Privacy Policy

Account information. When you sign up with email and password, we store your email address and a hashed version of your password (we never store passwords in plain text). When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google.

Trail activity. We store trails you save, reviews you write, ratings you submit, and any preferences you set (fitness level, preferred difficulty, etc.).

Usage data. We collect standard server logs including IP address, browser type, pages visited, and timestamps. This data is used for security and debugging, not for advertising.

Information you provide voluntarily. Any content you submit — trail reviews, questions to the AI assistant, or support messages — is stored to provide the service.

We use your information to:

• Create and manage your account
• Provide personalized trail recommendations powered by AI
• Display live weather and trail conditions
• Allow you to save trails, write reviews, and track your activity
• Send transactional emails (password resets, account alerts)
• Improve the platform through aggregated, anonymized usage analysis
• Detect and prevent fraud, abuse, or security incidents

We do not sell your personal data, and we do not use your data to serve third-party advertising.

TrailMind uses large language models (LLMs) to power trail recommendations and the AI search assistant. Here is what that means for your data:

What we send to the AI. When you ask the AI assistant a question, we send your query and relevant trail data (trail names, stats, tags) to the model. We do not send your name, email, or account details to the AI unless you include them in your message.

Your conversations are not used to train models. We use AI providers whose terms prohibit training on customer inputs without consent. Your queries are processed to answer your question and are not retained by the model provider beyond their standard data retention window.

No autonomous actions. The AI assistant can only read trail information and provide recommendations. It cannot book anything, post on your behalf, or access data outside of TrailMind.

TrailMind is a location-aware service — nearby trail search requires knowing where you are.

Browser geolocation. If you use the “trails near me” feature, your browser will prompt you to share your location. We use this to return nearby results. Your precise coordinates are sent to our servers for that request and are not stored persistently.

Manual location. If you enter a city or region to search, only that text is stored as part of your search history.

We do not track your location continuously or build a movement history.

TrailMind integrates with several external services to provide trail data, weather, and maps:

• OpenStreetMap / Overpass API — Trail geometry and metadata. Requests are made server-side; your identity is not shared.
• Open-Meteo — Weather data. Requests are made server-side with trail coordinates only; no account information is shared.
• Open-Topo-Data — Elevation profiles. Server-side requests with trail path coordinates only.
• National Park Service API — Park alerts and information. Server-side; no user data shared.
• Google OAuth — Only used if you choose “Sign in with Google.” Google receives that you initiated a sign-in; see Google’s Privacy Policy.
• Mapbox — Map rendering. Mapbox may log map tile requests; see Mapbox’s Privacy Policy.

Authentication tokens. After you sign in, your access token is stored in localStorage so you stay logged in across page refreshes. This is not a cookie and is never sent to third parties.

Session cookies. We may set a session cookie for CSRF protection on form submissions. This cookie expires when you close your browser.

No tracking cookies. We do not use advertising cookies, third-party analytics cookies, or any persistent tracking mechanism.

We do not sell, rent, or trade your personal data. We share data only in these limited circumstances:

• Service providers. Infrastructure providers (hosting, database) that process data on our behalf under strict data processing agreements.
• Legal requirements. If required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers. In the event of a merger or acquisition, user data may transfer as part of the business assets. We will notify you beforehand.

Public content you post — such as trail reviews — is visible to other users. Think before you share personally identifying details in reviews.

We retain your account and activity data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are legally required to retain it (e.g., billing records).

Server logs are retained for 90 days for security and debugging purposes, then automatically deleted.

Depending on where you live, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete data.
• Deletion. Request that we delete your account and personal data.
• Portability. Receive your data in a structured, machine-readable format.
• Objection. Object to processing based on legitimate interests.

To exercise any of these rights, email us at privacy@trailmind.app. We will respond within 30 days. We may need to verify your identity before processing the request.

We take reasonable technical and organizational measures to protect your data: passwords are hashed with Argon2, data is encrypted in transit via TLS, and access to production systems is restricted to authorized personnel.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it responsibly to security@trailmind.app rather than disclosing it publicly.

TrailMind is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn that we have inadvertently collected such data, we will delete it promptly. If you believe your child has provided us with personal information, please contact us.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will notify you by email or with a prominent notice on the site before the changes take effect.

Continued use of TrailMind after changes take effect constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this privacy policy or your personal data, please contact us: