Ridgeline privacy policy

Who operates Ridgeline

Ridgeline is operated by LZR Enterprises (collectively, “Ridgeline,” “we,” or “us”). This policy covers the Ridgeline web, iOS, Android, macOS, and Windows applications and the services they use. Questions can be sent to accounts@ridgelinehunter.com.

Data we process

• Account and security data: name, email address, a salted password hash, sessions, verification records, IP address, device/browser description, and security events.
• Field content: routes, waypoints, notes, route groups, shared-layer permissions, folders, optional home-address preference, and other content you save or share.
• Photos: images you choose to import or capture, thumbnails, filenames, capture details, and location metadata when present or when you deliberately place a photo on the map.
• AI features: the provider and model you select, encrypted provider credentials, prompts, tool inputs, results, and limited success/failure records needed to operate Copilot.
• Reliability and product data: bounded app events, routes within the app, version, performance measurements, and scrubbed error details. Ridgeline does not use advertising SDKs or cross-app tracking.

A live GPS fix and heading remain in device memory and are not synced as location history. Location becomes account-backed only when you explicitly save it in field content, attach it to a photo, or save a related preference.

How we use data

We use data only to authenticate your account, synchronize and restore your private field content, provide maps and live conditions, perform actions you request, share only the layers you choose with named Ridgeline accounts, protect the service, deliver account emails, troubleshoot failures, and improve Ridgeline. Ridgeline does not sell personal data and does not use it for third-party advertising or tracking.

Homepage experiments

We may compare homepage versions using a random, first-party browser identifier kept for up to 90 days. We record the version shown, broad traffic channel, mobile or desktop category, and whether an account request is created. If you request access, we can link that request to approval, registration, and a saved plan to understand whether the page was useful. The experiment record does not copy your name, email, IP address, raw referrer, or campaign text. It is removed after 180 days, or when its linked account request is deleted. We do not enroll requests carrying Do Not Track or Global Privacy Control signals. These experiments do not use advertising trackers or identify you across unrelated websites.

Service providers and external requests

Cloudflare provides Ridgeline’s application hosting, private database, object storage, email delivery, and operational services. Map, search, weather, fire, imagery, and directions requests may be sent to the provider selected for that feature. If you enable Copilot, prompts and relevant map/plan context are sent to the AI provider you select—OpenAI, Anthropic, or Google—using the credential you provide. Those providers process requests under their own terms and privacy policies.

Storage, security, and retention

Account records and synchronized content are kept while your account is active. Private photos are stored in an account-scoped object store. Passwords are not stored in plaintext, provider keys are encrypted before backend storage, transport uses HTTPS, and account APIs enforce authenticated ownership. Incremental sync receipts are normally pruned after 90 days and bounded operational telemetry after 365 days. Backups, security records, or provider logs may remain for their limited backup, fraud-prevention, legal, or security lifecycle before deletion.

Offline map packs and some caches stay only on your device. You can remove individual packs in Ridgeline, clear the app’s site/storage data, or uninstall the app.

Your choices and account deletion

System settings control camera, selected-photo, and foreground location access. You can edit or delete individual routes, photos, folders, shares, and AI credentials in Ridgeline. To permanently delete the entire account, open Account settings on the web or Settings in the mobile app, choose Delete account, enter the current password, and confirm. Ridgeline immediately removes the account and account-backed records and queues private photo objects for durable deletion. This action cannot be undone.

Changes to this policy

We may update this policy when Ridgeline’s data practices or legal obligations change. The current version and effective date will remain available at this URL.