Privacy Policy

Last updated: March 24, 2026

SoulPak Trails is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.

1. Information We Collect

Account information: When you sign in via Manus OAuth, we receive your name and email address. We store this to identify your account and personalize your experience.

Usage data: We collect anonymized analytics data (page views, feature usage) to improve the Service. This data does not identify individual users.

Trail activity: Hike logs, favorites, trip plans, and trail corrections you submit are stored to provide the Service's core features.

Location data: If you grant location permission, your approximate coordinates are used to calculate trail distances. Location data is processed client-side and is not stored on our servers.

Payment information: Payments are processed by Stripe. SoulPak Trails does not store full card numbers, CVV codes, or other sensitive payment details. We store only a Stripe customer ID to manage your subscription.

2. How We Use Your Information

  • Provide and personalize the Service (trail recommendations, saved trips, hike logs)
  • Process payments and manage subscriptions
  • Send transactional notifications (e.g., subscription confirmations)
  • Improve the Service through anonymized usage analytics
  • Moderate user-submitted trail corrections
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

3. Third-Party Services

SoulPak Trails uses the following third-party services that may process your data:

Manus OAuth

Authentication — handles sign-in and provides your name and email

Privacy policy

Stripe

Payment processing — handles subscription billing

Privacy policy

Google Maps / Places

Trailhead coordinate validation — used server-side only

Privacy policy

OpenStreetMap

Trailhead coordinates — data licensed under ODbL

Privacy policy

Recreation.gov

Permit URL validation — public API, no personal data shared

Privacy policy

USFS ArcGIS

Trail verification — public dataset, no personal data shared

Privacy policy

4. Cookies and Session Data

SoulPak Trails uses a single session cookie to maintain your login state. This cookie is required for the Service to function and cannot be opted out of while logged in. We do not use third-party tracking cookies or advertising cookies.

Analytics data is collected in aggregate and does not use cookies that track you across other websites.

5. Data Security

We use industry-standard security measures including HTTPS encryption, secure session tokens, and access controls to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your data in a portable format
  • Opt-out: California residents may opt out of the sale of personal data (we do not sell personal data)

To exercise these rights, contact us at the email address in Section 8 below. We will respond within 30 days.

7. Children's Privacy (COPPA)

SoulPak Trails is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

8. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the SoulPak Trails website. We aim to respond to all privacy inquiries within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.