Privacy Policy

Effective Date: April 3, 2026  |  Last Updated: October 23, 2026

Written in plain English — no legalese. We want you to actually understand this.

1. Who We Are

We are YourMountains Outdoor Collective, an outdoor lifestyle and community platform. We're building the world's most connected outdoor community — and we take your privacy seriously.

For all privacy-related questions, requests, or concerns, contact us at policy@yourmountains.life.

2. What We Collect

We collect two categories of information:

Information you give us directly:

• Name and email address (from forms, waitlists, and contact submissions)
• Zip code or general location (if provided in surveys)
• Outdoor activity preferences and interests
• Survey responses (Explorer and Vendor Partner surveys)
• Messages you send us via the contact form
• Business information provided by vendor partners (business name, contact name, phone)
• Your stated role — Explorer, Vendor Partner, or Both
• Content you post in the mobile app — field notes, social posts, message board threads and replies, gear listings, photos, and profile details
• If you use the mobile app and choose to connect a calendar: OAuth tokens for Google Calendar or Outlook, free/busy availability (busy blocks), and your preferred training windows (for example before work, lunch, evenings, or whenever you have gaps)

In the YourMountains app:

• Account details: your name, email address, date of birth (to confirm you are 18 or older), and your home zip code and county.
• Outings you record with the Motion Diary: your route, distance, elevation gain, duration and activity type.
• Things you add: Field Notes, photos and videos, posts, comments, gear listings and your profile.
• Conversations with Claire, our in-app guide.
• Stamp activity and merch redemptions, including the order reference from our merch store.
• If you allow notifications: a push notification token for your device.
• App usage: which screens and features you use, and crash and error reports, so we can fix problems.

Location information (mobile app):

• Location while you are using the app. With your permission, we use your device location to show trails, routes, events, and places near you, to calculate real distance to a destination, and to measure distance, route, and elevation while you record a Motion Diary activity.
• Location in the background. If you grant "Always Allow" location access, the app continues to collect location while it is in the background during an active Motion Diary recording only, so your route keeps recording if your screen locks or you switch to another app. Background collection stops when the recording stops. You are not required to grant this — the app works without it, and you can change or revoke it at any time in iOS Settings → Privacy & Security → Location Services → YourMountains.
• Recorded activity tracks. The coordinates, timestamps, distance, and elevation of activities you choose to record and save.

We do not sell location data, we do not share it with advertisers or data brokers, and we do not use it for advertising or tracking across other companies' apps or websites. Location is used only to deliver the features described above.

Information collected automatically:

• Page views and navigation patterns on our Site
• Browser type, operating system, and device information
• Session duration and interaction data
• Referring URLs

On our website, automatic data is only collected via Google Analytics, and only after you give cookie consent. Data collected in the app is listed under In the YourMountains app above.

3. How We Collect It

We collect information through two mechanisms:

• Forms on our website — processed by Netlify Forms. This includes our Founder's Club signup, Explorer survey, Vendor Partner survey, and Contact form. Each form displays a link to this Privacy Policy before you submit.
• Cookies and tracking technologies — specifically Google Analytics. These are only loaded after you click "Accept" on the cookie consent banner that appears on your first visit. If you click "Decline," no tracking cookies are placed and the site functions normally.

4. How We Use It

Here's exactly what we do with your information:

• Send you launch communications, platform updates, and Founder's Club news
• Understand outdoor community needs and use your survey responses to improve our platform
• Respond to your messages and questions
• Analyze Site usage to improve the experience (analytics data only)
• Evaluate vendor partner interest and reach out about Founding Partner opportunities
• If you connect a calendar in the mobile app: suggest open training times from free/busy gaps and your preferred windows
• To run the app: record and show your outings, show nearby trails and events, and share what you choose to share with the community.
• To personalize Claire's suggestions to your area, time and ability.
• To send the notifications you allow.
• To keep the community safe, including content filters and reports.

5. How We Store It

Your data is stored in the United States across these systems:

• Netlify Forms — form submissions are captured and stored by Netlify on their U.S. infrastructure.
• Supabase — form data is mirrored to our Supabase PostgreSQL database, hosted on Amazon Web Services in the United States.
• Microsoft SharePoint — waitlist and contact submissions are routed through Microsoft Power Automate and stored in SharePoint for team access.
• Google Analytics — analytics data is processed and stored by Google per their data retention settings.
• Supabase (mobile app) — if you connect Google Calendar or Outlook, refresh tokens are stored encrypted on our servers (not in plaintext on your device). Free/busy busy blocks are used to suggest open training times; we do not use event titles when reading free/busy APIs.

We apply reasonable technical and organizational safeguards appropriate to the sensitivity of the data. No transmission over the internet is 100% secure — we cannot guarantee absolute security, but we take it seriously.

6. Third-Party Services

We use the following third-party services that may process your data:

• Netlify — website hosting and form processing. netlify.com/privacy
• Google Analytics — site analytics (consent-gated). policies.google.com/privacy
• Supabase — cloud database storage. supabase.com/privacy
• Microsoft Power Automate / SharePoint — form routing and team data access. privacy.microsoft.com
• Google (Gemini) — generates Claire's answers from the messages you send her.
• Google Firebase Cloud Messaging and Expo — deliver push notifications.
• Shopify — merch checkout; Shopify handles payment and shipping details on its own checkout page.
• Mapbox — maps and directions.
• Sentry — crash and error reports from the app.

Our mobile application also uses Mapbox to render maps and provide search and directions, which involves processing your device location, and Sentry for crash and error reporting. Claire, our in-app guide, processes the messages you send it in order to answer them. Their privacy policies apply to these in-app features.

We do not control these third parties and are not responsible for their privacy practices. We encourage you to review their policies.

7. Calendar Free/Busy (Mobile App)

If you connect Google Calendar or Outlook, we request read-only free/busy access and use busy blocks (not event titles) only to suggest open training times. You can disconnect in Settings anytime. Refresh tokens are stored encrypted on our servers.

You may also set preferred windows in Settings (for example before work, lunch, evenings, or whenever you have gaps). Those preferences stay with your account and are used only to prioritize suggested open times. Connecting a calendar is optional. YourMountains is for adults 18 and older.

• Google Calendar — free/busy via Google Calendar APIs. policies.google.com/privacy
• Microsoft Outlook / Microsoft Graph — free/busy via schedule APIs. privacy.microsoft.com

8. Cookies

We use Google Analytics cookies to understand how visitors use our Site. These cookies are only loaded after you click "Accept" on the cookie consent banner that appears on your first visit.

If you click "Decline," no cookies are placed and the site works normally without them. Your choice is saved in your browser's local storage and respected on all future visits.

You can withdraw your consent at any time by clearing your browser's local storage or cookies, which will cause the consent banner to reappear on your next visit.

We do not use advertising cookies, tracking pixels for ad retargeting, or any cookie-based profiling for commercial purposes.

9. Analytics Disclosure

We may use analytics tools, including but not limited to Google Analytics, to understand how visitors use our Site. We may add additional analytics tools in the future and will update this policy accordingly.

All analytics data collection is consent-gated — no analytics tool is loaded until you explicitly accept cookies via our consent banner.

10. Children's Privacy / Age Eligibility

YourMountains is for adults 18 years of age or older. Our Site and mobile app are not directed at anyone under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected information from someone under 18, we will delete it and close the account promptly.

If you believe someone under 18 has submitted information through our Site or app, please contact us immediately at policy@yourmountains.life.

The app uses a simple in-app date-of-birth age check. We do not offer Parental Controls and do not use Apple Screen Time, Declared Age Range, Family Controls, or other Age Assurance APIs.

11. Data Retention

We retain your information for as long as reasonably necessary to fulfill the purposes described in this policy, or as required by applicable law. In practice:

• Waitlist and signup data — retained until the platform launches or until you request deletion.
• Survey responses — retained indefinitely for product research unless you request deletion.
• Contact messages — retained for up to 2 years.
• Analytics data — subject to Google Analytics' data retention settings (we use the default 14-month retention).
• Calendar connection data — encrypted OAuth refresh tokens and preferred windows are retained while your account is active and the calendar stays connected; disconnecting removes the connection and associated tokens. Account deletion also purges calendar connection data.
• App account data is kept while your account is active.
• When you delete your account, your profile locks right away. After 30 days your Field Notes, Gear Locker, Gear Swap listings, posts and related data are permanently deleted. We keep your name, handle, email address, sign-up date and deletion date to record the deletion.

You may request deletion of your data at any time — see Your Rights below.

12. Your Rights & Data Deletion

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for marketing communications at any time
• Know what categories of data we have collected about you

13. Colorado Privacy Act — Forward-Looking Note

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Site after changes are posted constitutes your acceptance of the updated policy. If you have concerns about a change, contact us at policy@yourmountains.life.

15. Contact Us

Privacy questions, data requests, or concerns — we want to hear from you:

YourMountains Outdoor Collective
Email: policy@yourmountains.life
Website: yourmountains.life