Privacy Policy

Who we are

PathStamp is a mobile app that gamifies outdoor exploration through GPS-based stamp collecting. It is developed and operated by Cynnau Ltd, a company registered in England and Wales (company number 17199107), with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. Cynnau Ltd is the data controller for personal data processed through PathStamp. If you have any questions about this policy, contact us at hello@pathstamp.com.

What data we collect

We collect only what is needed to run the app:

• Account data — your email address and the username you choose when you register.
• Profile data — your selected home country.
• Marketing preferences — whether you opted in to receive PathStamp updates, launch news, and occasional offers by email.
• Check-in and stamp data — the locations you visit, the timestamps of those visits, and the collections those visits contribute to. This is the core record of your progress in the app.
• Location data — your GPS coordinates are accessed on your device at the moment you tap the check-in button. We do not track your location continuously or in the background. Most location matching happens on your device against bundled boundary data; your coordinates are also reverse-geocoded once per check-in using your device platform's geocoding service (Apple or Google) to determine the country you are in.
• Subscription status — whether you hold an active Ranger subscription. We do not store your payment card details; these are handled entirely by Apple or Google.
• Website shop signups — if you use the "Get notified" form in our online shop, we store the email address you provide and the page you signed up from. This is separate from your app account.

How we use your data

• To create and manage your account.
• To record your stamp and badge progress and display it to you.
• To determine which stamps you earn when you check in at a location.
• To calculate your XP, level, and badge achievements.
• To manage your Ranger subscription and apply any associated benefits.
• To send product updates or occasional offers if you explicitly opt in to marketing emails.

We do not sell your data, use it for advertising, or share it with third parties for their own purposes.

Third-party services

PathStamp uses the following services to operate:

• Supabase — our database and authentication provider. Your account and stamp data is stored on Supabase infrastructure. Supabase is hosted on AWS in the EU region. See supabase.com/privacy.
• RevenueCat — manages Ranger subscription status and processes subscription events from Apple and Google. See revenuecat.com/privacy.
• Apple / Google — if you purchase a Ranger subscription, payment is processed by Apple (via the App Store) or Google (via Google Play). Their privacy policies govern that transaction. Their device geocoding services are also used to determine your country at the moment you check in.
• Netlify — hosts this website and processes standard web server logs (such as IP addresses) when you visit it. See netlify.com/privacy.

Offline data

If you check in while offline, the check-in is stored temporarily on your device using local storage. It is uploaded to our servers automatically when your device reconnects to the internet. No third party has access to this locally stored data.

Data retention

We keep your account and stamp data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law. You can delete your account in the app or by email — see Delete your account for both methods.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict how we process your data.
• Receive a copy of your data in a portable format.

To exercise any of these rights, email hello@pathstamp.com. We will respond within 30 days. You can also delete your account and all of its data yourself, directly in the app — see Delete your account.

Children

PathStamp is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email. The date at the top of this page reflects the most recent update.

Contact

Questions about your privacy? Email hello@pathstamp.com.