Privacy Policy

We only collect what the app needs to work:

• Account: your email address and an encrypted password, used to sign you in.
• Home location: if you choose to set one — either coordinates from your device's location or a place you search for — so we can rank hills near you. This is optional and you can clear it at any time.
• Preferences: your display name, favourite sports, preferred regions and saved spots.
• Notification token: if you turn on condition alerts, we store the anonymous push token your device's operating system issues to us, so we can send that device a notification. It contains no personal information and we delete it the moment you turn alerts off.

Condition alerts are off until you switch them on, and we only ask your device for notification permission at the moment you do. We send a notification only when a hill you have chosen to watch rises above the score threshold you set — never for marketing.

You can turn alerts off at any time from Profile → Condition alerts, which deletes the stored token for that device, or revoke permission in your device settings.

So the app still works in the hills with no signal, we keep a small copy of the last hill ranking you viewed in your device's local storage. It holds only public hill and forecast information — no account details — and is cleared when you sign out.

Your data is used solely to provide the service: authenticating your account, personalising suitability scores and recommendations, filtering hills by distance from your home location, and remembering your saved spots and settings. We do not sell your data or use it for third-party advertising.

Location access is only requested when you tap "Use my current location" or sort by "Nearest". We use it to compute distances to hills and show nearby suggestions. We store only the coordinates or place label you save as your home location, and only until you change or delete it. You can deny or revoke location permission in your device settings at any time; the app remains fully usable without it.

We rely on a small number of trusted providers:

• Supabase — authentication and database storage of your account and preferences.
• Vercel — hosting and privacy-friendly, aggregate usage analytics.
• Open-Meteo — weather forecasts and place search. Place searches send the text you type; they are not linked to your identity.
• Apple and Google — only if you enable condition alerts. Delivering a notification requires passing it through Apple's or Google's push service, which is what actually reaches your device.

We keep your data for as long as your account exists. You can permanently delete your account and all associated data at any time from Profile → Delete account. Deletion is immediate and irreversible.

Passwords are hashed, data is encrypted in transit over HTTPS, and access to your records is restricted by row-level security so you can only access your own data.

FindMyHill is not directed at children under 13, and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Questions about your privacy? Email us at privacy@findmyhill.app.