WE DON'T WANT
YOUR DATA.

• Your location. Used only while the app is running, to draw your position on the map and record rides you choose to start. Location data never leaves your device unless you export a ride's GPX file yourself.
• Motion data. Used to show ride attitude. Stored in memory only, never persisted or transmitted.
• Recorded rides. Breadcrumb tracks, marker pins, timing, distance, ascent. Stored in the app's private container. Deleted when you delete the ride.
• Favorites & camp target. Stored alongside the active dataset's metadata.
• Offline map tiles & installed trail packs. Stored in the app's private container.
• Companion Mode pairing. If you pair an iPhone with an iPad over your local Wi-Fi, both devices remember each other (a small identity record stored in the iOS Keychain on each device). Speed, distance, time, marker drops, and music controls are exchanged directly between your iPad and iPhone over your local network. Nothing leaves your rig. No cloud, no servers, no internet. You can unpair at any time from Library → Companion Mode.

• Trail pack list. When you open Library → Browse Packs, the app asks our server which packs are available. The request is anonymous. No cookies, no account attached.
• Trail pack download. When you tap Install, the pack file downloads from our content server. Same as above: anonymous, no tracking.
• Map tiles. The map is rendered using Mapbox. Mapbox sees the tile request with your IP address but no identity, no account, no ride data. We turn their analytics off so they can't see where you ride or how you use the app.
• Place & trail search. When you search, the text you type (plus a rough idea of where the map is centered, so results are nearby) goes to Mapbox so it can return matching results. We don't save your searches. Turn off location to leave out the proximity hint.
• Apple Music playback. Under Apple's terms if you grant Apple Music permission. We never send anything to Apple Music ourselves.

When you install, update, or delete a trail pack, the app sends a small event to our server: pack name, version, what happened, and device type (e.g. "iPhone 15 Pro Max"). That's it.

We use this to know which packs are popular and to find broken downloads. We don't collect any ID that singles you out. These events are kept for 90 days then deleted.

If you never sign in, we send nothing.

We don't sell your data. We don't share it with ad networks. We don't track you across other apps or websites. We don't serve ads in the app. We don't read your contacts, your photos, or your location history. We don't fingerprint your device. We don't sync rides to a cloud.

Sign-in is optional. If you never tap "Sign in" in the Library tab, none of this applies. You remain a fully anonymous user.

SIGN IN WITH APPLE ONLY

We use Sign in with Apple exclusively. No passwords, no phone numbers. Apple gives us an anonymous identifier and, the first time you sign in, optionally your name and email. You choose whether to share your real email, use a private relay address, or hide your email entirely. We honor whichever you choose.

Your sign-in stays valid for 30 days unless you sign out or delete your account. Your sign-in is wiped immediately when you sign out, delete your account, or 30 days pass without use.

SIGNING OUT & DELETING YOUR ACCOUNT

To sign out: Library → Account → Sign out.
To delete your account: Library → Account → Delete account.

Deletion fires immediately. We hold the record for 30 days in case you change your mind, then it's gone for good. Apple's Sign in with Apple revoke is called at the same time so we can't pull your account back even if we wanted to. Within 30 days of you tapping Delete account, every trace of your record is gone from our systems.

• Location (When in Use / Always). Used to show your live position and keep a ride recording when the screen locks.
• Motion & Fitness. Used to read device attitude. You can decline; the app will still work.
• Apple Music. When you connect your Apple Music account, we read the currently-playing track and show transport controls (play, pause, skip). We never send anything to Apple Music. Your listening history stays between you and Apple. You can decline; the music panel offers a one-tap path to enable later.
• Local Network. Asked only when you enter Companion Mode for the first time. Lets your iPad and iPhone find each other on your home or hotspot Wi-Fi. We don't talk to any other device on your network. You can decline; Companion Mode will be unavailable but every other feature still works.
• Camera. Asked only on the iPhone the first time you scan a Companion Mode pairing QR code. Used for that one screen, nothing else. You can decline; pairing will be unavailable but every other feature still works.

A few service providers keep the app running. Each one sees only the slice they need:

• Apple. Sign in with Apple, Apple Music transport controls, App Store distribution.
• DigitalOcean. Hosts our server and delivers trail-pack files.
• Postmark. Sends you sign-in confirmations and account-deletion notices.
• Mapbox. Renders map tiles when you first download a pack.

None of them see your rides, your music plays, or your marker drops.

If you have iCloud Backup enabled, iOS includes Gather Offroad's private app data in your encrypted Apple-managed backup. We never see this backup.

This app is for riders 13 and up. We don't knowingly collect anything from kids under 13. If you're a parent and think your child signed in anyway, email info@gatheroffroad.com and we'll delete the record.

• Anonymous users: deleting the app removes everything we ever had access to.
• Signed-in users: Library → Account → Delete account, anytime.
• For data export or other questions: info@gatheroffroad.com.

This policy is governed by the laws of Virginia, USA.