Last Updated: April 8, 2026
ShadePath is a thermal wellness navigator that generates shade-optimized and sun-optimized walking routes using environmental and weather data.
ShadePath provides environmental comfort guidance for informational purposes only. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Always consult a healthcare professional before making health decisions based on environmental conditions.
Your privacy matters to us. This policy describes what data ShadePath collects, how we use it, and the choices you have. We designed ShadePath with a simple principle: your location data belongs to you and stays on your device.
The following data is processed entirely on your phone. It is never transmitted to our servers or stored in any database we control.
GPS coordinates — used to determine your location and generate walking routes. Never stored on our servers.
Walking distance — tracked locally to show your daily shade-protected mileage.
Route geometry and waypoints — the detailed path of your walking route exists only on your device.
Shade and sun scores — computed on your device using environmental data.
Profile photo — if you choose to set a profile avatar from your camera roll, it is stored on your device only and is never uploaded to our servers.
If you create an account by signing in with Apple or Google, we store the following in our database hosted on Supabase in the United States (East region). Our legal basis for processing this data is performance of the service you have requested by creating an account.
Authentication identity — a token from Apple or Google that verifies your account. We do not store your Apple or Google password.
Profile information — your display name, persona selection (such as Runner or Pet Owner), and preferences for units, voice guidance, and haptic feedback.
Route metadata — when you save a favorite or complete a walk, we store the route name, distance, shade score, route category, and a general origin label (such as "Near Bethany Lakes Park"). We never store GPS coordinates, route geometry, or waypoints on our servers.
If you tap "Continue without account," zero personal data is stored on our servers. All route data is processed on your device and exists only for the duration of your current session. When you close the app, it is gone.
ShadePath relies on the following services to function. Each receives limited data strictly necessary for its purpose. No user identity, personal information, or device advertising identifiers are sent to any of these services.
Mapbox — receives coordinates to render maps, generate walking directions, and snap waypoints to roads. This data is transmitted in real time and is not stored on our servers. Mapbox processes this data under their privacy policy.
Visual Crossing — receives coordinates to retrieve current weather conditions, UV index, and air quality for your route. No user identity is transmitted — only coordinates and our API key. Visual Crossing processes this data under their privacy policy.
Supabase — hosts our authentication system and user profile database in the United States. Processes data under their privacy policy.
In future updates, we may integrate additional services for error monitoring, anonymous usage analytics, subscription billing, and push notifications. Anonymous analytics will use internally generated anonymous identifiers only and will never include GPS coordinates, device advertising identifiers, or personal information. We will update this privacy policy before activating any new service.
We do not store GPS coordinates on our servers.
We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
We do not collect or use device advertising identifiers.
We do not access your contacts or files.
We do not track your browsing or search history.
We do not use your data to build advertising profiles.
ShadePath's servers are located in the United States. If you use ShadePath from outside the United States, your profile and route metadata will be transferred to and processed in the United States. We protect your data using encryption in transit (HTTPS) and Row Level Security on our database to ensure each user can only access their own data. By creating an account, you consent to this transfer. If you prefer not to transfer data internationally, you may use ShadePath without an account — in which case no data leaves your device.
In future versions, ShadePath may optionally integrate with wearable health and fitness devices such as smartwatches and fitness trackers to read heart rate and activity data for enhanced thermal wellness guidance. This data will be processed on your device only and will never be transmitted to our servers. You will be asked for explicit consent before any biometric or health data is accessed, and you can revoke that consent at any time in your device settings.
ShadePath is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Route history is retained for as long as your account exists, up to a maximum of 50 entries per user. Older entries are automatically removed when this limit is reached.
You can delete your account at any time from the Profile screen in the app. When you delete your account, all data associated with it — including your profile, favorites, and route history — is permanently deleted from our servers within 30 days.
Depending on where you live, you may have specific rights regarding your personal data.
All users — You can use ShadePath without an account (no data stored on our servers). You can delete your account and all server-side data at any time. You can revoke location permission in your device settings at any time.
European Economic Area, United Kingdom, and Switzerland (GDPR) — You have the right to access, correct, delete, and port your personal data. You have the right to restrict or object to processing. You have the right to withdraw consent at any time. Our legal basis for processing is performance of the service you requested by creating an account. To exercise these rights, contact us at the email below.
California (CCPA/CPRA) — You have the right to know what personal information we collect and the right to delete it. You have the right to opt out of the sale of personal information. We do not sell your personal information. To exercise these rights, contact us at the email below.
Brazil (LGPD) — You have the right to access, correct, anonymize, and delete your personal data. Contact us at the email below.
We will respond to all data rights requests within 30 days.
You can use ShadePath without creating an account — no personal data is stored on our servers. You can revoke location permission at any time through your device settings; ShadePath requires location access to generate routes but retains no location data when permission is revoked. You can delete your account and all associated data at any time from the Profile screen in the app.
We use Row Level Security on our database to ensure each user can only access their own data. Authentication is handled through Apple and Google's secure sign-in protocols. We do not store passwords. All data in transit is encrypted via HTTPS.
We may update this Privacy Policy as we add new features or as legal requirements change. We will notify you of material changes through the app or by email. The "Last Updated" date at the top of this page reflects the most recent revision.
Questions about your privacy or data rights?
support@shadepath.app