Privacy Policy – Arendal Singletrack

Last updated: 30 September 2026
Data controller: Arendal Singletrack

In brief

The app shows the club’s trails and lets members report and document volunteer trail work.

You can use the map and suggested rides without creating an account. In that case, the club stores no account or activity information about you. The app only sends the limited technical measurements described under “How the app works: launches, performance and errors”.

You can create a guest account to report issues and suggestions. You do not need to be a member. Approved members can also use the app to coordinate volunteer work. For this, the club needs to know who reported damage and who repaired it.

What we store

Without an account

We store no account information about you. The map, suggested rides and trail network are in the app and work offline. Your location is used only on your phone and is not sent to the club or Expo.

The app sends technical measurements about launches, performance and errors to Expo. These are described under “How the app works: launches, performance and errors”.

With an account

Member list

Approved members can see who belongs to the club, so they know whom to ask for help with a volunteer task. The list shows name and role (for example, trail coordinator). Your phone number is shown only if you have enabled it under My page. It is off until you do so, and only you can change it; not even an administrator can. Email address, status and other details are not shown. The list is stored on the phone so it works offline, and is replaced each time the app syncs. Someone who leaves the club is removed from the list as well. Guests, visitors and people awaiting approval cannot see the list and are not included in it.

The club’s own test accounts – including accounts Apple and Google use when reviewing the app – are not listed. Tasks and hours they create are not shown to members and do not count towards volunteer-work records.

Notifications

If you are an approved member, the app asks once whether it may send you notifications. If you agree, notifications are enabled. You can turn them off at any time under My page or in your phone settings. Guests and visitors are not asked. When notifications are enabled, the club stores a push token for your phone, linked to your account, along with the app’s language and whether your phone is an iPhone or Android device. It is used only to notify you when someone takes a task you reported, or recognizes or comments on a task you took or logged volunteer hours for.

Notifications are sent through Expo, which forwards them to Apple (iPhone) or Google (Android). They can see the notification text – who recognized your work and which task it concerns – but nothing else about you. The token is deleted when you turn off notifications, sign out or delete your account.

Background location

When you start a ride in the app, your location is tracked even when the screen is off. This is necessary for the app to alert you if you leave the route.

Tracking starts only when you tap “Start ride” and stops when you finish. The ride recording is stored only on your phone, is visible only to you and is not sent to the club or other services.

Legal basis

We process account information because it is necessary for sign-in and to receive and follow up on feedback from registered users. Membership information is processed to give approved members access to the app’s member features and to manage the club’s volunteer work.

Information about volunteer tasks, completed work and related documentation is processed on the basis of the club’s legitimate interest in building, maintaining and documenting the trail network. We consider this processing necessary for the club’s work and that it does not normally unduly affect members’ privacy.

Feedback and issue reports are processed so we can respond to enquiries and keep the app secure and working. Photos and information you choose to include are used only for this purpose.

Technical measurements through Expo are processed on the basis of the club’s legitimate interest in knowing whether the app is used, which versions are in use, and whether it works well enough to be relied on outdoors.

Where processing is based on a contract or legitimate interest, it is not based on consent. Permissions you grant in your phone settings, such as access to location, photos or the microphone, control what the app can technically access; they are not in themselves the legal basis for processing under privacy law.

Property information

Trail work takes place on public and private land, so the club needs to know who owns the land.

When a volunteer task is reported, the app retrieves the cadastral farm and use numbers for the location from the Norwegian Mapping Authority’s property register. This is public information about property, not people.

The club also stores Land Registry extracts for properties crossed by the trails. These name the landowners.

For these records:

• If the owner is an organisation – a municipality or company – its name and organisation number are stored. This information is public in the Central Coordinating Register of Legal Entities.
• If the owner is a private individual, only the words “Private individual” are stored. The name and date of birth in the extract are never entered into the database.
• The extract itself is available only to administrators and is stored in an area that requires sign-in.

Feedback and issue reports

Under “Report an issue”, anyone with a registered account who is signed in can submit issues and suggestions. This includes guests who are not approved members. You must register and sign in, but you do not need to apply for or have club membership.

Information about the software, not you, is included with your message: app version and build number, iOS or Android version, phone model, language, which screen you were on, and how many changes were waiting to be sent. All of this is shown on screen before you submit, so you can see exactly what will be sent.

The phone’s name is deliberately not collected. It is usually your name.

Dictation

Instead of typing, you can tap “Dictate” and speak your message. The microphone is on only while you are dictating, and the audio is not stored anywhere – neither on your phone nor by us. Only the resulting text is submitted when you tap Send.

Speech recognition is handled by iOS or Android. Apple or Google may process the audio on their own servers to turn it into text, just as when you use keyboard dictation. If you want to avoid this, type instead; the text field is always available.

When you are signed in, the app also stores errors it encounters automatically, with the same information plus the error message and the first lines of a technical stack trace. These automatic reports never include your location, photos or content from your volunteer tasks.

Screenshots you choose to attach

You can attach up to three images when reporting an issue or suggestion. This is optional, and you choose which images to include.

A screenshot taken in the app may show more than the issue: the name of someone who reported a volunteer task, or your location on the map. Review the image and consider cropping it before sending.

Images are stored in a restricted area at Supabase. They are visible to you and the club’s administrators, and no one else.

Reports are visible to you and the club’s administrators.

Who we share information with

The app retrieves maps and data from external services. These services receive the coordinates of the map area you are viewing, but the club does not send them information about who you are.

Supabase and Resend are our data processors. Resend is used only to send sign-in codes. It receives your email address and nothing else, does not use it for any other purpose. We do not sell information or use it for advertising.

Some providers may process information outside the EEA. When this happens, the processing must meet privacy law requirements for transferring personal data. Contact us if you would like more information about how a particular provider processes information.

How the app works: launches, performance and errors

The app sends technical measurements to Expo. The club uses these to see whether the app is fast enough and whether it crashes for anyone. None of this describes what you do in the app, where you are or who you are.

At launch and while you use the app:

The screen name is the route within the app – “map”, “volunteer work” or “issue” – and how long it took to become ready. It tells us which type of screen was slow, not which task or trail you viewed.

When something goes wrong, the error message and stack trace are also sent: which line of code failed and how it got there. This is the same event captured by the “Report an issue” form, viewed from the system’s perspective. It now goes to two places: the club’s own database and Expo. Native crashes – those that bring down the entire app before it can report the issue itself – are captured only here.

Error messages are generated by the code, not written by you, and should not contain personal information. If text you wrote nevertheless appears in an error message, the same rights in this notice apply.

The installation ID deserves a sentence of its own. It is a random identifier for this installation of the app. It contains no name, email address or other account information, and the club does not link it to your account. It stays the same across launches, so the club can tell that one app installation launched ten times rather than ten installations launching once each. That is its sole purpose. It disappears if you uninstall the app.

The following are not sent: your name, email, GPS location, ride recordings, photos, phone name, or what you write or read in the app.

The club uses these measurements to answer two questions: whether the app is being used and which versions are in use, and whether it works well enough. They are not used for advertising or profiling and are not linked to anything else we store about you.

OpenStreetMap data is stored in the app and does not involve an external request.

How long we keep information

• Volunteer tasks and photos are kept for as long as the club needs them. They document work done on the trail network over time.
• Ride recordings remain only on your phone, are not sent to the club and are deleted when you delete the app.
• Feedback and issue reports are deleted when the issue is fixed, and no later than 12 months after submission.
• Push tokens are deleted when you turn off notifications, sign out or delete your account.
• Version information is deleted when you delete your account.
• Your account is deleted when you ask us to delete it.

Your rights

When the conditions in privacy law are met, you can:

• ask for access to the personal data we hold about you
• have inaccurate or incomplete information corrected
• ask for information to be deleted
• ask for processing to be restricted
• object to processing based on legitimate interest
• ask to receive information you have provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies

These rights are not without exceptions. For example, the club may need to retain anonymised documentation of trail work even after your account is deleted. Contact us at the address below. We will consider your request and respond as soon as possible.

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

Delete your account

In the Arendal Singletrack app, go to My page, scroll down to Delete account, and tap Delete my account. You will be asked twice, and deletion happens immediately.

If you have already uninstalled the app, email hei@arendal-singletrack.no from the address registered to your account and we will delete it within 30 days.

The following will be deleted:

• Your account and sign-in details
• Your name, email address and phone number
• Your entry in the club’s list of people with access
• Your ride recordings, which are stored only on your phone in any case

The following will remain:

• Volunteer tasks you reported or repaired, without your name. They describe the trail, not you, and are the club’s documentation of work on the trail network over time.
• Photos attached to a volunteer task, for the same reason.
• Feedback and issue reports you submitted, without your name. They are deleted when the issue is fixed, and no later than 12 months after submission.

If you want to use the app again later, you can create a new guest account. To access member features, you must be approved as a member again. The club’s own membership register is outside the app and is not affected.

Children

The app is intended for club members. If you are under 15, a parent or guardian must consent before you create an account.

Changes

If we change this notice, we will update the date at the top and notify you in the app if the change affects you.

Contact

Arendal Singletrack
Email: hei@arendal-singletrack.no
Organisation no.: 997 268 105

If you believe we handle information incorrectly, you can complain to Datatilsynet.