Backcountry CO
Privacy policy
Effective date: October 12, 2026
Backcountry CO ("the app") is a personal, invitation-only iOS app operated by Josh Kinabrew ("we"). It does not run ads, does not use analytics or tracking SDKs, and does not sell or share personal data with anyone. This page describes the little data the app does handle.
What the app collects
| Data | Why | Where it goes |
|---|---|---|
| Location (precise) | To show your position on the map, record GPS tracks you start, and attach coordinates to pins you create. | Stays on your device unless you save a pin or track, in which case it is stored on our server under your account so your other devices can see it. With "Always" permission, location is used only while a track recording is running. |
| Photos | Only photos you choose to attach to a pin, from the camera or your library. | Stored on your device and on our server with the pin. |
| Notes, pins, tracks, imported GPX files | Content you create or import in the app. | Stored on your device and on our server under your account. |
| Account token | A random token we issue you identifies your account. We store a hashed copy. No email, password or name is required. | Our server. |
| Map and weather requests | The app asks our server for map tiles for the area you are viewing and, when you open the weather card, a forecast for a coordinate. | Our server. Third-party map and weather sources (USGS, Open-Meteo, Weather Underground, OpenStreetMap/Nominatim for place search) are called by our server on your behalf, so they see our server, not your device. |
Where data is stored
Our server runs on Cloudflare (Workers, D1 and R2) in the United States. Data is transmitted over HTTPS only. Standard Cloudflare request logs (IP address, URL, timestamp) may be retained briefly for operations and debugging.
Who can see your data
Only you, through your own account token, and the operator for maintenance. Your pins, notes, photos and tracks are never shown to other users of the app. We do not share personal data with third parties and never sell it.
Your choices
- Location access can be changed at any time in iOS Settings; the map works without it.
- You can delete pins, notes, photos and tracks in the app; deletions sync to the server.
- To delete your whole account and all server data, email josh@invictusarmory.com and it will be removed within 30 days.
Children
The app is not directed at children under 13 and we do not knowingly collect data from them.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Josh Kinabrew, josh@invictusarmory.com