Privacy Policy

Last updated: September 23, 2026

This Privacy Policy describes how iLife BV ("we", "us", or "our") collects, uses, and discloses your information when you use our mobile application, Waymarked Walking (the "App"), our websites, and related services.

1. Information We Collect

1.1 Account Information

When you register or sign in to Waymarked, we collect information required to create and manage your account:

• Email Address: Your primary email address, or an anonymized relay email address provided by Apple (*@privaterelay.appleid.com) if you choose to sign in with Apple.
• Profile Information: Your chosen nickname/display name and an optional profile picture (avatar).
• Authentication Identifiers: A unique user identifier (UUID) assigned to your account.

Authentication can be performed using Email Magic Links, Google Sign-In, or Apple Sign-In.

1.2 Location Data

Waymarked collects your device's precise location data (GPS) to provide core navigation features:

• Foreground Location: We use location data while the app is in open use to display your current position on the map and facilitate searching for nearby trails.
• Background Location (Navigation): When you actively start a navigation session, Waymarked continues to access your location in the background to track progress, provide real-time turn-by-turn guidance, calculate distance, and alert you if you deviate from the path.
  • Android & Wear OS Specifics: Foreground services with ongoing notifications are used to prevent operating system throttling during active navigation.
  • iOS & Apple Watch Specifics: Standard background location navigation modes are utilized.

Real-time navigation location data is processed locally on your device for immediate navigation guidance.

1.3 Saved Activities & Community Photos (Optional)

If you are signed in and choose to save or sync completed walking activities to the cloud:

• Activity Metrics: We collect and store activity statistics (distance, duration, average pace, start/end timestamps), custom activity titles, visibility settings (public, friends-only, or private), and recorded trail references.
• Uploaded Photos: Users can optionally attach photos to their activities. Public photos are shared with the community route gallery and trail discoverability features. Photos are stored securely in Cloudflare R2 object storage.
• Storing activities in the cloud and uploading photos is optional; activities can be kept locally on your device only.

1.4 Support & Communication Data (Optional)

If you choose to use the in-app support chat, bug reporting, or feature request functions, we collect:

• Your message content, account ID, app version, and operating system platform (Android/iOS/Web).
• This data is retained solely to allow our developer team to respond to inquiries and diagnose technical issues.

1.5 Device Push Tokens & Preferences

• Push Notifications: When notification permissions are granted, an anonymous device push token (FCM/APNs) is registered to deliver community announcements and direct replies from support.
• User Preferences: The App stores your non-personal settings locally on your device, such as language preference, map rotation settings, and favorite trails.

2. How We Use Your Information

We use the information we collect solely to:

• Provide, maintain, and personalize the Waymarked App and user profiles.
• Synchronize saved activities across your devices.
• Enable active turn-by-turn navigation and display relevant hiking trails.
• Host community trail photo galleries.
• Process support inquiries and deliver service updates.

3. Data Processors & Third-Party Services

We do not sell your personal data. We rely on the following vetted service providers to operate:

• Supabase Inc.: Backend infrastructure provider handling user authentication, PostgreSQL database storage, and avatar storage. Data is hosted securely in European Union (EU) data centers.
• Cloudflare, Inc.: Cloudflare R2 Object Storage for hosting uploaded trail and activity photos with edge CDN acceleration (media.walkingtrails.site).
• Google Firebase Cloud Messaging (FCM) & Apple Push Notification service (APNs): Delivery of push notification alerts and broadcasts.
• Google Sign-In & Apple Sign-In: Identity verification and OAuth token exchange.
• OpenStreetMap (OSM) & Overpass API: Retrieval of public map tiles and topological trail networks. No personal identifiers are transmitted.

4. General Data Protection Regulation (GDPR) Compliance

If you reside within the European Economic Area (EEA), you have specific statutory rights under the EU General Data Protection Regulation (GDPR) regarding your personal data:

4.1 Data Controller

• Entity: iLife BV
• Contact Email: support@ilife.be / privacy@ilife.be

4.2 Legal Bases for Processing (Art. 6 GDPR)

• Performance of Contract (Art. 6(1)(b)): Account creation, cloud sync of personal activities, and core navigation functionality.
• Legitimate Interests (Art. 6(1)(f)): Preventing abuse, spam filtering, and customer support.
• Consent (Art. 6(1)(a)): Uploading public community photos and optional push notifications.

4.3 Your Rights Under GDPR

• Right of Access (Art. 15): You have the right to request a copy of all personal data held about you.
• Right to Rectification (Art. 16): You can edit your profile nickname and avatar directly within the App settings at any time.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You have the unconditional right to delete your account and all associated personal data directly within the App.
• Right to Data Portability (Art. 20): You can export your planned and recorded trails in standard GPX format.
• Right to Object / Restrict (Art. 18 & 21): You may revoke optional permissions (such as location tracking or push notifications) at any time through your device settings.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit - GBA) at https://www.gegevensbeschermingsautoriteit.be.

5. Account & Data Deletion

We provide a seamless, immediate in-app account deletion mechanism:

• In-App Deletion: Open the Menu screen and tap "Account verwijderen" (Delete account).
• Scope of Erasure: Confirming deletion permanently and irreversibly:
  1. Erases your user account, authentication credentials, display name, and avatar from Supabase.
  2. Permanently deletes all photos uploaded by you from Cloudflare R2 object storage.
  3. Purges all recorded activities, likes, reports, and associated database records.
  4. Disassociates your device push token from your personal identity.
  5. Clears all locally stored activities and cached profile data on your device.
• You may also request manual erasure by emailing support@ilife.be.

6. Security

We protect your data using industry-standard technical measures, including HTTPS/TLS encryption for all network traffic, strict PostgreSQL Row-Level Security (RLS) policies, and presigned S3 upload authorizations.

7. Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may periodically update this Privacy Policy. Continued use of the App following updates constitutes acceptance of the revised terms.

9. Contact Us

For any privacy inquiries, GDPR requests, or data deletion questions, please contact:
support@ilife.be