Privacy Policy

Introduction

CoastalLabs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use GoVenture, our outdoor trip planning mobile application (the "App").

GoVenture is an outdoor app that handles sensitive information by design — including precise location, health and fitness data, emergency contacts, and your planned whereabouts. We take that responsibility seriously and have built the App to keep you in control of what is shared.

By using GoVenture, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Account Information

• Sign-in identifiers: Depending on the sign-in method you choose, we receive an email address, an Apple ID, or a Google account identifier. If you use Sign in with Apple, you may choose to share a private relay email instead of your real address.
• Profile details: A display name, optional bio, and optional profile picture you choose to provide.
• Subscription status: Whether you have an active GoVenture Pro subscription, managed through the Apple App Store and a third-party subscription processor (see "Service Providers" below).

Trip and Route Data

• Trips and itineraries: Trip names, dates, trip type, day-by-day activities, and notes you create.
• Waypoints: Names, types (campsite, water source, hazard, etc.), notes, and precise latitude/longitude coordinates you save.
• Routes: GPS coordinate tracks (recorded, drawn, or imported), distance, elevation profile, and source. Recorded routes include the full path you traveled.
• Trailheads: Names and coordinates for the start point of a trip.
• Permits: Permit names, issuing agency, confirmation numbers, reservation URLs, costs, validity dates, notes, and any PDF or image attachments you upload.
• Gear and packing lists: Item names, categories, weights, quantities, notes, and trip-type templates.
• Trip photos: Images you upload, captions, and timestamps.
• Offline map areas: Names, center points, and boundary coordinates of the map regions you save for offline use, plus a small preview image. The downloaded map tiles themselves are stored only on your device.

Safety and Emergency Information

• Float plans: Emergency contact name and phone number, vehicle description, expected return time, route summary, and additional notes you choose to record.
• Profile safety defaults: A default emergency contact, vehicle description, and optional medical notes that can be applied to new trips.

Float plan and safety information is stored securely under your account and is not shared with anyone unless you explicitly send it (for example, by sharing a float plan with a contact through your phone's standard share sheet).

Location Data

GoVenture uses your device's location only for purposes you initiate, such as showing your position on the map, recording a route, capturing a waypoint, or setting a trailhead. Specifically:

• While using the App: Your current location is shown on the map and is not stored on our servers.
• While recording a route: The App captures a continuous high-precision GPS track. Recording continues in the background while the App is not on screen so the track remains accurate. Recording stops when you tap stop.
• Manually saved coordinates: When you set a trailhead or pin a waypoint, the coordinates you save are stored with that trip.

You control location access through iOS Settings at any time. Denying location permission disables route recording and live position features but does not prevent other parts of the App from working.

Health and Fitness Data (HealthKit)

If you grant permission, GoVenture integrates with Apple HealthKit on your device. With your permission, GoVenture may:

• Read workouts, workout routes, step count, walking/running distance, cycling distance, and active energy from HealthKit to display activity stats alongside your trips.
• Save recorded routes to HealthKit as workouts, including distance, active energy burned, and an associated workout route.

Health and fitness data accessed through HealthKit stays on your device. We do not receive your HealthKit data on our servers, and we do not share it with anyone. The only Health-related information stored on our servers is your connection preference — two on/off settings that record whether you have enabled Health sync and Apple Watch import. You can revoke HealthKit permissions at any time in iOS Settings > Health > Data Access & Devices.

Photos and Files

When you choose to attach photos to a trip or route, set a profile picture, set a group cover image, or attach a permit document, the App accesses only the items you select using the system photo picker or file picker. Photos may contain embedded metadata such as location and timestamp; this metadata is uploaded as part of the file unless you strip it before sharing.

How photos are stored and who can see them:

• Photos are uploaded to our cloud storage when you add them, so they can sync across your devices, regardless of whether you have shared them. Sharing settings control who can see a photo — not whether it is stored in the cloud.
• Photos are private by default. A photo only becomes visible to others when you share it (for example, by marking a route photo as shared) and your community photo setting allows it.
• Shared route photos are visible to the GoVenture community. They can appear on your published routes, in community trail photo galleries, and in the route feed. Other users can like and comment on shared photos, and your display name and profile picture appear alongside them.
• Photo files are served from cloud storage via long, unguessable links. A private photo is not listed or discoverable anywhere, but anyone who possesses a direct link to a file (for example, because you sent it to them) can view that file.

Contacts

If you choose to invite someone to a shared trip from your phone's contacts, GoVenture reads only the contact you select and stores their name and email address (if available) as part of that trip's member list. We do not upload your contact list to our servers.

Social and Community Data

If you participate in social features, we collect:

• Adventure groups: Group names, descriptions, categories, visibility settings, member roles, posts, comments, and likes.
• Trip sharing: Members invited to a trip (display name and optional email) and their assigned roles. When you create a trip invite link, anyone who holds that link can see a preview of the trip — its name, dates, cover image, and your display name as the inviter — before accepting. Treat invite links like invitations: only send them to people you want on the trip. You can revoke an invite link at any time.
• Followers: Your follow relationships with other GoVenture users.
• Public routes: Routes you choose to publish to the community, including name, description, activity, difficulty, GPS track, distance, elevation, optional GPX file, and an optional preview image.
• Trail reviews: Star ratings and review text you post on community trails, shown with your display name and profile picture.
• Saves and likes: Routes and posts you save or like.

Public sharing is always opt-in. Routes, posts, and groups are private to you (or to their members) until you explicitly publish them, and you can change visibility or delete them at any time. Trail reviews are public: once posted, a review is visible to all GoVenture users. You can edit or delete your reviews at any time.

Community Trails

When you publish a route, GoVenture may match it against known trails and use it to build or improve a shared community trail — including its path, distance, elevation profile, and stats such as how many people have completed it. What this means for your data:

• Your published route remains associated with your account and appears on the community trail's page (for example, in its photo gallery and recent-activity list), subject to your visibility settings.
• Aggregate trail information (the trail path and statistics) is derived from routes shared by the community and does not identify you individually.
• If you unpublish or delete a route, it is removed from community surfaces; already-computed aggregate trail statistics may persist because they do not identify you.

Device and Usage Information

• Device information: Device type, operating system version, and App version, used for compatibility, support, and stability.
• Push notification tokens: If you enable notifications, we store your device's Apple push token on our servers so we can deliver alerts such as trip invites, group activity, and social interactions. Tokens are removed when you sign out or disable notifications.
• Notification records: When we send you an in-app notification (for example, "someone liked your route"), we store the notification itself, including the other user's display name and the name of the item involved, so your notification list can be shown across devices. You can clear notifications in the App.
• Server logs: Standard request metadata such as IP address, time, and endpoint accessed by our backend service provider for security and troubleshooting.

GoVenture does not include third-party advertising, ad identifiers, or behavioral tracking SDKs. We do not build a profile of you for advertising.

How We Use Your Information

We use the information described above only to provide and improve the App:

• Core functionality: Show maps, plan trips, manage gear, record and display routes, send and receive group messages, and sync your data across your devices.
• Personal sync: Keep your trips, gear, profile, and groups available on every device where you sign in.
• Group and trip sharing: Deliver shared trip data and live updates to people you have explicitly invited or who are members of a group you joined.
• Account management and support: Authenticate you, respond to requests, and protect your account.
• Reliability and security: Diagnose problems, prevent abuse, and enforce our Terms of Service.
• Legal compliance: Comply with applicable laws, regulations, and valid legal requests.

Data Storage and Security

On Your Device

GoVenture stores your trip data, routes, gear, photos cache, and other content locally on your device using Apple's secure on-device storage. iOS Data Protection encrypts this data at rest. HealthKit data accessed by the App stays in Apple's HealthKit store on your device.

In the Cloud

Most personal content (trips, routes, gear, profiles, groups, photos, permit attachments) syncs to a secure backend so you can access it across devices and so shared trips and groups work for everyone involved. Data in transit is protected with HTTPS, and data at rest is protected by our hosting provider's standard encryption and access controls. Access is enforced at the database level through row-level security so only authorized users can read or write any given record.

Retention

We keep your data for as long as your account exists or as needed to provide the App. You can delete individual items (trips, routes, photos, groups, etc.) inside the App at any time. When you delete your account, we delete your personal content from our systems as described under "Your Rights and Choices."

Data Sharing and Disclosure

We do not sell your personal data, and we do not share it with advertisers.

Information is shared only in these circumstances:

• People you choose: Trip members, group members, and the wider community when you publish a public route or post — strictly based on the visibility settings you configure.
• Service providers: Trusted vendors that help us operate the App, described below. They process data on our behalf under appropriate contractual safeguards.
• Legal requirements: When we have a good-faith belief that disclosure is required by law, court order, or valid legal process, or to protect the rights, property, or safety of our users, the public, or CoastalLabs.
• Business transfers: If CoastalLabs is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Service Providers

GoVenture is built on a small number of carefully chosen services. The data each service processes is limited to what is necessary for that service to do its job:

• Backend hosting and authentication: Stores your account, trips, routes, gear, photos, permit attachments, and group data, and authenticates you when you sign in.
• Map provider: Renders the interactive map. The map provider receives the geographic area you are viewing in order to deliver map tiles. It does not receive your account identity from us.
• Weather provider: Receives the coordinates of waypoints or trailheads you ask for forecasts about. It does not receive your account identity.
• Subscription provider: Manages your GoVenture Pro subscription and verifies entitlement. Receives a pseudonymous identifier and purchase information from Apple's App Store.
• Sign-in providers: If you sign in with Apple or Google, those providers handle the authentication exchange and provide us with the basic identifiers described under "Account Information."
• Apple HealthKit: An on-device system service provided by Apple. No HealthKit data leaves your device through GoVenture.

Visibility and Privacy Controls

GoVenture is designed so you decide what is private, what is shared with specific people, and what is public. You can adjust at any time:

• Trip section privacy: Hide specific sections of a trip (route, photos, itinerary, gear, members, float plan, permits) from non-members. Float plans and permits default to private.
• Profile visibility: Show your profile to everyone or only your followers.
• Activity visibility: Show your activity to everyone, only your followers, or only yourself. Group activity is controlled separately.
• Map privacy: Optionally hide the start and end points of your routes when shared, or hide route maps from other users entirely.
• Public route opt-in: Routes are private by default. Publishing to the community is always an explicit action.

Your Rights and Choices

Access and Correction

You can view and edit your trips, routes, gear, profile, groups, and posts directly in the App at any time.

Deletion

You can delete individual items inside the App. You can also delete your entire account from within the App. When you delete your account, we permanently delete the personal content tied to it, including trips, routes, gear, profile data, photos, permit attachments, group memberships, posts, comments, follows, and saved or liked content. Some standard server logs and records we are required to keep for legal, security, or fraud-prevention reasons may persist for a limited time.

Permissions

You can change Location, Health, Photos, Contacts, and Notification permissions at any time in iOS Settings. Revoking a permission will disable the related feature but will not delete data already saved with your consent.

Region-Specific Rights

Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK) or CCPA/CPRA (California), including the right to access, correct, delete, restrict, port, or object to certain processing of your personal data, and the right to lodge a complaint with a data protection authority. To exercise these rights, contact us at the email address below.

Children's Privacy

GoVenture is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

International Users

CoastalLabs operates from the United States. If you use GoVenture from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the App, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes we will:

• Post the new Privacy Policy on this page
• Update the "Last updated" date
• Provide in-app notification for significant changes

Please review this Privacy Policy periodically. Continued use of the App after a change becomes effective means you accept the updated Privacy Policy.

Contact Us

If you have questions or requests regarding this Privacy Policy or your data, please contact us: