Privacy policy

Who we are

Wainwrights Baggers is run by Andesphere Ltd, a company registered in England and Wales (number 16350517). We decide how your data is used. Questions and requests go to admin@andesphere.com or through the contact page.

What we store

Your account: name, email address and profile picture, and the sign-in method you chose, such as email and password or Google.

Your round: the fells you have bagged, the dates, your notes and up to two photos per fell.

Your public profile, only if you choose to make one: your display name and progress, and the walkers you follow.

Messages you send us through the contact or feedback forms.

What we do not store

Your location. The iPhone app uses it on your device to show where you are on the map. It is not sent to us.

Card details. Apple handles Pro payments in the App Store and Stripe handles them on the website. We only learn whether Pro is active, which plan you have and when it renews.

Why we use it

To run the service you asked for: keep your round in sync between your devices, and show your public profile if you turned it on. We do not sell your data or use it for advertising.

Who processes it for us

Clerk (sign-in and accounts), Convex (the database and photo storage, hosted in the EU), Vercel (website hosting).

Sentry (crash and error reports). When the app or website crashes or hits an error, Sentry receives a technical report: what went wrong, the steps in the app just before it, the app version, and your device model and system version. It does not receive your name, email address, notes or photos.

PostHog (anonymous product usage). We count what happens in the app and on the website, such as the app being opened, a fell being bagged or the Pro screen being shown, to learn what to improve. These events are not linked to your account, your name or your email address, and the website sets no analytics cookies. On the website PostHog may also record anonymous replays of how pages are used, with everything you type and all text on screen hidden.

Stripe (Pro payments on the website). When you buy Pro on the website, Stripe takes the payment on its own checkout page, sends your receipts and runs the page where you manage or cancel your subscription. It receives your account ID, name, email address, billing address and payment details. We never see your card.

RevenueCat (Pro subscriptions). Apple tells RevenueCat about your purchases, and RevenueCat tells us whether Pro is active. It knows your account ID and your purchase history, not your card.

Map tiles come from Mapbox, OpenFreeMap and OpenTopoMap. Like any website, they see your IP address and which map area you are viewing.

The map in the iPhone app is made by Mapbox. Its map software sends Mapbox anonymous usage and location data to improve its maps. It is not linked to your account, and you can turn it off from the info button on the map.

If you analyse an import, the text you paste or extract from your document is sent to OpenAI through Vercel AI Gateway to suggest walking records, including fell names, dates and notes. Files are read in your browser. Review the suggestions before saving; only confirmed records are added to your journal.

Some of these providers are in the United States. They are bound by standard data protection terms for transfers out of the UK.

How long we keep it

Until you delete it. Resetting your journal removes your fells, notes and photos. Deleting your account from the account menu removes your round, photos, profile, follows and sign-in account straight away. It also cancels an active web subscription straight away, without a refund. Stripe keeps its record of your past payments, which we must keep for our accounts. An App Store subscription keeps running until you cancel it on your iPhone.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to admin@andesphere.com. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The service is not aimed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes we will update this page and the date below.