Privacy Policy

1. Who We Are

EchoTrail is operated by Zentric AS, org. nr. 933 895 312, based in Norway. Contact: Kent@zentric.no.

2. Data We Collect

• Account data: Email address and display name when you create an account.
• Location data: GPS coordinates during active trail tracking. Location is only collected while the app is in use and tracking is active.
• Trail data: Route coordinates, distance, duration, and elevation recorded during hikes.
• Usage data: Anonymous analytics about app usage patterns to improve the experience.
• Device identifiers: Android Advertising ID (AD_ID) to support analytics, crash reporting, push notifications, app personalization, security monitoring, and account administration. You can reset or opt out of personalised use of this ID through your device settings (Google Settings → Ads).
• Notification tokens: Push notification tokens to deliver service updates and trail-related alerts.
• Payment data: Subscription transactions are processed by Google Play. We do not store payment card details.

3. How We Use Your Data

• Generate AI-powered stories based on your location and trail data.
• Provide GPS tracking and trail recording features.
• Improve our AI models and app experience (analytics).
• Communicate service updates, push notifications, and support (developer communication).
• Personalise content recommendations and app behaviour based on your preferences and usage (app personalisation).
• Detect and prevent fraud, abuse, and security incidents (security and fraud prevention).
• Administer your user account, including login and subscription status (account administration).
• Enable core app functionality including offline mode and story generation (app functionality).

4. Third-Party Services

We use the following third-party services:

• OpenAI: For AI story generation. Location context is sent to generate stories but is not stored by OpenAI.
• Google Play / Firebase: For subscription billing, app distribution, and push notifications via Firebase Cloud Messaging (FCM). Google may process the Advertising ID as part of their services.
• Sentry: For crash reporting and error monitoring. Device and session data including the Advertising ID may be collected to identify and diagnose crashes.
• ElevenLabs: For AI voice synthesis. Text content is sent to generate audio; no personal data is stored by ElevenLabs.
• Neon / PostgreSQL: For account and trail data storage (EU-hosted).

5. Advertising ID (Android AD_ID)

EchoTrail uses the Android Advertising ID solely for the following purposes declared in Google Play Console:

• App functionality: To support core features of the application.
• Analytics: To collect anonymous usage data, diagnose crashes, and improve app performance.
• Developer communication: To deliver push notifications about trail completions, new features, and service updates.
• Advertising and marketing: To measure and optimise communication about EchoTrail to potential users. We do not display third-party ads within the app.
• Security and fraud prevention: To detect abusive behaviour and protect user accounts.
• App personalisation: To tailor story recommendations and app settings to your preferences.
• Account administration: To manage your user account and subscription status.

You can reset your Advertising ID or opt out of personalisation at any time via Google Settings → Ads on your Android device.

6. Data Storage & Security

Your data is stored securely using industry-standard encryption. Trail data and account information are hosted on EU-based servers. We retain your data for as long as your account is active.

7. Your Rights (GDPR)

As a user in the EEA, you have the right to:

• Access your personal data
• Request correction or deletion of your data
• Export your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with Datatilsynet (Norwegian Data Protection Authority)

To exercise these rights, contact us at Kent@zentric.no.

8. Children

EchoTrail is not intended for children under 13. We do not knowingly collect data from children under this age.

9. Changes

We may update this policy from time to time. Significant changes will be communicated through the app or via email.