Privacy Policy

This Privacy Policy explains how Legs on Tour Ltd ("we", "us", "our") handles information in connection with the Legs on Tour mobile app (the "App"). We are the data controller for the purposes explained below.

The short version

You don't need an account to use Legs on Tour, and we never ask for your name, email address, or any other information that identifies you directly. Your route preferences (like your home location) are stored only on your device. Nothing leaves your device for us unless you choose it: the optional, anonymous usage analytics is off by default — you turn it on in Settings → Privacy & data, and can turn it off again at any time.

Separately, and whatever you choose, our own servers keep brief technical logs, and when something in our software breaks they send us a report of the failure so we can fix it. Those reports describe our software's faults rather than your activity, and carry no identifier for you. Sections 2 and 4 set out what they contain.

The rest of this policy explains that in full, because even anonymous device and usage data counts as "personal data" under UK GDPR, and you're entitled to know how it's handled.

1. Information stored only on your device

The following is stored locally on your device (using standard app storage) and is never sent to our servers:

• your home location, if you set one (a place name and approximate coordinates, from a search or your device's GPS), used to sort and filter routes;
• your route preferences (for example, which route qualities — such as lighting, traffic, or surface — matter most to you);
• your acceptance of these Terms and this Privacy Policy.

We have no access to this data. If you delete the App, this data is deleted with it.

2. Information we receive when you browse the App

The App's core function — showing you routes, images, and GPX tracks — works by requesting content from our servers. These requests inevitably pass through standard web infrastructure (our API and content delivery network), which, like almost all internet services, keeps short-lived technical logs (such as IP address, timestamp, and requested URL) for security, abuse prevention, and reliability purposes. We don't tie these logs to an account or identity, because we don't have one for you, and we don't use them for analytics or profiling. These logs are retained only briefly and then deleted or aggregated.

When one of those requests fails unexpectedly, we also send a technical report of the failure to our error-tracking provider so that we find out about it and can fix it. Section 4 explains what those reports contain and what we deliberately leave out of them.

3. Optional analytics — off by default

If you switch on "Share anonymous usage data" (either during onboarding or in Settings → Privacy & data), the App sends basic usage events to PostHog, a product-analytics service engaged as our data processor and used on its EU-hosted infrastructure. This helps us understand which features are useful and where the App could be improved. When enabled, this can include:

• a randomly generated device identifier (not linked to your name or any account, because you don't have one);
• your IP address (used to derive an approximate country/region, and not retained in a form linked to you beyond that);
• basic device and app information (for example, OS version, app version);
• in-app events, such as which screens you view or which settings you change (for example, that you set a home location by search vs. GPS — we do not send the actual place name or coordinates to PostHog).

You can turn this off at any time in Settings → Privacy & data. When off, no analytics events are sent. This setting is remembered on your device.

Legal basis: your consent, given (or withdrawn) via the in-app choice. Recipient: PostHog, Inc., our data processor under UK GDPR, using its EU-hosted infrastructure. We use PostHog for two separate purposes — the optional analytics described in this section, and the crash and error diagnostics described in Section 4 — which rest on different legal bases, as each section sets out. PostHog's own privacy policy is at posthog.com/privacy. Retention: we keep this data for as long as reasonably needed for the analytics purpose described above, and no longer than 12 months.

4. Crash and error diagnostics

When something goes wrong, we need enough technical detail to find and fix it. This is the one kind of information we receive that isn't the result of you choosing to share anything, so it's worth setting out separately.

From our servers. When a request to our API, our website, or our admin tools fails unexpectedly, a technical report of that failure is sent to PostHog, acting as our data processor on its EU-hosted infrastructure. A report contains the error message, where in our code it occurred, and basic context such as the request method and which endpoint or page pattern was involved. It carries no identifier for you, and we deliberately leave out your IP address, request headers, cookies, and the query string of the address requested. Credentials and location data are automatically stripped before a report is sent.

Legal basis: our legitimate interests in keeping the App secure, reliable, and working (UK GDPR Article 6(1)(f)). We've weighed that against your interests: these reports are about our software's faults rather than your activity, contain no identifier for you, and are the only practical way to learn about failures that don't appear in testing. Retention: no longer than 12 months.

From the App on your device. The App itself does not currently send us crash reports. If that changes, it will only ever be as part of the optional analytics described in Section 3 — meaning only if you have switched those on, and never while they are off.

From Apple and Google. If your device is set to share crash and usage data with app developers — a setting in iOS and Android that you control, and that the App cannot switch on — Apple or Google may pass us a report when the App crashes. We see these through Apple's App Store Connect and Google Play Console, mostly as aggregated statistics. An individual report contains technical detail about the crash along with your device model and OS version, and does not identify you. You can turn this off in your device's privacy or diagnostics settings; because it is Apple's and Google's collection rather than ours, their privacy policies govern it.

5. Third-party mapping and search (Mapbox)

Route maps, and the location search used to set a home location, are provided using Mapbox. When you search for a place, your search text and IP address are sent to Mapbox to return matching results; this happens regardless of your analytics setting, because it's necessary for the search feature to work. Mapbox's own privacy policy governs their handling of this data. We do not receive or store your search history.

6. Opening routes in other apps

Each route links out to a saved route on Strava, and the App can also give you a GPX file to open elsewhere. Following either takes you out of the App, and from that point the receiving service's own privacy policy applies — Strava's if you open a route there, or that of whichever maps or watch app you send a GPX file to. If you have a Strava account and are signed in, Strava may associate that visit with it. We have no visibility into what happens once you leave. If you have switched on the optional analytics described in Section 3, the App records that you tapped the link, but nothing about what you do afterwards.

7. What we don't collect

We do not collect your name, email address, phone number, payment details, photos, contacts, or precise ongoing location tracking. We do not require or offer account creation. We do not sell your data, and we do not use your data for advertising or share it with data brokers.

8. Your rights

Under UK GDPR, you generally have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. In practice, because we don't collect any identifying information and don't operate accounts, we usually have no way to locate "your" data among anyone else's — the practical exercise of these rights mainly applies to the optional analytics data described in Section 3, which you control directly via the in-app toggle (turning it off, and optionally clearing the app's storage/reinstalling, is the most effective way to stop and reset this data). The crash and error diagnostics in Section 4 rest on our legitimate interests rather than your consent, so you have a right to object to them — though for the same reason as above, they contain nothing that would let us pick yours out. If you believe we hold data about you that this policy doesn't account for, contact us at sam@legsontour.com and we'll look into it.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

9. Children

The App is intended for a general audience and is not directed at children. We do not knowingly collect data from children, and given we collect no identifying information, we have no way to verify age.

10. International transfers

Analytics data and crash and error diagnostics are held on PostHog's EU-hosted infrastructure, as described in Sections 3 and 4. PostHog, Inc. is incorporated in the United States, so some access from outside the UK/EU (for example, for support or maintenance) is possible. Our core app infrastructure is hosted in the UK/EU. Where any data is transferred outside the UK, we rely on appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) as required by UK GDPR.

11. Security

We take reasonable technical and organisational measures to protect any data we process. However, no method of transmission or storage is completely secure, and we can't guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example as the App gains new features. If we make material changes, we'll take reasonable steps to let you know (such as an in-app notice) before they take effect.

13. Contact us

Questions about this policy, or about your data: sam@legsontour.com.

Legs on Tour Ltd, Flat 5, 6 Arundel House, Portland Square, Bristol BS2 8RR, United Kingdom.