Privacy policy

This policy covers the TrailBivvy apps published by LyteFast — for iPhone (App Store) and for Android phones, tablets and Wear OS watches (Google Play) — and this website. The iPhone and Android apps are in a closed beta and not yet on the App Store or Google Play. This policy describes the apps as planned for release, including their subscription and their weather service. It will be reviewed again before release. The TrailBivvy web app, public at app.trailbivvy.com since 20 October 2026, has its own privacy policy; for TrailBivvy Pro bought there, see TrailBivvy Pro bought on the web.

At a glance

• The app needs no account. It contains no analytics, no advertising and no tracking; the iPhone app contains no third-party SDKs, and the Android app uses only Google Play services (see TrailBivvy for Android). Using the app requires a subscription, which you buy and manage through Apple’s App Store on iPhone or Google Play on Android (after a 3-day free trial in the Android app); Apple or Google processes the payment and we receive no payment details.
• TrailBivvy Pro can also be bought in the TrailBivvy web app at app.trailbivvy.com. There it is sold through Link, Stripe’s payment service, as merchant of record; we receive your email address and the state of your subscription, never your card details (see TrailBivvy Pro bought on the web).
• Your trips, waypoints, photos, reports and settings stay on your device and are not synced to any TrailBivvy server. None of this data is sent to TrailBivvy.
• To show maps, the app requests them directly from the providers listed below, without identifiers. Weather forecasts come from MET Norway through TrailBivvy’s own weather relay, which passes on only a position rounded to about 1 km and an elevation — never your IP address.
• This website sets no cookies, uses no analytics and loads nothing from other websites. It is hosted by Cloudflare, which processes connection data to deliver it.

Who is responsible

The controller responsible for the processing described here is:

LyteFast SAS (société par actions simplifiée) au capital de 1,00 € 60 rue François Ier 75008 Paris France Email: stephane.sprauer@gmail.com Commercial register: RCS Paris 988 054 227 VAT / UID number: FR27988054227

The TrailBivvy app

Data that stays on your iPhone

The app stores the following data only on your iPhone. None of it is sent to TrailBivvy.

Tracks and waypoints leave your iPhone only if you export or share a GPX file yourself. If you back up your iPhone (for example with iCloud Backup), iOS may include the app’s data in that backup, which remains under your control.

Data that leaves your iPhone

These requests are the only data the app sends. None of the requests to map, weather and geoportal services contains an advertising identifier, a device identifier, an account or a user ID.

• Map tiles. When you view the map, the app requests map images for the visible area from the official map service of that country: swisstopo (Switzerland), IGN (France), basemap.at (Austria), BKG (Germany and a Europe overview), IGN España (Spain), Kartverket (Norway) or USGS (USA). While you view the map, only the provider covering the centre of the map is asked. As with any online map, that provider sees which map area is requested and your device’s IP address. Apple Maps draws the map where none of these maps applies and underneath the BKG Europe overview, under Apple’s privacy policy. Tiles you have downloaded are shown from your iPhone without a request.
• Offline downloads. When you download a trek for offline use, the app requests the map tiles for the whole route corridor from each provider whose map the corridor crosses — for example swisstopo and IGN for a route through Switzerland and France. Those providers see the requested area and your device’s IP address. With “All offline data”, forecasts along the route are also requested through the weather relay (see Weather).
• Weather. When the app needs a forecast — for your position, for Sleep Tonight or for a place you plan from — it asks TrailBivvy’s weather relay (weather.trailbivvy.com) for the weather at a position rounded to two decimal places (about 1 km) and an elevation rounded to 10 m. From time to time (at most every few hours, as iOS decides) the app also refreshes the forecast in the background for the place of your last forecast request, using the rounded values it stored; this never starts location services. When you download a trek with “All offline data”, the app also asks for forecasts at up to 40 points along the route (about every 8 km), rounded the same way; taken together, these requests outline your planned route. Opening a stage asks for the forecast at its highest point, and checking a spot on the map asks for that spot. The relay is a small service we run on Cloudflare. It passes only the rounded position and elevation on to MET Norway (the Norwegian Meteorological Institute), in a request that names TrailBivvy as MET Norway requires, so MET Norway sees the relay, not your IP address, and nothing that identifies you or your device. The relay caches MET Norway’s answers under the rounded position only. If the weather service throttles requests, the relay and the app pause instead of repeating them; if the relay cannot be reached, the app shows the forecast it stored, with its time. Its code does not read your IP address, and its logs contain no positions or IP addresses; Cloudflare, which runs the network, necessarily receives the IP address to answer the connection and processes it to deliver and protect the service, as for this website. According to its terms, MET Norway logs each request it receives, with its coordinates, in its own data centre in Oslo, Norway. The forecast is cached on your iPhone with these rounded values.
• Protected areas. When online, the app may ask the Swiss federal geoportal (geo.admin.ch) which protected areas lie in the visible map area. When you long-press the map in Switzerland to check a spot, it asks about a box of about 5 m around the point you pressed.
• Car parks from OpenStreetMap. The car parks listed first under “Getting there by car” come from OpenStreetMap and are stored in the app with the trail’s data: showing them near a start sends nothing, with or without a connection. If you tap one, the app opens a navigation app with that car park’s position only (see “Driving directions”).
• Car parks. When you tap “Find car parks near the start” (or “Also list car parks from Apple Maps”) on a trail or a stage, the app sends the start point of that trail or stage to Apple Maps to look for car parks nearby; the app does not add your own position. As with any request, Apple sees your device’s IP address. The car parks found are then shown on a small map of that area, drawn by Apple Maps.
• Driving directions. The app makes no request for driving directions: it opens a navigation app with the destination — the start of the trail or stage, or a car park you picked — and nothing else (no start point, not your position, no identifier of you or your device). Apple Maps is always offered; if Google Maps or Waze is installed, directions to the start or to a car park from OpenStreetMap let you choose one of them instead. The app you choose then receives the destination and works under its own privacy policy (Google’s for Google Maps, Waze’s for Waze), as when you open it yourself. Google states that Google Maps is also told which app opened it. The app opens the Waze link only in the Waze app, never in your browser. Directions to a car park that Apple Maps found always open in Apple Maps. To know whether Google Maps or Waze is installed, the app asks iOS, which answers only yes or no; the app does not store the answer.
• Parking search in a maps app. When you tap “Search for parking in Apple Maps” (or “Search for parking in a maps app”) on a trail or a stage, the app makes no request: it opens Apple Maps or, if Google Maps is installed and you choose it, Google Maps on that app’s own search around the start, with only the start point and a search word for parking (such as “parking”) — not your position, no place name, no identifier of you or your device. That app searches and shows its own results under its own privacy policy, as when you open it yourself. Google states that Google Maps is also told which app opened it. Waze is never used for this search.
• Subscription. You buy, renew, cancel and restore the TrailBivvy Pro subscription through Apple’s App Store (StoreKit), under Apple’s terms and privacy policy; Apple processes the payment. The app asks StoreKit on your iPhone whether a subscription is active. We receive no payment details and no Apple Account data; the sales and subscription reports Apple gives us do not include your name, email address or payment details.

The trail catalogue needs no request: trail packs are built into the app.

Permissions

• Location “While Using” for the map, navigation and planning. The app never asks for “Always” access.
• Background location only while you record a trip, or while you navigate with off-route alerts and notifications turned on. iOS shows the location indicator while it is in use. A background weather refresh never starts location services.
• Notifications only if you turn on background off-route alerts.

Sharing your position

The Safety screen can prepare a message with your coordinates, altitude and a map link and hand it to the iOS share sheet. TrailBivvy never sends it by itself: you choose whether and with whom to share it.

What the app does not do

No account, no analytics, no advertising and no tracking. The app contains no third-party SDKs, and its privacy manifest declares that it does not track you. There is no cloud sync: nothing is synced to iCloud or to any other server. We will update this policy before any new data flow, such as an optional sync, is released.

TrailBivvy for Android (Google Play)

TrailBivvy for Android phones, tablets and Wear OS watches (package co.lytefast.trailbivvy, published by LyteFast on Google Play) works like the iPhone app described above — the same data stays on your device and the same requests leave it, to the same map, geoportal and weather services — with these differences:

• Where data is kept. Trips, tracks, waypoints, photos, reports and settings are stored in the app’s private storage on your phone or tablet. If you use Android backup, Android may include the app’s database, photos and settings in your backup under your Google account, which remains under your control; downloaded maps, weather and other caches are not backed up.
• Maps. Where none of the official maps applies, the Android app draws the route and places on a plain background: it uses neither Apple Maps nor Google Maps for the map. There is no car park search in Apple Maps; car parks come only from OpenStreetMap, stored with the trail’s data.
• Driving directions and parking search. Directions open in Google Maps, Waze or another maps app installed on your device that you choose, with the destination only, as described above. “Search for parking in Google Maps” opens Google Maps’ own search around the start with only the start point and a search word. To offer only installed apps, the app asks Android whether they are installed.
• Free trial and subscription. After setup, the Android app is open for 3 days without any payment method; nothing is charged unless you subscribe. The start of that trial is stored only on your device (and in its Android backup). TrailBivvy Pro is bought, renewed, cancelled and restored through Google Play Billing, under Google’s terms and privacy policy; Google processes the payment. The app asks Google Play on your device whether a subscription is active. We receive no payment details and no Google account data.
• Google Play services. The Android app uses Google Play services on your device for location (the fused location provider), for the link with your Wear OS watch and for Google Play Billing. These components process data under Google’s privacy policy. The app contains no analytics, advertising or tracking SDKs.
• Wear OS watch. If you install TrailBivvy on your watch, the phone app sends it a summary of your hike — trail and stage names, distance to go and arrival time, your last position, tonight’s options, daylight, the forecast and the emergency numbers of the country you are in — through the Wearable Data Layer of Google Play services. The watch sends back only the actions you tap (start or stop navigation or a recording, mark a possible camp, update tonight’s options). To mark a camp, the watch uses its own position if you allow location on the watch, otherwise the phone’s last position. When the phone and the watch are not connected directly, Google may relay these items, encrypted, between your own devices. Nothing is sent to TrailBivvy.
• Permissions. Location “while using the app” for the map, navigation and planning; the app never asks for location “all the time”. While you record a trip or navigate, a foreground service keeps location running with the screen off, and Android shows its notification the whole time; during navigation this also happens while a TrailBivvy watch is connected. Notifications for that ongoing notification and for off-route alerts. The background weather refresh uses the rounded place stored on your device and never starts location services.
• Sharing. The Safety screen and the GPX export hand a message or a file to the Android share sheet; TrailBivvy never sends it by itself.

TrailBivvy Pro bought on the web (app.trailbivvy.com)

The TrailBivvy web app at app.trailbivvy.com runs in your browser, where it keeps your trips, waypoints, photos, reports and settings; none of this data is sent to TrailBivvy. It has its own privacy policy and terms of sale. In short, for TrailBivvy Pro bought there:

• Sold through Link. The subscription is sold through Link, Stripe’s payment service, as merchant of record. Link and Stripe collect your payment details, name and billing address and process the payment, the tax, renewals, receipts and refunds under their own privacy policies (link.com/privacy, stripe.com/privacy). Your bank statement shows “LINK.COM*”. We never receive your card details.
• What we receive. When you subscribe, the web app sends your email address to TrailBivvy’s server, which opens Stripe’s payment page. Stripe keeps a customer record with your email address, your country and your subscription; we can see this record to answer questions and handle refunds. For support, TrailBivvy’s server keeps the last subscription event Stripe reported for each customer (customer identifier, event type, status and time) for 400 days; it keeps no positions and no tracks. There is no TrailBivvy account: the subscription belongs to the email address you give.
• Price, trial, cancelling and refunds. TrailBivvy Pro costs €22.99 per year including VAT; new subscribers get a 3-day free trial, once per email address and per person. The price and any trial are shown before you pay. You can cancel at any time in the web app under More › TrailBivvy Pro › Manage subscription, or in your Link account at link.com; TrailBivvy Pro then stays active until the end of the period already paid. Within 14 days of any charge, you can ask us by email to refund that charge in full; TrailBivvy Pro then ends. TrailBivvy Pro is currently not sold to customers in the United States or mainland China.
• Separate from the App Store. A subscription bought on the web does not unlock the iPhone app, and an App Store subscription does not unlock the web app.

This website

This website is a set of static pages. It sets no cookies, uses no analytics or tracking, contains no forms and loads no scripts, fonts or images from other websites. It is hosted for us on Cloudflare Pages, a service of Cloudflare, Inc. When you visit, Cloudflare processes technical connection data — such as your IP address, the page requested, the time and your browser’s user agent — to deliver the pages and to protect the service against abuse. We do not collect data about visitors ourselves.

When you contact us

If you write to us — for example to report a data problem, to ask for the trail data TrailBivvy derives from OpenStreetMap, or as a journalist — we process your email address, your message and anything you include, such as coordinates or photos. We use them only to answer you and, where you report a data problem, to check and correct the data. Your messages are stored by our email provider, Google (Gmail).

Purposes and legal bases

• Data on your device is processed by the app on your iPhone, Android device or watch, under your control, to provide the features you use. We do not receive it.
• Requests to map and geoportal services and to the weather relay are needed to show the maps, forecasts and protected areas you ask for, and to keep the forecast for your last requested place up to date. Where the EU General Data Protection Regulation (GDPR) applies, the legal basis is the provision of the service you use (Art. 6(1)(b) GDPR) and our legitimate interest in a working app (Art. 6(1)(f) GDPR).
• The subscription is needed to give you access to the app you subscribed to (Art. 6(1)(b) GDPR). Apple (App Store) or Google (Google Play) processes the purchase and the payment under its own terms and privacy policy; on the web, Link (Stripe) does so as merchant of record. For a subscription bought on the web, we also keep the records required for accounting and tax (Art. 6(1)(c) GDPR) and use the subscription data to answer support questions and to prevent abuse such as repeated free trials (Art. 6(1)(f) GDPR).
• Delivering this website relies on our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Answering your messages relies on our legitimate interest in answering enquiries and keeping the data accurate (Art. 6(1)(f) GDPR) or, where you ask us to do something for you, on steps taken at your request (Art. 6(1)(b) GDPR).

Where the Swiss Federal Act on Data Protection (FADP) applies, personal data is processed only for the purposes above.

Recipients

Each of these services processes the requests it receives under its own privacy policy:

• Map services: swisstopo, Federal Office of Topography (wmts.geo.admin.ch, Switzerland); IGN (data.geopf.fr, France); basemap.at (mapsneu.wien.gv.at, Austria); BKG, Federal Agency for Cartography and Geodesy (sgx.geodatenzentrum.de, Germany); IGN España (www.ign.es, Spain); Kartverket (cache.kartverket.no, Norway); USGS, U.S. Geological Survey (basemap.nationalmap.gov, USA).
• Protected areas: the Swiss federal geoportal geo.admin.ch (api3.geo.admin.ch).
• Weather: TrailBivvy’s weather relay (weather.trailbivvy.com), which we run on Cloudflare, and MET Norway, the Norwegian Meteorological Institute (api.met.no), which receives only the relay’s requests.
• Apple: Apple Maps where no official map applies and underneath the BKG Europe overview, for the car park search, for driving directions and for the parking search in Apple Maps, and the App Store for subscription purchases.
• Google (Google Maps) and Waze: only if one of them is installed and you choose it for driving directions to a start or to a car park from OpenStreetMap, or Google Maps for a parking search around a start; it receives the destination, or the start point and a search word, when it opens on your iPhone, not from us.
• Google, for the Android app: Google Play Billing for subscription purchases, Google Play services on your device for location and for the link with your Wear OS watch, and Android backup if you use it.
• Link, Stripe’s payment service, and Stripe, for TrailBivvy Pro bought in the web app: the payment, tax, renewals, receipts and refunds, and the customer record with your email address, your country and your subscription.
• Hosting: Cloudflare, Inc., which hosts this website and the weather relay for us.
• Email: Google (Gmail), which stores the messages you send us.

The map services are those of the country they map — swisstopo and geo.admin.ch (Switzerland), IGN (France), basemap.at (Austria), BKG (Germany), IGN España (Spain), Kartverket (Norway) and USGS (USA) — and the app contacts each of them directly from your iPhone, for maps of its own area (BKG also for the Europe overview). MET Norway processes the relay’s weather requests in its own data centre in Oslo, Norway (EEA). For Apple and Cloudflare, the countries where data is processed and the safeguards for transfers outside Switzerland and the EU/EEA are being confirmed and will be listed here before release.

How long data is kept

• Data on your device is kept until you delete it. You can delete trips, waypoints and reports in the app and offline downloads under More → Downloads. Deleting the app removes all of its data from your iPhone or Android device (an Android backup is kept until you delete it from your Google account).
• The services listed above keep request data according to their own policies. The weather relay keeps each forecast, under its rounded position, until MET Norway’s expiry time (at most 6 hours) and up to 2 hours longer to check with MET Norway whether it changed.
• For TrailBivvy Pro bought on the web, Stripe and Link keep your data for as long as they and accounting rules require, and TrailBivvy’s server keeps the last subscription event of each customer for 400 days.
• We do not collect data about visitors to this website ourselves. Cloudflare may keep connection logs to deliver and protect the website and the weather relay; how long it keeps them is being confirmed and will be stated here before release.
• Messages you send us are kept only as long as needed to deal with your request, unless the law requires us to keep them longer.

Your rights

Depending on the law that applies to you, you have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country. Because the app keeps your data on your device and the weather relay only passes rounded positions on to MET Norway, we usually hold no personal data about you, apart from any messages you send us and, if you bought TrailBivvy Pro on the web, the subscription data described in TrailBivvy Pro bought on the web. You can view, export and delete your data directly in the app.

To exercise your rights or ask a question, contact us:

LyteFast SAS (société par actions simplifiée) au capital de 1,00 € 60 rue François Ier 75008 Paris France Email: stephane.sprauer@gmail.com Commercial register: RCS Paris 988 054 227 VAT / UID number: FR27988054227

Children

TrailBivvy is not directed at children and collects no personal data from them.

Changes to this policy

We will update this page when the app or the website changes, and before any new data flow is released. The date at the top of the page shows the last update.