Privacy Policy

1. Information We Collect

NABE-Fit (“we”, “our”, or “us”) collects information you provide when using our mobile application and services, including:

• Account Information: Name, email address, username, and profile photo when you register or sign in via Google or Apple.
• Fitness & Activity Data: Hiking routes, GPS tracks, elevation data, distance, duration, pace, calories burned, and heart rate data recorded during your activities.
• Device Information: Device model, operating system version, and app usage statistics.
• Location Data: GPS coordinates during active and background hiking sessions for real-time tracking, route recording, and live location sharing with emergency contacts. We request fine location access for accurate tracking, and background location access so you can share your live location even when the app is not in the foreground. Background location is only used during your active tracking sessions, never when idle.
• Photos & Media: When you take a profile photo or upload images, we access your camera and photo library only after you explicitly grant permission.

All location and permission requests are made only when needed for specific features. You can manage or revoke these permissions at any time through your device settings.

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our hiking and fitness tracking services.
• Display your activity statistics, achievements, and badges.
• Enable community features such as groups, challenges, duels, and leaderboards.
• Send push notifications about challenges, achievements, safety alerts, and community updates.
• Share your live location with emergency contacts during active tracking sessions, only with your explicit consent.
• Analyze usage patterns to improve app performance and user experience via Google Analytics (opt-out available in device settings).
• Ensure the security and integrity of our platform.

3. Data Sharing & Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• With Your Consent: When you choose to share activity data with community groups or challenges.
• Service Providers: With trusted third-party services that help us operate our platform (e.g., Google Cloud Platform for hosting and storage).
• Legal Requirements: If required by law or to protect our rights and the safety of our users.

4. Data Storage & Security

Your data is stored on Google Cloud Platform (GCP) servers located in the asia-southeast1 region (Singapore). We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication via OAuth 2.0 and bcrypt password hashing.
• Regular security reviews and access controls.

5. Data Retention

We retain your personal data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Activity logs are retained indefinitely to maintain the integrity of community features (leaderboards, challenges), but personal identifiers can be anonymized upon request.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time.

To exercise these rights, contact us at the email below.

7. Third-Party Services

Our app integrates with the following third-party services, each subject to their own privacy policies:

• Google OAuth & Apple Sign-In: Used for authentication. When you sign in with Google or Apple, their respective privacy policies apply to the authentication process.
• Google Cloud Platform (GCP): Hosting and storage infrastructure located in asia-southeast1 (Singapore).
• Firebase Cloud Messaging (FCM): Push notification delivery.
• Google Analytics: Anonymous app usage analytics. You can opt out in your device settings.
• MapLibre GL: Offline map rendering — no data is sent to external map servers.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or through the app. Continued use of NABE-Fit after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, please contact us:

To request deletion of your account and all associated data, visit our Membership Removal page.