Privacy Policy
Effective May 26, 2026 · Last updated October 8, 2026
This policy explains how RFT Media (“we,” “us”) collects, uses, and protects information when you use the Texian Trail mobile app (the “App”) and the account pages at texiantrail.app (the “Site”). By using them, you agree to this policy. If you do not agree, please do not use the App or the Site’s account pages.
1. Who We Are
The App and the Site are owned and operated by RFT Media. For privacy questions or requests, email support@texiantrail.app.
2. Information We Collect
2.1 Information You Give Us
- Account information: username, email address, and password. Passwords are stored only as a salted bcrypt hash; we never see the password itself.
- Year of birth: asked when you create an account to confirm you are 13 or older. It is checked on your device and never sent to us or stored.
- Profile photo: optional. Location and other metadata (EXIF) are removed before it is stored.
- Your contributions: photos of markers and suggested location corrections. Photo metadata, including GPS, is removed before storage.
- Messages you send us: if you email support, we keep the message so we can answer it.
2.2 Information Collected When You Use the App
- Location, only while the App is open: used to show markers near you and to confirm a check-in is near the marker. The App checks for about 100 meters (300 feet); our server accepts up to 200 meters to allow for GPS drift. We do not collect location in the background.
- Check-ins: the marker, your coordinates at check-in, and the time.
- Purchase records: if you subscribe to Trail+, Apple or Google processes the payment. RevenueCat tells us whether your subscription is active and when it renews. We do not receive your payment card details.
2.3 What We Do Not Collect
The App has no advertising and no third-party analytics or tracking. It does not use your advertising identifier and does not track you across other companies’ apps or websites. If that ever changes, we will update this policy first and ask for any permission the law or the app stores require.
The Site’s public pages may use Cloudflare Web Analytics, which counts page visits without cookies and without identifying you. It is not used on the Site’s account pages.
3. How We Use Information
| Purpose | Information used |
|---|---|
| Signing you in and keeping your profile | Email, username, password hash |
| Showing nearby markers and recording check-ins | Location while the App is open, check-ins |
| Awarding badges and tracking your progress | Check-ins |
| Providing Trail+ | Account ID, subscription status from RevenueCat |
| Reviewing photos and corrections before they appear | Your contributions, reports from other users |
| Sending account email, such as password reset links | Email address |
| Answering your questions | Your messages |
We do not sell your personal information, and we do not share it for targeted advertising.
4. Who We Share Information With
We share information only with the companies that help us run the App and the Site:
- Apple and Google: process in-app purchases.
- RevenueCat: manages subscription status and receipts.
- Mailgun: delivers account email, such as password reset links, and receives mail sent to our support address.
- Cloudflare: network security, TLS, and protection against attacks on our servers.
- Contabo: hosts the server that runs our database and API, located in the United States. We run the server ourselves.
We disclose information to law enforcement only when a valid legal order requires it, and we will tell you unless the law prohibits it. We will update this list before adding any new company that handles your information.
5. How Long We Keep Information
| Information | How long |
|---|---|
| Account, check-ins, badges, contributions | Until you delete your account |
| Deleted accounts | Identifying details removed at once; the remaining records permanently removed after 30 days |
| Password reset links | 1 hour |
| Sign-in sessions | Up to 7 days; signing out everywhere or changing your password ends them sooner |
| Support emails | As long as needed to answer you and keep a record of the request |
6. Your Choices and Rights
Wherever you live, you can:
- See your data: download a copy in the App (Profile, then Export My Data) or on the Site at Your Account.
- Correct it: change your username, email, or password in the App or on the Site.
- Delete it: delete your account in the App (Profile, then Delete Account) or on the Site at Delete Your Account. Identifying details are removed at once, and the remaining records are permanently removed after 30 days.
- Stop location use: turn off location access for Texian Trail in your phone’s settings at any time. You can still browse markers without it.
Depending on where you live, you may have more rights:
- Texas (Texas Data Privacy and Security Act), California (CCPA/CPRA), and other US states: the rights to know, correct, delete, and get a copy of your data, and to not be treated differently for using them. We do not sell or share personal information, so there is nothing to opt out of. Precise location is sensitive information, and we use it only for the App’s location features.
- EU, UK, and Switzerland: the rights above, plus the rights to restrict or object to processing and to complain to your data protection authority.
To use any right that is not built into the App or the Site, email support@texiantrail.app. We answer within 45 days.
7. Children
The App and the Site are not for children under 13. If you tell us you are under 13 when creating an account, we do not create it. If we learn that we have collected information from a child under 13, we will delete it. Please tell us at support@texiantrail.app.
8. Security
- All traffic uses HTTPS.
- Passwords are hashed with bcrypt.
- In the App, your sign-in token is kept in the iPhone Keychain or Android’s encrypted storage; on the Site, it stays in the browser tab and is cleared when you sign out or close the tab.
- Changing your password or using Sign Out Everywhere ends every other session.
- Uploaded photos are checked for file type, stripped of metadata, and re-encoded.
- Sign-in, password reset, and account actions are rate limited.
No system is perfectly secure. If you think someone has used your account, change your password, use Sign Out Everywhere, and email us.
9. Where Your Information Is Stored
Our servers are in the United States. If you use the App or the Site from another country, your information is transferred to and stored in the United States.
10. Changes to This Policy
We may update this policy. The date at the top shows the latest version. If a change materially affects how we use your information, we will email account holders before it takes effect.
11. Contact
RFT Media Email: support@texiantrail.app For privacy requests, put “Privacy Request” in the subject line.