What Foray collects, and what it doesn’t.

Foray is a GPS tracker for personal use. It collects only what it needs to record your activities and back them up to your account if you choose to sign in. It does not run ads, it does not sell or share your data, and it has no follow buttons or social feed.

You can delete your account and all associated data from inside the app at any time. See deleting your data for the steps.

• Apple ID identifier. When you sign in with Apple, Apple gives us a stable identifier for your account. We do not see your Apple password or any other Apple account data.
• Email address.Apple Sign-In passes us an email — either your real one or a private relay address if you chose “Hide my email.” We use it only to uniquely identify your account.
• Display name and avatar. Both optional and user-set. You can leave them blank.
• Recorded activities.When you record an activity, Foray captures the GPS track (latitude, longitude, elevation, timestamps), the activity type, the distance, and the duration. Activities are stored on your device, and backed up to your account when you’re signed in.
• Field journal entries. Any text and photos you add to a recorded activity. Photos stay on your device and sync to your account when signed in.
• Device location. Foray reads your location only while you have a recording in progress in the foreground. It does not run a background-location service and it does not track you between activities.
• App preferences. Units (km vs miles), default activity type, onboarding status. These stay on your device.

• No advertising identifiers (IDFA).
• No third-party analytics (no Google Analytics, no Mixpanel, no Amplitude, no Segment).
• No crash reporters that ship identifiable data.
• No social-graph data. Foray has no follow / friend / comment / like mechanic.
• No payment information. The app is free; there are no in-app purchases at this time.

We use the data above to:

• Sign you in to your account and keep you signed in.
• Display your activities, photos, and journal entries inside the app.
• Back up your activities so they survive a lost or replaced device.
• Sync your activities across multiple devices when you sign in to more than one.

That’s the entire list.

Account data and activity records are stored with Supabase, a managed Postgres provider, in a region in the Americas. Photos are stored in Supabase Storage. Row-Level Security means only your signed-in session can read or write your rows.

We do not run our own servers. We do not have a copy of the data outside Supabase.

We do not sell or rent your data, and we do not share it with advertisers, brokers, or any other third party. The only data that leaves Foray is the data you explicitly share — for example, tapping “Share” on an activity to send a link to a friend.

We may be legally required to share data in response to a valid court order. We have not received any such request to date.

You can, at any time:

• Delete your account and all data. In the app: Settings → tap your name → scroll to bottom → Delete account. See this page for a step-by-step walkthrough or an email-request alternative.
• Export your data.Email us and we’ll hand back your activities as a JSON file. We’re working on an in-app export — the email path works for now.
• Stop using Foray. Uninstall the app. Data stays on the server until you delete the account; the app itself only holds local copies.

Foray is not directed to children under 13. If you are a parent and believe your child has signed in to Foray, email us and we will delete the account.

We will post any material change to this page and update the effective date at the top. Significant changes will also be mentioned in the app’s release notes.

Questions, requests, or concerns: sundaylabs.app@gmail.com.