Privacy Policy
Effective March 1, 2026 · Compliant with PIPEDA (Canada)
Backcountry Aspect is committed to protecting your privacy. This policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.
What We Collect
| Data | Purpose | Retention |
|---|---|---|
| Email address | Authentication, account recovery, notifications | Until account deletion |
| Pin drop locations | Terrain analysis, AI assessments, saved locations | 24 months from last use |
| Assessment history | AI terrain assessment feature | 12 months |
| Subscription status | Feature access, billing | 7 years (tax compliance) |
| Usage analytics | App improvement (via Plausible, no PII) | ~30 days |
Pin drop locations can reveal touring patterns and wilderness access strategies. We treat location data as sensitive and apply enhanced safeguards accordingly.
How We Use Your Information
- Provide terrain analysis and AI assessment features
- Authenticate your account and manage subscriptions
- Improve application performance and features
- Process billing and subscriptions (via Helcim)
- Respond to support requests
- Comply with legal obligations
We do not sell, rent, or trade your personal information.
Third-Party Services
| Service | Role | Data Shared |
|---|---|---|
| MapTiler | Map tiles and terrain data | Map viewport coordinates |
| Anthropic (Claude API) | AI terrain assessments | Pin coordinates, terrain and weather data |
| Helcim | Payment processing | Billing info (no card numbers stored by us) |
| Turso | Database hosting | Account data, usage records |
| Netlify | Application hosting | Server logs, IP addresses |
| Resend | Transactional email | Email address |
| Sentry | Error monitoring | Error context (no PII) |
| Plausible | Privacy-friendly analytics | No cookies, no personal data |
Analytics
We use Plausible Analytics, a privacy-friendly analytics service. Plausible does not use cookies, does not collect personal information, and does not track you across websites. IP addresses are pseudonymized (last octet removed). No cookie consent banner is required because no tracking cookies are set.
We do not use Google Analytics or any other cookie-based tracking service.
Data Retention
- Email and account data: retained until account deletion, plus 30 days for processing
- Pin drop locations: auto-deleted after 24 months of inactivity; manually deletable at any time
- AI assessment history: 12 months, then auto-deleted
- Subscription/billing records: 7 years (CRA tax compliance)
- Usage logs (IP, timestamps): 90 days, then deleted
- Database backups: up to 30 days following deletion
Your Rights
Under Canadian privacy law (PIPEDA), you have the right to:
- Access your personal information
- Challenge the accuracy of your data and request corrections
- Understand how your data is used in automated decisions
- Request deletion of your personal data (except tax records)
- Withdraw consent for optional data processing
To exercise any of these rights, email support@backcountryaspect.com with “Data Subject Request” in the subject line. We will respond within 30 days.
Data Security
All data is encrypted in transit using TLS. Database storage is encrypted at rest. Access controls follow the principle of least privilege. Session tokens are short-lived.
In the event of a data breach that may cause significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.
International Data Transfers
Your data may be processed on servers outside Canada by our service providers (Turso, Netlify, Anthropic). These providers are required to maintain data protections equivalent to Canadian standards.
Changes to This Policy
Material changes to this policy will be communicated via email or in-app notification before they take effect. The effective date at the top of this page reflects the most recent update.
Contact
Privacy inquiries: support@backcountryaspect.com
General support: help@backcountryaspect.com