This Privacy Policy explains how SteepMap (“the App”, “we”, “us”) collects, uses, and protects your personal data when you use the mobile application and related services. The App lets you discover, create, and share outdoor tours and routes on a map, and interact with other users.
The data controller is Ettore Rasca, operating as SteepMap. If you have any questions about this policy or your data, contact the SteepMap Support Team at alpinemapapp@gmail.com.
You sign in using Google Sign-In (OAuth). When you do, we receive from Google and store:
You may add or edit profile details, which we store:
With your permission, the App accesses your device’s location to center the map on your position and help you find nearby tours. You can grant or revoke this permission at any time in your device settings. Location is used at the moment you request it and is not continuously tracked in the background.
When you use the App, our service providers automatically process limited technical data needed to deliver the service, such as IP address, device/browser type, and requests for map tiles. This is standard for any networked app.
Where the EU General Data Protection Regulation applies, we rely on the following legal bases:
We do not sell your personal data and we do not share it with third parties for advertising. We use the following service providers (data processors) to run the App:
| Provider | Purpose | Data involved |
|---|---|---|
| Google (Sign-In) | Authentication | Email, name, profile picture, account ID |
| Supabase | Backend: authentication, database, file storage | Account, profile, tour content, photos |
| MapTiler | Map tiles & styles | IP address, map/location requests |
| Cloudflare | Content delivery (map overlay data) | IP address, technical request data |
Public content you choose to publish — such as tours, your public profile, display name, and profile photo — is visible to other users of the App. Please do not include information in public content that you do not want others to see.
We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the service.
We keep your account and content for as long as your account is active. If you delete specific content (e.g. a tour), it is removed from public view. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.
Depending on your location, you may have the right to:
To exercise any of these rights, email alpinemapapp@gmail.com.
You can request deletion of your account and associated personal data at any time. See our Account & Data Deletion page, or email alpinemapapp@gmail.com from the address associated with your account. We will process the request and confirm once completed.
The App is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Data is transmitted over encrypted connections (HTTPS/TLS) and stored with our backend provider (Supabase) using access controls that restrict data to the appropriate account. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
Our providers may process and store data on servers located in the European Union and other countries. Where data is transferred internationally, appropriate safeguards are applied as required by law.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated within the App.
Questions or requests regarding this policy or your personal data:
the SteepMap Support Team
alpinemapapp@gmail.com