This policy explains what information Pathway collects, why, who it is shared with, and the choices you have. It covers the Pathway apps for iPhone and Android and this website.
Who we are
Pathway is operated by [COMPANY LEGAL NAME], [COMPANY ADDRESS] (“we”, “us”). You can contact us about privacy at [PRIVACY CONTACT EMAIL].
[REVIEW: name a data protection officer or EU/UK representative, if required.]
Information you give us
- Account details: your email address and password, or the details shared when you sign in with Apple or Google.
- Profile: username, display name, profile and cover photos, travel styles, and whether your account is private.
- Content: posts, photos, videos, captions, comments, likes and saved items.
- Trips: destinations, dates, itinerary items, budgets, and the people you invite to collaborate.
- Reports you submit about posts or profiles.
Location
With your permission, the app uses your location while you are using it to show nearby places, local weather and sunrise and sunset times. The app does not request background location access.
When you add a location to a post, you choose how precise it is: exact, approximate, city level, or hidden. Live location sharing has its own audience setting in Settings › Privacy & location.
Information collected automatically
- Usage analytics: a fixed list of event names (for example “trip created”) with limited, non-identifying details. Analytics never include your location. You can turn analytics off in Settings › Data & privacy.
- Push notification token, if you turn on notifications on a device.
- [REVIEW: describe technical and log data kept by our hosting providers, and for how long.]
How we use information
- To provide the app: itineraries, weather, sun times, routes, sharing and live collaboration.
- To send notifications you have turned on, including weather alerts for your trips.
- To keep the community safe, including reviewing reports and moderating content.
- To understand which features are used and improve the app, using the analytics described above.
- [REVIEW: state the legal basis for each use where required, for example under the GDPR.]
Who we share information with
Other Pathway users see your content according to the audience you choose: everyone, followers, trip members, or only you.
We use service providers to run the app. They receive only what they need for their part of the service:
- Supabase: database, sign-in, file storage and server functions.
- Open-Meteo: weather forecasts. It receives the coordinates needed for a forecast, not your account details.
- Mapbox: maps, place search, address lookup and routes. [REVIEW: Google Places, if enabled in production.]
- Exchange-rate provider: [EXCHANGE RATE PROVIDER NAME].
- Expo and Apple or Google push services: delivering notifications.
- [CONFIRM BEFORE PUBLISHING: whether any personal information is sold or shared for advertising. The app as built includes no advertising SDKs.]
Your choices
- Choose the default audience for posts and trips, and the default precision of post locations.
- Make your account private, so only approved followers see your posts and stats.
- Hide your travel map or travel stats, and choose whether you appear in traveler suggestions.
- Turn usage analytics or push notifications off.
- Block accounts you don’t want to interact with.
Keeping and deleting information
You can delete your account at any time in Settings. This permanently deletes your profile, posts, photos, the trips you own, and your history.
Backups, logs and moderation records are kept for [RETENTION PERIOD]. [REVIEW: confirm retention periods for each.]
Your rights
[REVIEW: list the rights that apply where Pathway is offered (for example GDPR, UK GDPR, CCPA/CPRA), how to exercise them, and any right to complain to a regulator.] Requests can be sent to [PRIVACY CONTACT EMAIL].
Children
Pathway is not intended for children under [MINIMUM AGE]. [REVIEW: age requirements for each country where the app is offered.]
Security
Access to data in our database is restricted by row-level security rules, so people can only read what they are allowed to see. No system is perfectly secure. [REVIEW: describe further safeguards and breach notification commitments.]
Where information is stored
[REVIEW: describe where data is stored and the safeguards used for international transfers.]
This website
This website does not use cookies or analytics, and its fonts are served from this site. Our hosting provider, [WEBSITE HOSTING PROVIDER], may log technical information such as IP addresses to deliver and protect the site.
Changes to this policy
We will update the date at the top of this page when the policy changes. [REVIEW: how users are notified of material changes.]
Contact
Questions about this policy: [PRIVACY CONTACT EMAIL], [COMPANY LEGAL NAME], [COMPANY ADDRESS].