Wildheart

Privacy Policy

Effective 2 November 2026

Wildheart is a trail discovery, planning, and hike-tracking app for iOS, operated by Concept Adventure LLC ("Wildheart", "we", "us"). This policy explains what the app collects, why, who else sees it, how long it is kept, and how to get rid of it.

The short version. We do not sell your personal information. We do not share it for advertising. There is no third-party ad network and no cross-app tracking in Wildheart. You can browse without an account. You can delete your account from inside the app, and it takes your content with it. What follows is the detail, including the two things deletion does not reach and the parts that are less flattering.

What we collect

Account

You can use Wildheart anonymously. An anonymous session is identified by a random token and nothing else.

If you sign in with Apple or Google, we receive an account identifier, your email address, and, where the provider supplies them, your display name and profile photo. If you use Apple's Hide My Email, we only ever see the relay address Apple gives us. We store a home location if you set one.

Location

With your permission, Wildheart uses your location to center the map, to build your trip brief with nearby weather and conditions, to route you to a trailhead, and to record your track while you are hiking. Background location runs only while a hike is actively being tracked, never while you are browsing the map.

Location that reaches our servers and is kept:

Coordinates are also sent, in the moment, to the services that make a feature work: map tiles, weather, and the AI companion. Those are named below.

Your content

Trips you plan, routes you save, routes you draw, tracked hikes, trip notes, dog profiles, gear lists, and photos you add are stored on your device and, when you are signed in, synced to your account on our servers so they survive a new phone. Photos reach the app only from the camera or from the system photo picker; the app never gets access to your photo library.

Photos you add are served from unguessable links. When you are signed in you can list your own photos, and nobody else can list them. Anyone you give one of those links to can open that photo for as long as it exists, so treat a shared link the way you would treat the photo itself.

Search

What you type into trail search is used to find trails, and it is also recorded. The text of a search goes to our product-analytics provider as typed, and a trimmed copy of it goes to our search provider to turn the words into a numeric representation for matching. Our own analytics table keeps the length of a search rather than its text, but our operational logs do record any place name the app pulled out of what you typed, so a search that names a town leaves that town in our logs. If you would rather a search were not recorded anywhere, do not type it.

Voice

When your iPhone can transcribe speech by itself, it does, and the audio never leaves your phone. When it cannot, iOS hands the audio to Apple's speech service, which transcribes it and hands back the text under Apple's own terms. Either way the audio never reaches us. We do not upload it and we do not store it.

The text is all we get, and we do not file it away as a recording or a transcript. It goes wherever you aimed it: into trail search, into a question for the companion, or into a note saved with your trip. What happens to it then is described in the Search, AI companion, and Your content sections.

The AI companion

When you ask the companion a question, we send what it needs to answer: your question, the relevant trail facts, and your approximate location. That goes to Anthropic, which processes it and returns an answer.

We do not store the conversation. Questions and answers are not written to our database. What we do keep is a usage record with your account, the feature you used, the model, a token count, and what it cost us, so we can meter credits and watch spend. That record contains no part of what you said.

Photo identification

If you photograph something on the trail and ask what it is, that photo is sent to Anthropic to identify it. We do not keep a copy on our servers unless you save it to your trip.

Subscriptions

Apple is the merchant of record for every Wildheart purchase. Your card details never reach our servers and we never see them. What we store is your entitlement: which tier you are on, which product you bought, whether it is monthly or annual, when it renews or expires, and Apple's transaction identifier for it, plus a ledger of credits granted and used.

Notifications

If you turn on push notifications, we store the device token Apple issues, along with your device model, iOS version, and app version, so notifications reach the right phone. We keep a short history of what we sent you.

Diagnostics and product analytics

We record product events so we can see which parts of the app work: screens opened, trails viewed, searches run, hikes completed, and errors hit, along with your app version, iOS version, device model, and counts such as how many trips you have finished.

Those events live in two separate places, and the two know different amounts about you. It is worth reading both, because the honest answer is different in each.

Our own analytics. Events our servers record are kept in a table of ours, with a coarse location bucket of roughly 100 meters attached to them. These are pseudonymous, not anonymous. They carry a random session token rather than your name, but we hold a separate mapping from that token back to an account. We keep the mapping so that deleting your account can actually reach these events. It also means we could re-identify them, so we are not going to call them anonymous.

Amplitude. Events go to Amplitude, our analytics provider, along two paths, and they are not the same. Events the app itself sends carry a random device identifier Amplitude generates and nothing else about who you are: we never tell Amplitude your account, and we switch off the IP address, city, region, country, and carrier it would otherwise record. Some events our servers record are also copied to Amplitude, and those carry more: the same random session token as our own copy of the event, and the same coarse location bucket of roughly 100 meters. Deleting your account deletes our copy of those events and the mapping that ties the session token to you. It does not delete Amplitude's copies. The app-sent events were never tied to your account at all, and the server-copied ones stop being tied to anything the moment the mapping goes; either way they age out on Amplitude's own schedule.

Our backend also writes operational logs and error reports, which can include an account identifier and a place name pulled out of a search, so failures can be traced.

Feedback you send us

If you report a problem or suggest a trail from inside the app, we store what you typed, what it was about, your app and iOS version, your device model, and your account or session identifier, so the problem can be found. Feedback stays on our own servers.

Who else sees it

Each of these gets only what it needs to do its job. None of them is an advertiser.

We may also disclose information if the law requires it, or to protect the safety of a person, and we would tell you unless we were legally barred from doing so.

Some links to gear are affiliate links. If you buy through one, the retailer may pay us a commission. We do not send the retailer anything about you; the link simply carries a tag identifying us.

What we do not do

How long we keep it

Your account content stays while your account does. Beyond that, these windows are enforced by scheduled jobs, not by intention:

Deleting your account

You can do this yourself, in the app, without emailing anyone:

  1. Open your profile, then Settings.
  2. Tap Manage account.
  3. Tap Delete account.
  4. Type delete to confirm, then tap Delete account.

You are signed out immediately and your account is scheduled for permanent deletion. Your photos are removed at that moment. Everything else, including your trips, tracked routes, drawn routes, dogs, gear, profile, and the analytics events we hold on our own servers, is permanently purged 30 days later. After that it cannot be recovered, by you or by us.

Two things deletion does not reach, and you should hear both from us rather than discover them. Some routing diagnostics survive it: when the app builds you a route we keep the start coordinates of that request, and on deletion the link to your account is cut but the record and its coordinates remain, no longer pointing at anyone. And Amplitude's copies of events already sent are not deleted: our copy and the token mapping go, which unties the server-copied events from you, and the app-sent events never named you at all; they age out on Amplitude's schedule, as described above.

If you would rather not do it in the app, email [email protected] from the address on your account and we will do it for you. The same 30-day window applies.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it for product analytics. Email [email protected]. One person reads that inbox and answers it.

If you are in the European Economic Area or the United Kingdom

Concept Adventure LLC is the data controller. We process your information on these bases: to perform our contract with you (your account, your saved content, your subscription), with your consent (location, microphone, camera, and notifications, each of which you grant and can withdraw in iOS Settings), and for our legitimate interests in operating, securing, and improving the app (diagnostics and product analytics).

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing carried out on the basis of legitimate interests. You also have the right to complain to your local supervisory authority. Your data is stored in the United States; transfers rely on the appropriate safeguards offered by the providers named above.

If you are in California

In the twelve months before the date above, we collected these categories of personal information: identifiers (account and session identifiers, email), commercial information (subscription status and purchase history held by Apple), internet and app activity (the product events described above), geolocation data, audio-derived text from voice input, photos you choose to send, and inferences we draw to recommend trails. Each category is collected for the purposes described in this policy.

We have not sold personal information, and we have not shared it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16.

You have the right to know what we hold, to delete it, to correct it, and to be free from discrimination for exercising those rights. Use the in-app deletion path above, or email us. We will verify a request by replying to the email address on your account.

Children

Wildheart is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.

Security

Traffic between the app and our servers is encrypted in transit with TLS. Access to your rows in our database is enforced by row-level security, so one account cannot read another's. Connected-service tokens are stored encrypted. No system is perfectly secure, and we will not pretend otherwise; if we ever have a breach that affects you, we will tell you.

This website

wildheart.app is static and sets no cookies of its own. Cloudflare, which hosts it, records standard server-level information such as IP addresses and request times for security and operations, under its own policy. Web fonts are loaded from Google Fonts, which receives the request and therefore your IP address.

Changes

If this policy changes, the effective date above changes with it, and anything material gets called out in the app rather than quietly edited here.

Contact

Concept Adventure LLC
Austin, Texas
[email protected]

Back to Wildheart