Privacy Policy

Last updated 20 September 2026. Applies to the Hitrekk iOS app and to hitrekk.com.

Hitrekk is a hiking app made by Four Suit Studio in Leiden, the Netherlands. It exists to store your hikes and show them on a map. This page lists exactly what it stores, where that data lives, who else can see it, and how to get rid of it. There is no advertising in Hitrekk and no analytics or tracking software of any kind.

Who is responsible

Four Suit Studio, Leiden, the Netherlands, is the data controller. Questions and requests go to robin@foursuitstudio.com.

What Hitrekk stores

Your account

You sign in with Apple, with Google, or with an email address and password. Hitrekk stores your email address, your name if the sign-in provider passes one on, and an account id. Passwords for email sign-in are stored hashed. Signing in with Apple or Google means Apple or Google handles that step under their own privacy terms; Hitrekk only receives the resulting identity token, your email address and, on first sign-in, your name.

Your routes

Every hike you import from a GPX file or record in the app is stored as a route: the track points (coordinates, elevation and timestamps), the route name and colour, computed statistics such as distance, elevation gain and moving time, any waypoints you add, and whether a planned route has been walked. Planned routes and trips (groups of hikes) are stored the same way.

Your photos

Photos you choose to add are uploaded together with the location and time read from the photo's own metadata, so they can be placed on the matching route. Hitrekk only reads photos you pick; it never scans your photo library.

Your location while recording

Hitrekk uses your precise location for one thing: recording a hike. While a recording is running the app receives location updates in the foreground and in the background, so the track continues while the screen is off or another app is in front. Those points become the recorded route described above and are stored as part of it. When no hike is being recorded, Hitrekk does not receive your location. You can pause or stop a recording at any time, and you can turn location access off entirely in iOS Settings (recording then stops working; everything else keeps working).

On your device

A copy of your routes, photos and any offline maps you download is kept on the device so the app opens instantly and works without a connection. This copy is removed when you delete the app.

Where the data lives

Account details, routes, trips and photos are stored with Supabase, the hosting provider Hitrekk uses for its database, file storage and sign-in. The Hitrekk project runs in Supabase's United States region (AWS us-east-2, Ohio). Supabase acts as a processor for Four Suit Studio and does not use the data for its own purposes.

Map providers

Map images are not made by Hitrekk. When you look at the map, the app requests map tiles directly from the provider of the map style you have chosen. Like any web request, this shows the provider your device's IP address and which tiles were requested, which reveals the area you are looking at. Hitrekk does not send them your account or your routes. The providers are:

• OpenFreeMap (the base map, data from OpenStreetMap contributors)
• OpenStreetMap tile servers and Waymarked Trails (the hiking trails overlay)
• AWS Open Data terrain tiles (the 3D relief)
• Esri World Imagery (the satellite layer)
• OpenTopoMap
• National mapping agencies, when their map is chosen: Kartverket (Norway), Lantmäteriet (Sweden), swisstopo (Switzerland), BKG (Germany), IGN (France) and Ordnance Survey (United Kingdom)

Downloading a map for offline use fetches the tiles for the area around a route in one go and stores them on the device only.

Share links

You can create a link to your map, to a single hike, or to a trip. Anyone who has the link can open it on hitrekk.com and see the routes, statistics and photos it points at, without signing in. Links are not listed anywhere; they only work for people you give them to. Do not share a link if you do not want those routes to be public.

What Hitrekk does not do

• No advertising, and no advertising identifiers.
• No analytics, crash reporting or tracking SDKs. The app talks to Supabase, to the map providers listed above, and to Apple or Google during sign-in, and to nothing else.
• No selling or sharing of your data with anyone.
• No location collection outside a hike you are recording.

How long data is kept

Your data is kept for as long as you have an account. Routes and photos you delete in the app are removed from the server at that moment. When an account is deleted, everything stored under it is deleted.

Deleting your data

Inside the app you can delete individual routes, photos and trips, or delete all routes and photos in one go from the menu on the Routes screen. To delete your account and everything stored under it, email robin@foursuitstudio.com from the address you signed up with; the account is removed within a few days and you get a confirmation.

Your rights

Under the GDPR you can ask for a copy of the data Hitrekk holds about you, have it corrected, have it deleted, or object to how it is used. Email robin@foursuitstudio.com. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Children

Hitrekk is not aimed at children under 16 and does not knowingly store their data.

Changes

If this policy changes, the new version is published here with a new date at the top.