Privacy Policy

Last updated: July 2026 · Applies to the SagaTrail app and all related services

Your privacy is important to us. We collect only the data necessary to operate the app and do not share it with third parties for advertising purposes.

1. Data Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP) is:

Operator

SagaTrail

A.i.L. by Koch (Rolf Koch)
Mühlemattstrasse 11
4104 Oberwil BL, Switzerland

Email: info@sagatrail.ch

2. What Data We Collect

Depending on how you use the app, we collect the following categories of data:

Account & Authentication

Registration and Login Data

Name, email address and, where applicable, a social login token (Google, Apple), provided by Clerk, Inc. You can use the app with limited functionality without an account; registration is required for saved tours and achievements.

Location

GPS Position (Only During Use)

Your GPS position is processed exclusively locally on your device to enable navigation along the hiking trail. We do not store real-time location data on our servers. The route geometry (recorded path) can optionally be synchronized with your account as part of a hike entry.

Purchases & Subscriptions

Payment and Purchase Data

In-app purchases (legend packages, premium subscription) are processed through the App Store or Google Play. We do not receive complete payment details. Subscriptions are managed through RevenueCat, Inc., which stores an anonymized user identifier and the purchase status.

Usage Data

Technical and App Usage Data

We store anonymized usage statistics, such as cantons visited, completed routes and language selection, to improve the app. This data does not contain personal information and cannot be attributed to an individual person.

Device & Step Data

Sensor Data (Pedometer, Movement)

With your permission, the app uses your device's pedometer (expo-sensors) to count steps during a hike. This data is processed only locally and is not transmitted to servers.

3. Third-Party Providers & Data Transfers

The following third-party providers are integrated into the app. We have concluded data processing agreements with them in accordance with Art. 28 GDPR:

Authentication

Clerk, Inc.

Management of user accounts, social login (Google, Apple) and email verification.
Privacy: clerk.com/privacy · Servers: USA (SCCs)

In-App Purchases

RevenueCat, Inc.

Management of subscriptions and one-time purchases, receipt of App Store receipts.
Privacy: revenuecat.com/privacy · Servers: USA (SCCs)

Speech Synthesis / Audio

ElevenLabs, Inc. (Optional)

Generation of audio narration for hiking legends. Only the legend text is transmitted, with no personal data. OpenAI Text-to-Speech is used as a fallback. This is active only when you enable narration.
ElevenLabs: elevenlabs.io/privacy

Map Data

Swisstopo / OpenStreetMap

The interactive map uses map tiles from swisstopo (Federal Office of Topography, Switzerland) and OpenStreetMap data. Anonymized requests are sent that do not enable user identification.
Swisstopo: swisstopo.admin.ch

Hosting & API

Replit, Inc.

The backend API server is hosted on the Replit platform. Servers are located in the USA (SCCs).
Privacy: replit.com/privacy

4. Legal Bases

We process your data on the basis of the following legal grounds (Art. 6 GDPR):

Performance of a contract (Art. 6(1)(b)) — account, purchases, navigation
Legitimate interests (Art. 6(1)(f)) — security, troubleshooting, anonymous statistics
Consent (Art. 6(1)(a)) — GPS use, notifications, pedometer (revocable at any time)
Legal obligation (Art. 6(1)(c)) — accounting obligations for purchases

5. Retention Period

We store personal data only for as long as necessary for the respective purpose:

Account data — until the account is deleted
Hiking history & achievements — until the account is deleted
Purchase receipts — 10 years (statutory retention obligation)
Server logs (technical) — a maximum of 30 days, then automatically deleted

6. Your Rights

You have the following rights in relation to us as the controller:

Access — information about the data we hold about you (Art. 15 GDPR)
Rectification — correction of inaccurate data (Art. 16)
Erasure — “right to be forgotten” (Art. 17)
Restriction — restriction of processing (Art. 18)
Data portability — export of your data (Art. 20)
Objection — objection to certain processing activities (Art. 21)
Complaint — complaint to the competent data protection authority

To unsubscribe from your account and delete your data, go to Settings → Delete account in the app or email us at info@sagatrail.ch.

7. Minors

SagaTrail is not intended for children under the age of 13. We do not knowingly collect data from children under 13. If you become aware of such processing, please contact us.

8. Changes to This Policy

We reserve the right to update this Privacy Policy in the event of material changes. The date at the top of this page indicates the current version. We will notify you in the app of any material changes.

9. Contact

If you have any questions about data protection, you can contact us at:

Privacy Contact

SagaTrail Privacy

Email: info@sagatrail.ch
We generally respond within 10 business days.