Privacy Policy

Last updated: 1 July 2026

Who we are

FreeKin (the "app") is an outdoor activity app for planning, discovering, and sharing tracks across hiking, trail running, mountain biking, gravel, road cycling, ski touring, and motorcycling. FreeKin is the data controller for the purposes of GDPR. This policy explains what data we collect, why, and what you can do about it.

What we collect

• Account: email address, username, display name, password (stored only as a hash).
• Profile: optional avatar photo; your per-axis endurance settings (cardio, technical, exposure) used to personalize the difficulty scores you see.
• Tracks: uploaded GPX/FIT files and designed routes, including geometry, elevation, distance, activity type, titles, descriptions, and photos you attach.
• Ratings & content: your difficulty ratings, comments, and reports.
• Events & live location: events you create or join, and — only while an event is live and only if you opt in — your real-time location, shared with other participants of that event for its duration.
• Device: push notification token, app version, and OS version.
• Crash and error data: anonymised stack traces and device context collected automatically when the app encounters an error.

How we use it

To operate the app: show tracks and personalized difficulty, run events, deliver notifications, and let you share routes with others. We do not sell your data, and we do not use it for advertising. The legal basis for processing is performance of the contract between you and us (operating the app you signed up for) and, where applicable, our legitimate interest in keeping the service secure and stable.

Live location — how it works

Live location exists for outdoor safety, so a group can stay found — it is not a social feed. It is shared only while an event you joined is active, only with the other participants of that event, and only after you opt in. When the event window ends, sharing stops automatically and the live positions are not retained as a history of your movements. You can leave an event, or stop sharing, at any time.

Hide endpoints

For any track you can choose, at upload time, to hide its endpoints. FreeKin then trims a radius (200 m by default) around the start and finish and stores a public version of the geometry. You always see the full track; everyone else sees the trimmed version. This is a per-track decision — it protects places like your home or car from being shared.

What is visible to other users

• Your username, display name, avatar, the tracks you publish (subject to your visibility and hide-endpoints settings), your ratings and comments.
• During a live event, your real-time location is visible to that event's participants for the event window only.
• Your email, push token, endurance settings, private tracks, and the full (untrimmed) geometry of hidden-endpoint tracks are private to you.

Where data is stored

Data is hosted on our own self-managed servers in the EU (a PostGIS database for track and account data, and object storage for photos). Push notifications are routed through Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android).

Third-party processors

• Apple Push Notification service / Google Firebase Cloud Messaging — push delivery only; receives your push token.
• Expo — over-the-air app updates.
• Map & elevation data — map tiles and elevation are served from our own infrastructure; routing uses a self-hosted engine. No personal content is sent to third parties for these.

How long we keep it

Until you delete your account. Deleting your account removes your profile, tracks, photos, ratings, comments, events, endurance settings, and authentication record. Live-location updates are ephemeral and are not kept after an event ends. Some security logs may be retained for up to 30 days for abuse-prevention purposes.

Your rights

Under GDPR you have the right to access, correct, export, or delete your personal data, and the right to object to or restrict certain processing. You can delete your account in-app at any time (Settings → Delete account — step-by-step guide). For any other request, write to [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. In the Czech Republic, the relevant authority is the Office for Personal Data Protection (ÚOOÚ).

Children

FreeKin is intended for a general audience but is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact [email protected] and we will remove the account promptly.

Changes

We may update this policy. We will note the change date at the top and notify active users in-app when changes are material.

Contact

FreeKin — [email protected]