OffTrack Find Secret Spots

Privacy Policy

🛡️ Last Updated: June 24, 2026

1. Overview and Core Philosophy

At OffTrack Gems, we believe that your adventures, safety, and personal data should be yours. We limit data collection only to what is technically necessary to operate the application, authenticate your identity securely, provide live coordinates to your travel partners, process scanned receipts, support collision safety checks, and synchronize trip plans and expenses in real-time.

2. Data We Collect and Permissions Required

To deliver a premium travel, navigation, safety, and community experience, we collect and process the following information, subject to your explicit device permissions:

  • Auth Profile Information: When signing in via Google Sign-In or Apple Sign-In, we receive authentication tokens, your email address, full name, and profile picture URL. If no profile picture is available, we dynamically generate initials-based default pictures from ui-avatars.com.
  • User-Generated Spot Content & Social Activity: Spot titles, planning outlines, city names, categories, photographs that you upload, group comments, hosted trips, and split-billing ledger entries.
  • Location Information (Foreground & Background):
    • Rider Live Location & Group Navigation: With your explicit permission, we collect precise location data (GPS coordinates) to show your live position to your group members during trips, display map paths, and provide group navigation.
    • Background Location: To enable Hidden Gem Detection Notifications and Rider Live Location tracking even when the app is closed or not actively in use, we collect precise location coordinates in the background. You can enable or disable background location access at any time through your device settings.
    • EXIF Coordinates: We read GPS coordinates from image files you upload from your gallery to auto-fill spot coordinates.
    • Environmental Data (AQI & Weather): We use your location to fetch localized air quality and weather forecasts.
  • Device Sensor Data:
    • Fall & Crash Detection: With your permission, we access your device's motion sensors (including accelerometer and gyroscope) to automatically detect potential falls or crashes while riding.
  • Bill and Receipt Scan Data: When you scan bills in the Expense manager, your base64 image strings are passed securely to our Firebase Cloud Functions which call Google Cloud Document AI to extract merchant details, line items, and totals. Scanned image logs are transient and deleted from active memory immediately after parsing.
  • Trip and Ledger Data: Custom trip names, invite codes, expenses, split amounts, item names, and real-time chat messages which are saved securely on Firebase Firestore database.

3. How We Use Your Data

We process your information to:

  • Authenticate your profile and maintain active logged-in sessions.
  • Populate hidden gem spots, maps, and feed views.
  • Coordinate live group navigation, route optimization, and live rider tracking.
  • Send Hidden Gem Detection Notifications based on your background location.
  • Detect accidents via device sensors (Fall & Crash Detection) and transmit instant SOS emergency alerts containing your live location to your group and emergency contacts.
  • Retrieve localized environmental metrics (AQI & Weather).
  • Calculate XP points, contributions, and gamified ranks.
  • Process receipts using OCR algorithms and calculate exact debt splits.

4. Data Sharing and Privacy Boundaries

Your privacy is absolute. OffTrack Gems has a strict **no-sharing** policy:

  • We **never** sell, rent, trade, or distribute your email addresses, location history, or motion sensor logs to advertising networks or third-party corporations.
  • Your live location, profile name, photo, and split totals are visible **only** to travelers in your specific trip groups, or public community members for content you explicitly publish.
  • In an SOS emergency, your location is shared directly with your designated emergency contacts and trip members.
  • OCR receipt processing is completed securely using Google Cloud's enterprise-grade API, which does not utilize your uploaded data to train Google models.

5. Data Retention and Account Deletion

Your data stays on our secured Firestore databases for as long as your account remains active. You may request the deletion of your account and all associated trip ledgers, uploaded spots, and messages directly inside the App's settings, or by visiting our Data Deletion Request Page. Once requested, your personal data will be completely purged from our cloud servers within 30 days.

6. Third-Party Services

The App integrates with Google Play Services, Google Maps SDK, Firebase Auth/Firestore, and OpenStreetMap. These services process data under their respective privacy structures. We advise you to review their privacy standards if you utilize advanced features.

7. Data Security

We employ strict administrative and technical security measures. All communications between the mobile application, cloud functions, and database tables are protected using Secure Sockets Layer (SSL/TLS) encryption. Access to user documents in Firestore is strictly governed by authenticated Firebase security rules.

8. Contact Us

If you have any questions or data removal requests regarding this Privacy Policy, please contact our privacy officer at:

📧 Email: offtrackgems@gmail.com
🌐 Web: https://offtrackgems.com

Back to Home