Privacy Policy

Last updated: April 2026

This policy explains what information Lifetime Topo collects, why, and how it is used. We collect as little as possible and never sell your data.

What we collect

Data	Why	Retained
Email address	Account login and purchase receipts	Until account deleted
Purchase history	To restore your maps on new devices	Until account deleted
Device identifiers (up to 2)	To enforce device limits per purchase	Until removed by you
Anonymised usage analytics	To understand which features are used	90 days rolling
Crash reports	To fix bugs in the app	30 days

What we do not collect

Your location or GPS data — the app reads your device GPS only to show your position on map, this never leaves your device
Your GPX tracks or routes
Payment card details — payments are handled by Stripe and Google Play, we never see your card number
Any data from other apps on your device

Third-party services

Supabase — we use Supabase to store account information and purchase records. Data is hosted in AWS (Sydney region). Supabase's privacy policy applies to this data.

Stripe — payment processing. Stripe's privacy policy applies to payment data. We store only your purchase record, not card details.

Cloudflare — our website and tile server infrastructure. Cloudflare processes request logs with a short retention window.

LINZ Basemaps — the web map viewer loads tiles from LINZ's servers. Your IP address is visible to LINZ when using the web viewer. The offline app loads tiles from our own servers only.

Cookies and analytics

The website uses no advertising cookies and no third-party tracking. We use anonymised first-party analytics only (page views, feature usage) with no personally identifiable information.

Your rights

You can at any time:

Request a copy of all data we hold about you
Request deletion of your account and all associated data
Remove a device from your device list via the account page
Opt out of crash reporting in app settings

To exercise these rights, contact us via the About page.

Data security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt and never stored in plain text. We do not have access to your password.

Children

Lifetime Topo is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this privacy policy? Contact us via the About page.