Privacy Policy
Effective date: October 26, 2026
Intuitive by Design, LLC operates CanTrail ("CanTrail," "we," "us," or "our"). This policy explains how CanTrail handles information when you use the iOS app on an iPhone or supported iPad.
What CanTrail stores on your device
CanTrail stores your local profile, ride routes, dates, distance, duration, elevation and speed information, ride titles, horse profiles, settings, pins and notes on your device. It also keeps media previews and references to photos and videos associated with rides. Cached weather includes the coordinates used for the forecast. Downloaded map areas are stored on your device when you use that feature.
Ride recording, saving and viewing use the on-device database and do not require a network request. Signing in for the first time, weather, online maps and other online services need a connection. Removing the app, erasing its data or losing the device can mean losing local information.
The production release disables experimental ride sync and does not automatically upload your rides or media to Supabase. Creating an account does not provide a cloud backup of your rides.
Location information
With your permission, CanTrail uses your precise location to record a route during a ride, including location timestamps and available altitude and speed readings. With the required background permission, recording can continue when the app is in the background or the screen is locked. Recorded route points are saved on your device; recording stops when you pause, finish or discard a ride.
Location is also used to center maps, place pins and show local weather. When the dashboard opens or regains focus, its weather feature can request location access and automatically refresh weather. CanTrail sends latitude and longitude rounded to four decimal places to Open-Meteo for current conditions and forecasts. These coordinates can still identify a small area near your location; they are not anonymized. The weather provider also receives network information such as your IP address.
Native maps use Apple Maps. Map and RainViewer radar requests identify the geographic areas displayed and send network information such as your IP address to those services. Loading maps or the dashboard radar preview can make these requests automatically. The hourly forecast also uses Apple's geocoding service to turn coordinates into a place label.
If you submit an address or place search in Offline maps, CanTrail sends that text to Mapbox. Downloading an area requests map tiles for that area from Mapbox. Those requests reveal the requested area and network information to Mapbox. You can change location permissions in your device settings; denying access prevents features that need a new location fix but does not delete saved rides.
Account information
The production app requires email-code sign-in. Supabase and Resend process your email address and sign-in email to deliver and verify that code. Authentication and session-refresh requests also send network information such as your IP address. CanTrail stores your account identifier and email address locally, and asks for your first and last name during setup. The name you enter and optional horse names are stored on your device.
Session credentials and the information used to restore verified local access are stored using your device's secure storage. You can optionally require Face ID, Touch ID or your device passcode when reopening CanTrail. Your device performs that check; CanTrail does not receive your biometric template or device passcode. Previously verified local access can work offline, subject to device unlock and sign-out settings.
Photos, video, microphone, and speech recognition
CanTrail offers an optional camera and photo-library permission step during setup. It can also request access when you capture media, attach photos, restore missing previews or load an original. You can skip the setup permission step and change permissions later in device settings.
Photos and videos captured in CanTrail are saved as originals in your device's photo library. CanTrail keeps compact image previews, available video thumbnails and library references with the ride. Photos you select from your library also receive an app-local preview. Historical rides can display saved previews without requesting library access; loading an original or repairing a missing preview may need that access. Videos may include microphone audio. Your photo-library settings control any cloud copies made by the operating system or a photo service.
Voice features use your microphone and Apple's speech-recognition service for commands, emoji search and dictation. Recognition is not restricted to processing on the device, so audio may be sent to Apple for recognition and transcription and the feature may need a connection. Apple's processing and retention depend on the speech service and your device settings. Text you save as a pin note is stored with that pin. Keyboard entry remains available for emoji search and notes.
Sharing
When you share a completed ride, CanTrail normally includes a route-outline image and a text recap containing the ride title, date, trail and horse names when present, and ride statistics. Pins and selected photos or videos are optional. If file sharing is unavailable, the app can share the text recap alone. The route image is generated on your device without requesting map tiles for the image.
You choose the destination through your device's sharing controls. Routes, pins, media and any metadata carried by shared files may reveal private locations. Review the content before sharing. Recipients and services you choose handle their copies under their own privacy practices.
Encrypted exports
Settings lets you create a password-encrypted export of local rides, routes, settings, horses, pins, notes and media files or previews stored in CanTrail. The export does not retrieve full-resolution originals held only in your photo library. You choose where to save or send the file, which may be a cloud storage service. CanTrail does not store the export password; a lost password cannot be recovered. Restoring an export requires the same CanTrail account. Keep the file and password secure.
How we use information
We use information to provide CanTrail's ride-recording, account, weather, map, media, export and sharing features; to maintain the app; and to respond to support requests. If you email support, we receive your email address and the information you include. We do not sell personal information or use CanTrail data for targeted advertising. The app does not include an advertising or analytics SDK.
Service providers
CanTrail uses Supabase and Resend for account access and sign-in email, Open-Meteo for weather, Apple Maps for native maps, RainViewer for radar, Mapbox for offline-map search and downloads, and Apple's geocoding and speech-recognition services. Their processing and retention depend on the service and its applicable terms, privacy information and our service arrangements.
Our Supabase project is hosted in Canada Central. Other providers may process information outside your country. Resend states that stored email data is held in the United States, regardless of the email-sending region. Mapbox uses US infrastructure and a global content-delivery network. A project's hosting region does not mean every provider's support, security or delivery processing is confined to that region.
Provider information: Supabase privacy and data processing addendum; Resend privacy and data handling; Open-Meteo terms and privacy; Apple privacy; RainViewer privacy; and Mapbox privacy.
Open-Meteo states that its weather API server logs may contain coordinates and are deleted after 90 days. Mapbox states that it normally deletes IP addresses within 30 days, with exceptions for investigations and legal compliance; that period does not describe all Mapbox data. RainViewer's general privacy notice uses a purpose-based retention period rather than a fixed number of days. These are the providers' published practices, not retention periods controlled by CanTrail. Deleting your CanTrail account does not itself delete these providers' request logs.
The current Supabase Free plan provides a one-day retention window for API and database service logs. We have not enabled scheduled project backups or point-in-time recovery, and writing new authentication audit logs into the project database is switched off. These settings do not guarantee immediate deletion of every provider-held security or operational record. Resend publishes a standard 30-day retention period for email and log data on its Free, Pro and Scale plans, and a seven-day backup period. Deleting your CanTrail account does not remove sign-in messages from Resend early or from your inbox.
Retention and deletion
Local ride data remains until you remove it, delete the account on that installation or erase the app's data. Signing out removes access to the local profile but does not delete its saved rides. The weather cache is replaced when new weather is saved; downloaded map areas can be replaced by a later download.
Use Settings → Delete account to request deletion. Finish or discard any current ride first. Online account deletion needs a connection and an authenticated session. CanTrail requests deletion of the Supabase account and associated server ride records and stored ride files, then removes that account's local database records, app-owned ride media and downloaded maps on the device making the request. Its cached weather is also removed. If server deletion fails, the app keeps your local rides. If server deletion succeeds but local cleanup is interrupted, cleanup is retried when the app restarts.
Deleting an account does not erase originals in your photo library, exported files, copies shared with others, or local data on another installation. In particular, it cannot remotely erase an offline device. You must remove those copies separately. Provider logs and backup copies may remain under the applicable retention rules; account deletion does not guarantee their immediate erasure.
If you cannot use the in-app deletion option, contact us at support@cantrailapp.com.
Security
CanTrail uses device secure storage for session credentials, app storage for local ride data, HTTPS for its web API requests, and password encryption for manual exports. Optional device unlock controls access when reopening the app. These measures do not guarantee the security of a device, shared copy or exported file. No method of electronic storage or transmission is completely secure.
Development and preview builds
A development or preview build can enable experimental sync. When enabled and configured, it sends completed ride details and route coordinates, altitude and timestamps to Supabase. It does not include all local ride information or upload media and is not a backup. Production builds disable this experimental feature.
Our privacy-policy website
Cloudflare hosts and delivers this page. When you visit it, Cloudflare processes request information such as your IP address, requested URL and browser information to deliver and secure the website. Cloudflare's processing and retention are described in its privacy policy. This page itself includes no advertising or analytics scripts and does not request access to your location, camera, microphone or photo library.
Children
CanTrail is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through CanTrail, contact us so we can address the request.
Changes to this policy
We may update this policy when CanTrail or its data practices change. We will post the updated version at this page and revise the effective date above.
Contact us
For privacy questions or requests, contact Intuitive by Design, LLC at support@cantrailapp.com.