Privacy Policy

The short version

AllTraxx records GPS rides in the backcountry. There are no accounts and no sign-in. Your rides are recorded on your own phone and stay there. They leave only when you export them, share them, or turn on one setting that is off by default. We do not sell your personal information. We do not share it for advertising. We show no ads, and the app uses no third-party tracking. This website uses Google Analytics to count visits.

Who we are

AllTraxx Technologies Inc., a federal (CBCA) corporation, number 1808963-9, registered office in British Columbia, makes AllTraxx and is the controller of the personal information described here.

• Privacy contact: support@alltraxx.ca
• Privacy officer: Founder, support@alltraxx.ca

We have not appointed a Data Protection Officer, because we are not required to. We have not appointed an EU or UK representative. If we begin to offer AllTraxx in the EU or the UK, we will appoint one and name it here.

What the app stores on your phone

• GPS track points, with time, elevation, speed and accuracy.
• Saved pins, waypoints and your map and ride settings.
• GPX and .traxx files that you import or export.
• Pairing state for your AllTraxx box, including its Bluetooth address.
• Photos that you attach to a support report.

All of this stays on your phone. We cannot read it.

Location

The app uses your phone's location to show your position and to record rides. It keeps recording while the screen is off, because a ride can last hours. Android shows a notification while a recording runs. You can refuse or revoke location permission in your phone settings. Recording does not work without it.

Recorded tracks stay on your phone. We do not receive them unless you send them.

Bluetooth

The app uses Bluetooth to talk to your own AllTraxx box. It does not use Bluetooth to advertise to you or to track you across other services.

Group Ride

In a Group Ride, your AllTraxx box sends your position to the other riders' boxes over LoRa radio. The other riders see you on their maps. Positions go from box to box over radio. Other radios on the same channel can receive it. It is not encrypted. No server is involved and we do not receive these positions. Turn off Group Ride to stop sending your position.

Maps and app updates

The app works offline. When it has a connection it may download map tiles and app updates:

• Map tiles come from Esri, OpenFreeMap, EOX, and our own storage on Cloudflare. A tile request tells that service which map square you asked for and your IP address, in the same way any web request does.
• App updates come over the air from Expo EAS.

Tiles are cached on your phone so the map works without a connection later.

Diagnostics and crash reports

Release builds send reports to two services so we can find and fix failures:

• Sentry receives crash and error reports (the error, the code path, and a trail of app events), a per-session health record so we can compare releases, and a start-up timing sample on about one app start in fifty. Sentry does not store your IP address or the city it comes from.
• Our diagnostics service on Cloudflare receives the diagnostics bundle (automatic, at most once an hour) and feedback reports you send. The bundle holds the app's diagnostic records since the last upload (the first upload covers up to 7 days): app events, Bluetooth sessions with your box, box samples, battery readings, firmware version, GPS quality and update attempts. This setting is on when you install the app. Turn off Automatic diagnostics in Settings to stop it. Our diagnostics service sees your connection's IP address while an upload is in progress, as any web request does. To stop repeated uploads it saves a salted one-way code made from the address, not the address itself. Server logs are kept for up to 7 days.

These reports carry no name, email or account. Each report carries your phone model, operating system version, a tag that changes every time you launch the app, and your box's ID, which we can match to your order. Before app version 0.9.41, reports sent during a Group Ride could also carry the box IDs and initials of the other riders in your group. From 0.9.41, automatic reports carry only your own box's ID. A support report you choose to send can still include the box IDs of riders in your Group Ride. One exception: a crash caught by Sentry's own native handler can carry an install ID that Sentry creates on the phone, and that ID can stay the same from one app launch to the next. App update checks send Expo an install ID that Expo creates.

Founders Edition. Founders Edition units are part of our test program, so the app sends diagnostic reports automatically. They cover errors, battery, GPS signal quality, radio and Bluetooth health, and speed. They carry no location, no route and no place name. They are not tied to an account, but they carry your box's ID, which we can match to your order so we can fix your box. Turn automatic diagnostics off in Settings.

Crash reports go through Sentry. Coordinates, track names, waypoint and pin names, GPX file names, rider names, your device name, and your box's Bluetooth address are removed before a report leaves the phone. Screenshots and screen recording are switched off.

One limit, stated plainly. When the app crashes at the native level, Sentry's own handler builds the report inside the app before AllTraxx code can filter it. For those reports we rely on configuration: personal data collection is off, the user record is cleared, and no screenshot or screen contents are ever attached.

Share ride routes. One setting, in Settings, sends your route with a diagnostic report, on Wi-Fi only. It is a choice you make. Turn it off in the same place to stop sending routes. Turning it off does not affect anything else in the app.

Support reports. When you ask for support you can send a diagnostic bundle. It can hold your message, app events, Bluetooth sessions, box samples, battery readings, firmware version, GPS quality, update attempts, and any photo you attach. It is sent only when you choose to send it.

Why we may process personal information

For riders in the EEA or the UK, our legal bases are:

• Running the app you installed, including recording and maps: performance of a contract, Article 6(1)(b).
• Crash reports, app-health records, start-up timings and automatic diagnostics: our legitimate interest in a working app, Article 6(1)(f). You can turn automatic diagnostics off in Settings.
• Sharing your route with a diagnostic report, and sending a support bundle: your consent, Article 6(1)(a). You can withdraw consent at any time by turning the setting off or by not sending a bundle.

How long we keep things

• Data on your phone stays until you delete it, or until you uninstall the app. Uninstalling removes the app's on-device data. Files you exported stay where you put them.
• Automatic diagnostics are deleted after 30 days.
• Feedback reports and support bundles, with any photos, are deleted after 90 days.
• Crash reports are kept for up to 12 months, then deleted.

Deleting your data

You delete ride data yourself, in the app. Nothing else holds a copy unless you sent it.

To have your diagnostic reports deleted, write to support@alltraxx.ca with your box's serial number. We will delete the reports tied to that box. To stop future reports, turn off Automatic diagnostics in Settings.

Security

Reports travel over encrypted connections. We hold them in access-controlled our and Sentry's accounts. Only people who need them can read them. No system is perfectly secure, and we do not claim otherwise.

Children

AllTraxx is for adults who ride off-road vehicles. It is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us data, write to support@alltraxx.ca and we will delete it.

Your rights

Canada. Under PIPEDA you can ask what personal information we hold about you, ask us to correct it, and challenge how we handle it. Write to support@alltraxx.ca. If our answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada.

California. We collect the categories described above, for the purposes described above. Precise geolocation is sensitive personal information under the CPRA. We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information beyond the purposes the CPRA permits, so there is nothing to limit. You have the right to know, delete, and correct, and the right not to be treated differently for using those rights. Write to support@alltraxx.ca.

EEA and UK. You have the right to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. You can complain to your national data protection authority.

Transfers outside Canada

Our diagnostics service runs on Cloudflare, and Sentry and Expo run their own infrastructure. Reports may be processed in the United States and other countries. We use contractual protections with these providers.

Where a service does not say where it processes data, the country shown is where the company is based. Data held in the US can be accessed by US authorities under US law.

App store labels

The privacy labels on the App Store and the Data safety section on Google Play describe the same practices as this policy. If you find a difference, tell us and we will correct it.

Changes to this policy

We post changes on this page and move the effective date. We keep the change summary below so you can see what moved.

Contact

AllTraxx Technologies Inc., Canada
support@alltraxx.ca

Change summary, 2026-09-28

• Added the company identity, a privacy email, and a statement that no DPO or EU/UK representative is appointed.
• Named the services involved: Esri, OpenFreeMap, Cloudflare R2, Sentry, Expo EAS, and our diagnostics service.
• Added a Group Ride section: positions travel rider to rider over LoRa radio, never through a server.
• Described the "Share ride routes" setting as a rider-controlled choice, with where to turn it off.
• Said what the random diagnostics tag is: random per launch, plus phone model and OS version.
• Added retention periods, deletion, security, children, legal bases, international transfers, and rights sections for Canada, California, and the EEA and UK.
• Added a line saying the store privacy labels match this policy.
• Added photos as support attachments.
• Removed the internal release-gate note and the "future sharing flows" wording.