Privacy Policy
Last updated: September 10, 2026
Our Commitment to Privacy
At Offroad Buddy, we believe your data belongs to you. We've built our app with a local-first approach, meaning all your GPS tracks, vehicle information, and telemetry data is stored on your device by default. This privacy policy explains what minimal data we collect, how we use it, and your rights regarding your information.
What Data We Collect
Local Data (Stored on Your Device)
The following data is stored locally on your device and never sent to our servers unless you explicitly choose to share paths:
- GPS coordinates and waypoints from your tracked paths
- Telemetry data (pitch, roll, elevation, speed)
- Vehicle information (make, model, clearance class)
- Path metadata (names, descriptions, photos, terrain tags)
- User profile information (name, location, preferences)
Cloud and Subscription Data
To provide community, account, and subscription features, we collect:
- Anonymous user ID (for authentication)
- Paths you explicitly choose to share with the community, including precise GPS coordinates, names, descriptions, and photos
- Subscription status and purchase history
Analytics
We use TelemetryDeck, a privacy-first analytics service, to collect product-interaction signals (for example, app launches, feature usage, and subscription events) and a pseudonymous device identifier. TelemetryDeck hashes identifiers before they leave your device, and this analytics data is not linked to your account identity. Data is used solely to improve the app. TelemetryDeck does not build advertising profiles or track you across other companies' apps or websites. Learn more at telemetrydeck.com/privacy.
App Store Advertising Attribution
If you install Offroad Buddy after seeing an Apple Ads placement on the App Store, the app asks Apple for a privacy-preserving AdServices attribution token and sends it to RevenueCat. Apple and RevenueCat use it to tell us which campaign, ad group, or keyword led to an install, trial, or subscription outcome. This does not use the advertising identifier (IDFA), does not request permission to track, and is not used to track you across other companies' apps or websites.
How We Use Your Data
- Local Data: Used solely for app functionality on your device. We have no access to this data.
- Shared Paths: Used to provide community features, allowing other users to discover trails you've shared.
- Authentication: Anonymous user IDs are used only to manage cloud features and subscriptions.
- Payments: Subscription data is processed by Apple through the App Store. We receive subscription status, not payment-card details.
- Advertising Measurement: Apple Ads attribution is used to compare App Store campaigns with installs, trials, and subscription outcomes.
Data Sharing
We do NOT sell your data. Period.
We share data only in the following limited circumstances:
- Community Sharing: Paths you explicitly mark as "shared" are visible to all app users.
- Service Providers: We use GDPR-compliant service providers for cloud database and subscription management. These providers process data according to our instructions.
- Legal Requirements: We may disclose data if required by law, court order, or to protect our rights.
Third-Party Services
Offroad Buddy uses the following third-party services:
- Apple: App Store payment processing and privacy-preserving Apple Ads attribution. See Apple's Privacy Policy
- Supabase: Anonymous authentication, database hosting, and shared-path storage for cloud features.
- RevenueCat: Subscription status, entitlement management, purchase analytics, and Apple Ads attribution associated with subscription outcomes.
- TelemetryDeck: Privacy-focused product analytics that is not used for advertising or cross-app tracking.
Data Security
We implement industry-standard security measures to protect your data:
- All data transmitted to our servers is encrypted using HTTPS/TLS
- Cloud data is stored in encrypted databases
- Anonymous authentication prevents tracking across sessions
- We use row-level security in our database to prevent unauthorized access
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Your Rights (GDPR)
If you're in the EU, you have the following rights:
- Access: Request a copy of your data
- Correction: Update inaccurate data
- Deletion: Delete your account and all cloud data
- Portability: Export your data in a machine-readable format
- Objection: Object to data processing
To exercise these rights, contact us through our website.
Children's Privacy
Offroad Buddy is not intended for children under 13. We do not knowingly collect data from children. If you're a parent and believe your child has provided us with personal information, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.
iOS Permissions and Location Data
Location Services
Offroad Buddy requires access to your device's location services to function. Here's how we use location data:
- Purpose: GPS coordinates are collected while tracking to record your trail path
- Frequency: Location is accessed continuously during active tracking sessions
- Storage: All location data is stored locally on your device in an encrypted SQLite database
- Background Access: The app does NOT track your location in the background when you're not actively recording a path
- Sharing: Location data is never sent to our servers unless you explicitly choose to share a path (Pro feature)
Motion & Fitness Sensors
The app accesses your device's accelerometer and gyroscope to measure pitch and roll angles:
- Data is only collected during active tracking sessions
- Sensor data is stored locally on your device
- Used solely for calculating vehicle tilt angles
- Not used for health or fitness tracking
Camera and Photos
You can optionally add photos to paths and vehicles:
- Camera/photo library access is requested only when you choose to add a photo
- Photos are stored locally on your device
- Photos are only uploaded if you explicitly share a path (Pro)
Permission Management
You can manage all app permissions in iOS Settings → Offroad Buddy. Disabling location services will prevent path tracking. Other permissions are optional.
Apple App Store Privacy Nutrition Label
In accordance with Apple's App Store requirements, here's a summary of data collection:
Data Linked to You
- User ID: Anonymous identifier for Pro subscription (if applicable)
- Purchase History: Subscription status for Pro features
- Advertising Data: Apple Ads campaign, ad group, and keyword attribution associated with install and subscription outcomes
- Precise Location: GPS coordinates in paths you explicitly choose to share
- Photos or Videos: Photos included in paths you explicitly choose to share
- Other User Content: Names, descriptions, and other details in paths you explicitly choose to share
Data Not Linked to You
- Device ID: Pseudonymous identifier used for privacy-focused analytics
- Product Interaction: App launches and feature-usage events used to improve the app
Data Used to Track You
None. We do not use any data to track you across apps or websites owned by other companies.
Data Not Collected
We do NOT collect: browsing history, search history, contacts, messages, health data, financial information, or any other personal information beyond what's listed above.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request information about data we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: We don't sell personal information, so there's nothing to opt out of
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us through our website.
Contact Us
If you have questions about this privacy policy or our data practices, please visit: