Who we are
Pavement's End is an app for Android and iPhone for finding camps, planning trips, recording drives, hikes and rides, and travelling with friends. It is run by the Griterra team ("we", "us"), and it signs in with a Griterra account, so the Griterra privacy policy also applies to that account. This page covers what Pavement's End itself collects and why. Questions about this policy or your data: burritostand@gmail.com.
What we collect
- Your account. If you sign in with Google, we receive your Google account ID, email address, name and profile picture. If you sign up with email, we store your email, display name and a hashed version of your password (never the password itself), and email you sign-in codes. You can also sign in by approving a code from the Griterra app on another device. When you sign in we record the IP address and a label for the device, to protect your account.
- Location, when you allow it. The app uses your location on your phone to show where you are and how far things are. It sends your location to our server when you search near you, download the camps around you, or get directions, and our routing provider receives the start, end and stops of each leg it draws. If you allow location "Always", the app also uses it in the background, but only:
- while you are recording a drive, hike or ride;
- while you are navigating, including on CarPlay and Android Auto;
- while you are in a drive group: your position and heading go to the group about every 30 seconds until you leave;
- on the dates of a trip you are on (from the day before to the day after): your latest position goes to the trip's members about every 15 minutes, so the group can find each other. This is on by default; you can turn it off for one trip or for your phone, and turning it off deletes the shared position. Without "Always", it is sent only when you open the app.
- Recordings. A drive, hike or ride you record is saved on your phone and then uploaded to your account: its GPS track, times, name, type, the trip it belongs to, and the notes and photos you add to it. While you record, the app can read your photo library to place photos you took during the recording on the track, and those photos are uploaded with it. The track is also sent to the US Geological Survey's elevation service to work out how much you climbed.
- Imports. If you import an export file from another app (such as AllTrails, Strava, Garmin, Gaia, Komoot or onX) or a GPX, TCX, FIT, KML or KMZ file, we upload the file, read the activities and photos you chose from it, and delete the uploaded file once it is read. We never connect to your account with those services.
- Trips you plan together. A trip's name, start point, stops, dates, votes, gear, to-dos, packing and change history are stored so everyone on the trip sees them. If you invite someone by email, we add them if they have an account, or email them the invitation. Inviting by phone number opens your own Messages app; we don't receive the number.
- Chat. Messages, reactions and photos you post in a trip or drive group chat are stored so the other members can read them. GIF searches go through our server to Giphy.
- Contacts. To add a friend, you can search your phone's contacts by name. The search happens on your phone; only the email address of the person you pick is sent to us. If they don't have an account yet, we keep that email and send them one invitation.
- Spots, reviews and other things you add. Spots you add (name, type, location, description, amenities, access, price and permit details), your edits to spots (we keep a history of who changed what), photos, trail reports, reviews, ratings, comments, flags and "still here" check-ins.
- Photos you add to spots are stored as you chose them. A photo can carry the place and time it was taken in its own data, so treat a spot photo as sharing where it was taken.
- Saved camps, settings and searches. Camps you save, a few settings (such as hiding your times from leaderboards), and the words and places you search for.
- Notifications. If you allow notifications, we store your device's push token (sent through Apple or Google's Firebase) so we can tell you about messages, invites, trip changes and your group. Signing out removes it.
- Crash reports. If the app hits an error it can't recover from, it sends us a report, at once or the next time it opens: the error message and where in the app's code it happened, the screen of the app you were on (such as a camp or trip page, never the words you searched for), the app's version, build and update, whether it is an iPhone or Android, and when it happened. If you are signed in, the report carries your account ID so we can look into the problem; it never includes your location, messages, photos or anything you typed. We use crash reports only to find and fix bugs.
- Camera and microphone. The camera is used only to take photos you choose to add. The microphone is used only for voice commands, which are recognised on your phone and never recorded or sent.
We do not use advertising, advertising IDs, analytics or tracking, and we do not use outside crash-reporting services: crash reports go only to our own servers. We do not sell or rent your information. Routes you plan on your own and your home location stay on your phone unless you share them.
How we use it
Only to run Pavement's End: signing you in and keeping your account secure, finding camps and places near you and along your route, giving directions, keeping your recordings, trips and saved camps, letting the people you travel with plan, chat and find each other, showing what people add to other users, sending the notifications you asked for, and letting you know about app updates.
Who can see what
- Everyone using the app: spots, spot photos and their edit history (showing which account made each change), trail reports, reviews, ratings and comments. If you publish a ride or appear on a segment leaderboard, other users see your display name, picture and times; you can hide yourself from leaderboards.
- People on your trip or in your drive group: the trip's plan, chat, the recordings attached to the trip, and your position as described above.
- People you tag on a recording see that recording.
- Anyone with a link: when you share a trip or route, a page at pavementsend.com shows its name, start point, stops, dates, line and how many people are planning it, to anyone who has the link. Stop sharing to take it down. Uploaded photos are stored at long, hard-to-guess web addresses that open for anyone who has the exact address.
- Only you: your saved camps, settings, searches and recordings you haven't attached to a trip or shared.
Where it is stored and who processes it
Our servers, databases and file storage run on Google Cloud in the United States. These services process data for us or see parts of it to make the app work:
- Google: cloud hosting, databases, storage and our server logs, including crash reports; Google Sign-In if you use it; Firebase Cloud Messaging for Android notifications.
- Apple: notifications on iPhone, and Sign in with Apple where offered.
- Our email provider: the sign-in codes and invitations we send.
- Our routing provider: the start, end and stops of the route legs it draws.
- Your phone's own location and place-search services (Google on Android, Apple on iPhone).
- Map and data providers your phone contacts directly while you look at the map: OpenFreeMap, Esri, the US Geological Survey, the Bureau of Land Management, the US Forest Service, NOAA, state wildlife agencies, the OpenStreetMap Overpass service and Wikimedia Commons. They see the map area you are viewing and your device's network address.
- Weather and conditions: the National Weather Service, Open-Meteo, NOAA Tides and Currents, and the National Interagency Fire Center receive the location you are checking.
- Giphy, through our server, sees your GIF searches, not who you are.
- Alpha Cephei hosts the offline voice model the app downloads once; no audio is sent.
Some gear suggestions link to Amazon. As an Amazon Associate we may earn from qualifying purchases; Amazon sees that you came from Pavement's End only if you follow such a link.
Children
Pavement's End is intended for adults (18 and over). We do not knowingly let children create accounts. If you believe a child has signed up, contact us and we will delete the account.
How long we keep data
- Your account and what you add are kept until you delete them or delete your account.
- A trip-member position is kept for 6 hours. A drive-group position is shown for 15 minutes and is cleared when you leave the group.
- Uploaded import files are deleted as soon as they are read.
- Crash reports are kept for 30 days.
- Sign-in sessions stay valid until you sign out, so the app keeps working offline; trusted-device records for email sign-in expire after 30 days.
Your choices and deleting your data
In Pavement's End you can delete recordings, spots and photos you added, stop sharing a trip or route, leave a trip or drive group, turn off trip location sharing, hide yourself from leaderboards, remove saved camps and sign out. You can turn off location, contacts, photos, camera, microphone and notification access in your phone's settings at any time.
To delete your account, see Delete your Griterra account, or email us. Deleting your account deletes your recordings, imports, trips you own, shared routes, saved camps, photos, chat and invitations, notification tokens and positions. Spots, edits, reviews and trail reports you added stay available to other users with the link to your account removed; email us if you want those removed too. Copies held by our trip co-pilot service (older trip-chat messages and notification records) are deleted within 30 days. You can also ask us for a copy of your data, or to correct it.
Security
All traffic between the app and our servers is encrypted with HTTPS/TLS, and release builds refuse to connect to a server that isn't. Passwords are hashed, and your sign-in is kept in your phone's secure storage. No system is perfectly secure.
Changes
We will post changes to this policy here with a new date, and tell you in the app if a change is significant.