Privacy Policy

Fjord Trail · Last updated 9 August 2026

Fjord Trail is a hiking app for trails in Norway. This policy explains what personal data the app collects, why, and what control you have over it.

Who is responsible

Fjord Trail is run by Ali Pishvaei, Norway. Contact: contact@fjordtrail.no. The app and its data are covered by the GDPR and the Norwegian Personal Data Act.

You can use Fjord Trail without an account

Browsing trails, viewing maps and recording an activity all work without signing in. Recordings you make without an account stay on your phone. An account is only needed to suggest edits, publish a trail, contribute a recording to the catalog or share your position live.

What we collect

Data	Why	Legal basis
Account details: email address, name, city, chosen activities, profile picture. If you sign in with Apple or Google we store the identifier they give us, and the email address they pass on (which may be Apple's private relay address).	To create and run your account.	Performance of a contract (GDPR art. 6(1)(b)).
Technical and security data: the IP address you sign in from is stored with your login session, and is used to keep sign-in secure and rate-limit abuse.	To secure accounts and prevent misuse.	Legitimate interest in security (GDPR art. 6(1)(f)).
Location while you record: your position is read continuously during a recording, including in the background, and saved on your phone as a track.	To measure distance, elevation and time, and to warn you if you leave the trail.	Your consent, given when you allow location access (GDPR art. 6(1)(a)).
Recordings you contribute: the GPS track of a recorded activity, uploaded to our server together with distance, elevation, duration and the trail you selected.	To improve the route lines on the trail map for everyone.	Your consent, given per recording (GDPR art. 6(1)(a)).
Live sharing, when you start it: your position while the trip is running, sent to our server as you walk and published on a follow link, together with the name you choose to show and — only if you turn that on separately — your profile picture.	To let the people you send the link to see where you are while you are out.	Your consent, given each time you start a live share (GDPR art. 6(1)(a)).
Health and workout data, if you record on an Apple Watch: heart rate, calories and distance are read from Health while the trip runs, and the finished trip is written back to Health as a workout. This stays on your watch and phone — none of it is uploaded to us, not even on a recording you contribute.	To show live figures on the watch, and to let the trip count towards your rings.	Your consent, given when you allow Health access (GDPR art. 6(1)(a)).
Content you submit: trails you publish, photos (which can include the time and the location where the photo was taken), suggested corrections and reports.	To build and moderate the trail catalog.	Your consent (GDPR art. 6(1)(a)).
Usage events: which screens and trails are opened, with a random identifier generated on your device. No advertising ID, no third-party tracker.	To see which parts of the app are used and fix what is broken.	Legitimate interest in running and improving the app (GDPR art. 6(1)(f)).

Contributing a recording

A recorded track is only uploaded if you turn on "Contribute this route to the trail catalog" for that recording. The switch is off unless you turn it on. If you never turn it on, your recordings never leave your phone.

When you do contribute:

We cut the ends. The first and last 200 metres of the track are removed before it is stored, so the upload does not reveal where you started or finished — typically your home, cabin or parked car.
A moderator reviews it before anything becomes visible in the app.
Approved routes are published as an anonymous map line. Your name is not shown next to a published route.
You can withdraw it while it is still waiting for review: open My Trips, swipe the activity and choose "Remove from catalog". The upload is deleted from our server.
Once a route is approved it becomes part of the trail map and stays there, including if you later delete your account. At that point it is map data and is no longer linked to you. If you want an approved route taken down, email us and we will consider the request.

Sharing your position live

Live sharing is off until you start it, and it needs an account. When you start it we make a follow link and publish your position on it for as long as the trip runs.

Anyone holding the link can watch. The link carries a random token and is listed nowhere, but it asks for no password. Treat it as a key and send it only to people you want following you.
The ends are not cut. A contributed recording has its first and last 200 metres removed; a live share does not, because the whole point of it is where you are right now — including where you set off from.
Your picture appears only if you say so. The app asks separately before putting your profile picture on the map, and followers see a plain marker otherwise. It is read from your profile as it stands at that moment, so changing or removing the picture changes what followers see straight away.
You can stop it whenever you like from the recording screen. The link stops updating at once and closes an hour later.
It closes on its own 24 hours after you started it, whether or not you remember to stop it.

Who can see your data

We do not sell personal data and we do not share it for advertising. Data is visible to:

Our moderators, who see submitted content along with the submitting account while reviewing it.
Our hosting provider, which stores the database and files on our behalf.
Apple or Google, if you choose to sign in with them — that exchange follows their own privacy policies.
Everyone, for content that is published in the app after review: trails, photos and route lines.
Anyone you have given a live-share link to, for as long as that share is open.

Where data is stored

Data is stored on servers in Norway, within the EEA.

How long we keep it

Account data: until you delete your account.
Deleted accounts: deactivated immediately and permanently erased after 30 days, so you can change your mind. The erasure also removes your uploaded recordings and the trails you published.
Login sessions and the IP address stored with them: up to 90 days, then they expire.
Safety and moderation records: reports and edit suggestions you send, and anonymous usage events, may be kept after your account is deleted where we need them to keep the service secure and prevent abuse.
Live shares: the link expires 24 hours after you start it, or an hour after you stop it, whichever comes first. The share and the positions on it are deleted from our server a day after that.
Approved route lines: kept as part of the trail map, as described above.
Usage events: kept in aggregate for statistics.

Your rights

You can ask for a copy of your data, correct it, delete it, object to processing based on legitimate interest, or withdraw a consent at any time — withdrawing is as easy as giving it: turn the switch off, or use "Remove from catalog". Withdrawing does not affect processing that already happened.

Delete your account from Profile in the app, or email contact@fjordtrail.no for anything else. If you think we handle your data incorrectly you can complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

Children

Fjord Trail is not aimed at children under 13, and we do not knowingly create accounts for them.

Changes to this policy

If this policy changes materially we will say so in the app before the change takes effect, and update the date above.