Privacy Policy

Effective Date: October 20, 2026 • Version 1.4.3

Our Core Privacy Promise: LupoTrail was built for athletes who care about their data. We do not sell your data, we do not track you across the web, and we do not use third-party advertising networks. Your workout coordinates and sensor telemetry stay on your device unless you choose to export them.

1. Overview

This Privacy Policy explains how LupoTrail ("we", "us", or "our") collects, uses, processes, and protects your information when you use our mobile application available on iOS and Android. By downloading or using LupoTrail, you acknowledge the terms outlined in this policy.

2. Location Data & Background GPS Tracking

LupoTrail requires access to your device's satellite positioning systems (GPS, GLONASS, Galileo) to perform its core functions as a sports computer:

Foreground Location: Used while the app is actively on your screen to calculate real-time speed, live pace, distance traveled, climb gradient, and to render your current position on the map.
Background Location (When Screen is Off or Locked): LupoTrail requests background location permission (ACCESS_BACKGROUND_LOCATION on Android and UIBackgroundModes: location on iOS). This allows you to lock your phone and put it in your cycling jersey pocket while the app continues accurately logging your ride path, total distance, and elevation gain without interruption.

Your location data is stored strictly on your local device. We never transmit your real-time or historical coordinates to our servers or any commercial data broker without your explicit action.

3. Bluetooth Low Energy (BLE) Permissions

LupoTrail requests Bluetooth permissions (BLUETOOTH_SCAN, BLUETOOTH_CONNECT) to communicate directly with peripheral sports sensors:

Heart Rate Monitors: Reading heart rate pulses using standard Bluetooth GATT service 0x180D (e.g., chest straps, optical armbands, smartwatches).
Cycling Radar: Interfacing with Garmin Varia and Bryton Gardia radar lights to alert you of rearward vehicle threats.
Speed & Cadence Sensors: Reading wheel and crank revolutions to compute exact pedaling cadence and speed (GATT 0x1816).
Cycling Power Meters: Reading strain-gauge power output and torque effectiveness (GATT 0x1818).

Bluetooth data is processed in real time in phone memory and logged locally to your ride session. Bluetooth is never used for indoor beacon tracking or advertising identifiers.

4. HealthKit (iOS) & Health Connect (Android)

LupoTrail integrates with Apple HealthKit on iOS and Android Health Connect (Samsung Health / Google Fit):

Permission-Gated: We never access HealthKit or Health Connect without your explicit authorization via the native system prompt.
Write Access: When enabled, LupoTrail publishes your completed workout sessions (total distance, active calories burned, duration, and heart rate samples) so your rides contribute toward your Apple Watch Activity Rings and Samsung Health goals.
Read Access: If authorized, LupoTrail may read historical biometric metrics (such as resting heart rate or body mass) exclusively to calculate accurate calorie expenditure and customized training zones.
Strict Compliance: In accordance with Apple's Developer Program License Agreement and Google's Health Connect Policy, Health data obtained by LupoTrail is never used for marketing, advertising, or shared with third-party data analytics services.

5. Third-Party Cloud Integrations (Strava)

If you choose to link your Strava account, LupoTrail utilizes Strava OAuth 2.0 to securely transmit selected rides to your Strava profile. You can disconnect Strava or disable automatic uploads at any time in the app's Settings menu.

6. Crash Diagnostics & Error Reporting

To ensure app stability and fix unexpected crashes, LupoTrail includes a lightweight, on-device diagnostic logger (crashReporter). Diagnostics record crash stack traces and device model information. Diagnostics do not contain your GPS coordinates or personal identity and are stored locally until explicitly exported by you for customer support.

7. Data Retention & Deletion

You have complete control over your data:

Delete Activities: You can delete any individual ride or clear your entire activity history directly within the app (History → Delete).
Account Deletion: If you created an account in LupoTrail, you can delete your account and all associated cloud records immediately by visiting our Account Deletion Page or via the in-app Profile screen.

8. Children's Privacy

LupoTrail is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

9. Contact Us

If you have any questions, feedback, or concerns regarding this Privacy Policy or your data, please contact our support team:

Email: yalcinpak@gmail.com
GitHub Repository: github.com/yalcinpak/lupotrail
Support Page: LupoTrail Support & FAQ