What we collect
Pathfinder is offline-first. The vast majority of your data — waypoints, routes, trips, vehicle profiles, and downloaded map areas — lives only on your device and is never transmitted to our servers unless you create an account and enable sync.
- Anonymous use: A random device UUID is generated and stored locally in your browser's IndexedDB. We never see it.
- Account creation: When you link an account, we collect your email address (for magic-link sign-in only). No password is stored.
- Synced data (premium): If you subscribe and enable sync, your waypoints, routes, trips, and vehicle profiles are encrypted in transit and stored in our database so you can access them from multiple devices.
- Payment data: We do not handle card numbers. Payments are processed entirely by Stripe. We store only your Stripe customer ID and subscription status.
How we use your data
- To authenticate you (email magic link)
- To sync your trip data across your devices (premium subscribers only)
- To determine your subscription tier and enforce feature limits
- We do not sell your data, show you ads, or share your data with third parties for marketing
Third-party processors
- Supabase — database and authentication infrastructure. Your account email and synced trip data are stored on Supabase's servers in the United States.
- Stripe — payment processing. Stripe handles all card data under their own PCI-compliant infrastructure. We receive only subscription status events via webhook.
- OpenAI — optional AI assistant. If you use the AI trail assistant, your query and active map context are sent to OpenAI's API. We do not store these exchanges.
- Vercel — application hosting. Request logs (IP, URL, timestamp) are retained for up to 30 days for debugging purposes.
Data retention and deletion
You may delete your account and all associated synced data at any time from the Settings panel inside the app, or by emailing us at hello@pathfinderapp.com. Deletion is permanent and irreversible. Local data stored in your browser is not affected by account deletion — you can clear it from your browser settings.
Cookies and local storage
We use a single session cookie (set by Supabase) to keep you signed in. We do not use tracking cookies or third-party analytics cookies. If you use Pathfinder anonymously, no cookies are set.
Changes to this policy
We will update this page and change the "Last updated" date when the policy changes. Continued use of Pathfinder after a material change constitutes acceptance.