Park Passport Privacy Policy

Last updated 24 September 2026

Who we are

Park Passport is an independent app for keeping track of the US national parks you have visited and planning trips to more of them. In this policy, "we" means the developer of Park Passport. You can reach us at parkpassportsupport@icloud.com or through the Park Passport support page.

What stays on your phone

Some things the app uses never leave your device:

• Your location. If you allow it, the app asks for your approximate position once, when the map opens, so it can start near you. The app does not store that position or send it to us. Approximate location is enough, and the app works without location access at all.
• Diagnostics. The app keeps a short log and Apple's performance and crash reports on your phone. Nothing is sent automatically. If you choose to share them from the Diagnostics screen, they go wherever you send them with the share sheet.
• Visits and trips without an account. If you are not signed in, what you record is stored only on this device.

What we store when you create an account

An account is optional. It exists so your passport syncs between devices and so you can add friends. When you sign in, we store:

• Your email address, to sign you in with a one-time code and to identify your account.
• Sign-in details from Apple or Google, if you use one of those instead of email. We receive the email address and account identifier that service shares, and may receive the name and profile picture link on that account, which our sign-in service keeps with your account but the app does not use. For Sign in with Apple we also keep an encrypted token so we can tell Apple to disconnect the app when you delete your account.
• An account ID that we create, which links your records together.
• Your park visits: which parks you visited and on what dates, plus the history of changes you make to them.
• Your trips: trip names, dates, status, and the places you add as stops, including their names and map coordinates.
• Your awards and the visits that earned them, and your app preferences.

Friends and what others can see

The friends feature is optional. If you set up a friends profile, we store the username and display name you choose, the friend requests you send and accept, the people you block, and the crews (named groups of friends) you create or join.

Anyone signed in to Park Passport can search for you by username or display name and send you a friend request, and sees only those two things. Your display name starts as "Explorer" until you change it; we never fill it in from your email address.

Friends you have accepted also see how many parks you have visited and the most recent park you visited. Both are on by default, and you can hide either one at any time with the switches under "What friends see" on your profile. Your trips, visit dates, and email address are never shown to other people.

If you block someone, we store that so neither of you can find or contact the other in the app. If you report someone, we store your report, including the reason and any details you write, with that account's name at the time, so we can review it. A report stays after you delete your account, without your name attached to it, because it is about someone else. Reports about an account are deleted when that account is deleted.

Services that process your data for us

• Supabase hosts our database and sign-in service, and so stores the account data described above. Like most servers, it also records technical details of each request, such as your IP address, in short-lived logs used for security and to keep the service running. See the Supabase privacy policy.
• GitHub is where we are told about reports. When you report someone, we receive a private notice on GitHub containing that account's name, the reason, and any details you wrote, but not your name or account. See the GitHub privacy statement.
• Apple and Google handle sign-in if you choose them. They share only what their sign-in screens tell you they will share.
• Apple Maps search finds places when you search while planning a trip. Your search text goes to Apple and is handled under Apple's privacy policy.
• Mapbox draws the map. The Mapbox software in the app sends Mapbox anonymous usage information, including your location if you have allowed the app to use it, which Mapbox uses to improve its maps. You can turn this off at any time: tap the i button in the corner of the map, choose Mapbox Telemetry, and opt out. See the Mapbox privacy policy.

Apple may also share crash reports with us if you have agreed, in your iPhone's settings, to share app analytics with developers.

What we do not do

• We do not sell or rent your personal information.
• We do not show ads or use advertising identifiers.
• We do not track you across other companies' apps or websites.
• We do not use your data for anything other than running Park Passport's features.

How long we keep your data

We keep your account data for as long as you have an account. When you delete your account, your profile, visits, trips, awards, friends, and sign-in details are deleted from our database straight away. The only exception is a report you made about someone else, which stays without your name attached. The app also removes that account's copy from your phone. Server request logs are kept for a short time by Supabase and then discarded.

Your choices and rights

• Delete your account in the app: open the account screen from the map and choose Delete Account. It takes effect immediately.
• Hide your park count or latest visit with the switches on your friends profile.
• Turn off location in iPhone Settings, under Privacy & Security, Location Services, Park Passport.
• Turn off Mapbox telemetry from the map's i button.
• Ask for a copy of your data, or ask us to correct it, by emailing parkpassportsupport@icloud.com. Depending on where you live, you may have further rights under laws such as the GDPR or California's CCPA, and you can use them the same way.

Children

Park Passport is not directed at children under 13, and we do not knowingly collect personal information from them. If you think a child has created an account, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top before the change takes effect, and mention significant changes in the app.