Privacy Policy

1. Introduction

Sierra Single Track LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (sierrasingletrack.com) and mobile application (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Username, email address, password (encrypted)
• Profile Information: Name, profile picture (optional)
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• User Content: GPS tracks, photos, videos, comments, trail reports
• Gear Information: Details about your vehicles, bikes, and equipment
• Communications: Messages you send to us for support or feedback

2.2 Information Collected Automatically

• Location Data: GPS coordinates, altitude, speed when you use tracking features
• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Pages visited, features used, time spent on the Service
• Log Data: IP address, browser type, referring pages, date/time stamps
• Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

• Social Login: If you sign in with Apple or Google, we receive your email and name (if provided)
• Payment Processors: Confirmation of successful payments from Stripe

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Providing the Service

• Creating and managing your account
• Processing and storing your GPS tracks and media
• Enabling live tracking and sharing features
• Managing your gear and maintenance schedules
• Processing subscription payments

3.2 Improving the Service

• Analyzing usage patterns to enhance features
• Troubleshooting technical issues
• Developing new features based on user needs
• Training and improving our AI-based content moderation

3.3 Communication

• Sending service-related notifications
• Responding to your inquiries and support requests
• Sending promotional communications (with your consent)
• Notifying you of important updates to our Terms or Privacy Policy

3.4 Safety and Security

• Detecting and preventing fraud, abuse, and security incidents
• Enforcing our Terms and Conditions
• Filtering inappropriate content using automated systems
• Complying with legal obligations

4. Location Data

4.1 Collection

Location data is collected when you actively use tracking features. This includes:

• GPS coordinates (latitude, longitude)
• Altitude/elevation
• Speed and heading
• Timestamps

4.2 Use

Location data is used to:

• Create visual maps of your tracks
• Calculate distance, elevation gain, and other statistics
• Enable live location sharing with people you choose
• Show community tracks (if you enable sharing)

4.3 Blind Tracking Mode

Our mobile app offers a "Blind Tracking" mode that records distance and duration without storing location coordinates, providing enhanced privacy for sensitive routes.

4.4 Control

You can:

• Choose which tracks to share publicly
• Delete tracks and their associated location data at any time
• Stop live tracking at any time
• Revoke location permissions in your device settings

5. Data Sharing and Disclosure

5.1 With Your Consent

• Community Sharing: Tracks you choose to share publicly appear on our community map
• Live Tracking: Real-time location shared via links you generate
• Social Features: Content you post in public areas

5.2 Service Providers

We share data with trusted third parties who assist in operating our Service:

• Stripe: Payment processing
• Amazon Web Services / Cloud Providers: Data storage and hosting
• MapTiler / OpenStreetMap: Map tile services
• Google Cloud Vision: Content moderation for uploaded images
• Apple/Google: Authentication services when using social login

These providers are bound by confidentiality agreements and may only use data to perform services on our behalf.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

• Protect our rights, property, or safety
• Investigate potential violations of our Terms
• Respond to emergency situations

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and the choices you may have.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted over HTTPS/TLS
• Password Security: Passwords are hashed using secure algorithms
• Access Controls: Limited employee access to user data
• Regular Audits: Security practices reviewed and updated regularly
• Secure Storage: Data stored in secure, access-controlled data centers

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

• Account Data: Retained while your account is active
• Tracks and Media: Retained until you delete them or your account
• Log Data: Generally retained for 90 days
• Payment Records: Retained as required by law (typically 7 years)

After account deletion, we may retain anonymized data for analytics purposes.

8. Your Rights and Choices

8.1 Access and Portability

You can:

• View your data through your account settings
• Export your tracks in GPX format
• Request a copy of your personal data

8.2 Right to Correct Inaccurate Data

You have the right to correct inaccurate personal information we hold about you. You can:

• Update your account information (username, email) through your Settings page at any time
• Edit or delete your uploaded tracks, photos, and other content from your account
• Contact us at [email protected] if you believe we have inaccurate information that you cannot correct yourself

We will respond to correction requests within 45 days and make reasonable efforts to correct inaccurate data.

8.3 Deletion

You can:

• Delete individual tracks, photos, and other content
• Delete your entire account through settings or by contacting us

8.4 Marketing Opt-Out

You can unsubscribe from marketing emails using the link in any email or through your account settings.

8.5 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

8.6 European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including:

• Right to access, rectify, or erase your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8.7 Other US State Residents (Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, and Others)

If you are a resident of Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, or other states with comprehensive privacy laws, you may have additional rights, including:

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data
• Right to data portability
• Right to opt-out of the sale of personal data (we do not sell personal data)
• Right to opt-out of targeted advertising (we do not use targeted advertising)
• Right to opt-out of profiling for decisions with legal effects (we do not engage in such profiling)
• Right to appeal our decision regarding your privacy request

To exercise any of these rights, please contact us at [email protected] or visit our Support page.

8.8 Targeted Advertising and Profiling

Targeted Advertising: We do not use your personal information for targeted advertising or cross-context behavioral advertising. We use Google Analytics (with your consent) solely for first-party analytics to understand how users interact with our service. Analytics data is not shared with advertisers or used to target you with ads.

Profiling: We do not engage in profiling that produces legal or similarly significant effects concerning you. We do not use automated decision-making systems that would materially impact your access to our service or make decisions with legal consequences about you.

If you wish to opt-out of analytics cookies, you can do so through our Cookie Preferences.

8.9 Sensitive Personal Information

Under certain state privacy laws, some categories of personal information are considered "sensitive" and require additional protections or disclosure. We collect the following sensitive data categories:

• Precise Geolocation: When you use our GPS tracking features, we collect your precise location (latitude, longitude, altitude). This is essential to the core functionality of our service. You have full control over this data and can:
  • Choose when to record tracks
  • Delete individual tracks or all tracks at any time
  • Control which tracks are shared publicly
  • Use "Blind Tracking" mode which records distance/duration without storing coordinates

We do not collect other categories of sensitive data such as:

• Racial or ethnic origin
• Religious beliefs
• Health or medical information
• Sexual orientation or sex life
• Citizenship or immigration status
• Genetic or biometric data for identification purposes

8.10 Appeal Process for Denied Requests

If we decline to take action on your privacy request (for example, if we cannot verify your identity or the request is manifestly unfounded), you have the right to appeal our decision.

To appeal:

1. Send an email to [email protected] with "Privacy Request Appeal" in the subject line
2. Include your original request reference number (if applicable)
3. Explain why you believe our decision should be reconsidered
4. Provide any additional information that may help verify your request

We will respond to your appeal within 60 days of receipt. If we deny your appeal, we will provide you with information about how to contact your state's Attorney General to submit a complaint.

8.11 Authorized Agents

You may designate an authorized agent to make privacy requests on your behalf. To protect your privacy, we require verification before honoring requests from authorized agents.

Requirements for authorized agents:

• Written permission from you (the consumer) authorizing the agent to act on your behalf
• Proof of the authorized agent's identity
• Verification of your identity (we may contact you directly to confirm)

Authorized agents can submit requests via email to [email protected] with the subject line "Privacy Request - Authorized Agent" and attach the required documentation.

9. Cookies and Tracking Technologies

9.1 What We Use

• Session Cookies: Essential for authentication and security
• Preference Cookies: Remember your settings (e.g., dark mode)
• Analytics: Understand how users interact with our Service

9.2 Control

You have several ways to control cookies:

• Cookie Preferences: Use our cookie preference center (available in the footer) to manage analytics cookies
• Browser Settings: You can control cookies through your browser settings
• Opt-Out: You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on

Note that disabling essential cookies may affect the functionality of the Service.

10. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We take appropriate safeguards to protect your information in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on our website
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Sierra Single Track LLC
Email: [email protected]
Website: https://sierrasingletrack.com

For data protection inquiries from the EU, you may also contact our data protection representative.