Privacy Policy

At Outmap Technology Ltd. ("Outmap," "we," "us," or "our"), we build mobile applications for outdoor navigation. We are committed to protecting your privacy while leveraging data intelligence to create safer, more accurate mapping experiences. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile applications and our website at https://outmap.pro (collectively, the "Services").

1. Data Protection Officer and International Transfers

For the purposes of Quebec's Act respecting the protection of personal information in the private sector (Law 25), the General Data Protection Regulation (GDPR), and other global privacy frameworks, our Data Protection Officer can be reached at privacy@outmap.pro.

Your Personal Information may be transferred to, stored, and processed in jurisdictions outside of your home province, state, or country (including across Canada and the United States) where our cloud hosting providers and service providers operate. By using the Services, you acknowledge that your data may be subject to the access laws of these foreign jurisdictions.

2. Information We Collect and Specific Location Usage

We limit our data collection to what is required to operate Outmap effectively and safely.

A. Information You Provide Directly

• Account Data: Name, email address, password, and profile preferences.
• User Content: Routes, waypoints, photos, reviews, and comments that you actively upload to the platform.

B. Location Data and Device Telemetry

• Precise Location Data: We collect precise location data (GPS coordinates) only when you explicitly enable location-based features within the app or authorize its import from a connected service such as Garmin Connect. This includes displaying your current position on a map, real-world navigation, or recording an outdoor activity.
• Background Location: If you initiate an activity recording (e.g., tracking a backcountry ski tour or mountain bike ride), Outmap will collect precise location data while the application is in the background or when your device screen is locked. This background collection ceases immediately once you stop and save the recording. We do not use background location data for advertising purposes.
• Usage Telemetry: We automatically collect data regarding how you interact with our app, including map layers viewed, feature engagement, performance logs, and device hardware specifications.

3. What We Do Not Do

To establish clear boundaries regarding your data, we explicitly state that:

• We do not sell your personal identity or personal location history to third-party data brokers.
• We do not share your precise location data with third parties for cross-context behavioral advertising.
• We do not collect or store your raw financial account or payment card numbers. All transactions are handled securely via third-party platforms (Apple App Store, Google Play Store, Stripe, or RevenueCat).

4. How We Use Data and Machine Learning Analytics

We use the information we collect to operate, secure, and innovate our platform. Specifically, we use data to:

• Deliver core mapping, routing, offline navigation, and tracking features.
• Manage user subscriptions, account verification, and customer support.
• Measure user acquisition campaigns and optimize marketing performance via analytical indicators on third-party platforms such as Meta and Google.
• Train Predictive Models: We utilize de-identified, aggregated, and anonymized geospatial patterns to optimize our proprietary software. This allows us to develop advanced consumer features, including automated terrain classification, trail network popularity indices, and safety/planning insights. We do not use individual personal profiles to execute automated decision-making that carries legal consequences for our users.

5. Aggregated and Anonymized Data Retention

We may de-identify or anonymize your Personal Information so that it can no longer be reasonably linked to you, either directly or indirectly, through any likely technical means. Under global privacy frameworks, true anonymized data falls outside the scope of personal data regulation. Outmap retains and utilizes this aggregated, anonymized dataset indefinitely to maintain platform continuity, enhance global map layers, and support long-term feature development.

6. Data Retention and Your Rights to Erasure

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with corporate accounting and legal preservation obligations.

Depending on your jurisdiction (including Quebec, California, and the European Economic Area), you may possess specific rights regarding your data, including the right to access, correct, port, restrict, or request the permanent deletion of your Personal Information.

• Account Deletion: Upon receiving a verified account deletion request, all private Personal Information associated with your profile will be permanently purged from our active systems.
• Public Platform Exceptions: If you choose to publish a Guidebook, route trail network, community review, or photo to Outmap’s public platform, that content is deliberately integrated into our shared community directory. To preserve navigation safety and system integrity for other users, published platform content will remain visible after account deletion. However, to satisfy your privacy rights completely, we will permanently scrub all personal identifiers, names, and profile attribution from that content, reassigning the asset to the anonymous "Outmap Community."

7. Security Safeguards

We maintain robust administrative, technical, and physical security measures designed to protect your data against unauthorized access, loss, alteration, or disclosure. These safeguards include data encryption at rest and in transit, restricted internal access to location databases, and continuous software vulnerability monitoring.

8. Updates to this Policy

We may modify this Privacy Policy to reflect changing regulatory requirements or operational advancements. We will notify you of material changes to this Privacy Policy by email and obtain additional consent where required.

9. Garmin Connect Data

If you choose to connect Garmin Connect, we receive the information you authorize Garmin to provide through its Activity API and historical-activity functionality. This may include your Garmin user identifier, connection permissions, access and refresh tokens, activity identifiers and names, activity types, dates and times, GPS routes, distance, duration, elevation, speed, device model, and fitness or sensor measurements included in an activity, such as heart rate. We do not receive your Garmin password.

We use this information to maintain your connection; import, display, organize, and synchronize activities across your Outmap devices; provide route statistics and available exports or sharing features; prevent duplicates; and investigate import errors.

Only Garmin-derived routes you make public may contribute to community heatmaps; private content is not used. These Outmap-generated visualizations include an attribution explaining that insights are derived in part from Garmin device-sourced data.

We use third-party service providers to store and process Garmin data for activity imports, synchronization, mapping, usage analytics, and technical support. We use Amplitude for usage analytics, including events that may contain imported activity names and Outmap item identifiers, and Sentry for error monitoring and technical diagnostics. If you choose to publish, share, or export an activity, the information included may also be received by other people or services.

We use data to provide and improve our Services through statistical analysis. We plan to introduce artificial intelligence and machine learning through third-party providers, including OpenAI, to improve mapping, route recommendations, and planning insights. These uses may involve Garmin activities and derived data, depending on the feature, your privacy settings, and applicable permissions.

Garmin connection credentials and imported activities are stored in our application database and may be synchronized to local storage on your authorized devices. Raw import payloads are held privately during processing and retries; successfully processed raw payloads are deleted after processing. Failed imports, diagnostic records, cached outputs, and backups may remain for recovery, support, security, or applicable legal-retention needs, subject to our retention policy.

Disconnecting Garmin Connect removes connection credentials from your active Outmap profile and stops future synchronization. Activities already imported remain until you delete them or delete your Outmap account. These deletion terms also apply to Garmin-derived activity records you have published; they are not subject to the general permanent-public-content exception above. Offline copies, backups, and previously generated heatmaps or cached images may require additional time to reflect deletion. Copies exported to independent recipients may remain outside our control. Deleting an Outmap item does not delete the original Garmin Connect activity.

You can disconnect through Outmap’s Integrations settings or revoke access in Garmin Connect. Use the item controls to delete imported activities, or contact privacy@outmap.pro for account deletion, access, correction, or other privacy requests.

‍