Privacy Policy

Last updated: 3 March 2026

CairnGo (“we”, “us”, “our”) is a Munro-bagging companion app operated from the United Kingdom. This policy explains what personal data we collect, how we use it, and your rights.

1. Data we collect

• Account data: email address, username, display name, optional bio and profile photo.
• Ascent & activity data: mountains climbed, dates, GPS tracks, photos, notes, and condition reports you submit.
• Location data: used only when you explicitly trigger a feature (e.g. Weekend Planner, Check-In). We do not track your location in the background.
• Safety data: emergency contact email/phone you provide for the Safety Check-In feature.
• Payment data: processed by Stripe. We store only your Stripe customer ID — no card details touch our servers.
• Device & usage data: Expo push token for notifications; basic crash and error logs.

2. How we use your data

• Providing and improving the CairnGo service.
• Sending safety alert emails to your nominated emergency contact if a Check-In becomes overdue.
• Sending optional push notifications about activity in the app.
• Aggregated, anonymised analytics to understand which features are used.

3. Data sharing

We do not sell your personal data. We share data only with:

• Supabase — authentication and secure session management.
• Neon / PostgreSQL — hosted database (data stored in the EU).
• Cloudflare R2 — photo and GPX track storage.
• Stripe — payment processing.
• Resend — transactional email (safety alerts only).
• Open-Meteo — weather forecasts (your coordinates are sent to retrieve forecasts; no data is retained by Open-Meteo).

4. Hill data attribution

Mountain data is sourced from the Database of British and Irish Hills (DoBIH), licensed under Creative Commons Attribution 4.0 International (CC BY 4.0). © DoBIH contributors.

5. Data retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing privacy@cairngo.app.

6. Your rights (UK GDPR)

Under UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data. To exercise these rights, contact privacy@cairngo.app.

7. Cookies

The mobile app does not use browser cookies. The web checkout flow may set session cookies required by Stripe.

8. Changes to this policy

We will notify users of material changes via in-app notice or email. Continued use of CairnGo after changes constitutes acceptance.

9. Contact

Questions? Email privacy@cairngo.app.