data Sharing and Third-Party Services

We do not sell your personal information. We share data with the following categories of third parties as necessary to provide the Service:

• Infrastructure providers: We use Supabase for database hosting, authentication, and backend services, and Vercel for web hosting.
• Error tracking: We use Sentry to monitor and diagnose crashes and errors in the app.
• Payment processing: Stripe processes payments for premium subscriptions. Stripe's use of your data is governed by Stripe's Privacy Policy.
• Optional integrations: If you choose to connect a third-party service such as Strava, your activity data may be shared with that service according to your preferences.
• Other runners: During group runs, your live location is shared with other participants on the same course.

We may also disclose information if required by law or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Storage and Security

Your data is stored on servers operated by our infrastructure providers. The app also stores data locally on your device (including run history and cached course data) to support offline use. We use reasonable technical and organizational measures to protect your information, but no system is completely secure.

6. Data Retention

We retain your account and activity data for as long as your account is active. If you delete your account, we will delete your personal data within a reasonable timeframe, except where retention is required by law.

7. Your Rights and Choices

• Location permissions: You can enable or disable location access at any time through your device settings. Disabling location access will prevent the app from recording runs or detecting checkpoints.
• Account deletion: You may request deletion of your account and associated data by contacting us at support@orienteer.co.
• Data access: You may request a copy of the personal data we hold about you by contacting us.
• Notification preferences: You can manage notification permissions through your device settings.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@orienteer.co.

11. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Oregon, without giving effect to any principles of conflicts of law.