Privacy
OutFour is run by StormsData L.L.C. It has no ads and no analytics or tracking code. Your saved spots, your lakes, your settings and your trips stay on your device, and Android's own backup can copy your spots, lakes and settings to your Google account. Accounts are optional: if you create one and turn on sync, your spots and My lakes are also stored in your account.
Your location is read when you tap to show or save it, and while you record a trip, including when the screen is off. Recorded trips are stored on your phone until you delete them. If you turn on sync, each saved spot's coordinates are uploaded to your account, so a spot saved from your location includes where you were. If you share a trip with Include my position on, the app sends one point rounded to about 150 m, every 10 minutes, when you check in or change the share, and when you tap Send update.
Your account holds your email address (stored encrypted) if you use one, an account ID, the ID Google gives you if you use Google, and, if you turn on sync, your spots and My lakes, with a spot's earlier version for 30 days. It also keeps records of your signed-in sessions, and a record of account events for 90 days. Cloudflare runs our account server and its database. Supabase verifies sign-ins. We request deletion of its profile of you after verification and retry if that fails; Supabase keeps its authentication logs for 1 hour and its request logs for 1 day. SMTP2GO sends the codes we email you and keeps its record of each message for up to 35 days. If you use your Google account, Google tells us your email address and an ID for you. If you use Facebook, Facebook shares your name, picture and email address with Supabase; we keep only the ID Facebook gives you. Connections to our services use HTTPS.
You can delete your account in the app, in Settings › Account › Delete account, or at www.outfour.net/account/delete. This removes your account, your synced spots and My lakes, your signed-in sessions and any trip link you share. For security, we keep a coded account ID and the deletion date, account-event records for up to 90 days, and coded rate-limit records for up to 32 days. Backup copies are gone within 35 days. Our service providers keep limited records, as the full policy describes.
A trip link shows your trip status and times, your back-by time and, if you choose, the lake's name and that point. It is encrypted on your phone and only the link holds the key: anyone with the link can see the trip, and we can't. It ends 2 hours after you stop sharing or the trip ends, or 24 hours after it starts, and we delete it within 15 minutes after that. If the point is beyond our map, the trip page offers an Open in Google Maps link; nothing goes to Google unless the person viewing the trip taps it.
To show the map, your device downloads map and lake files from outfour.net. Like any website request, each one carries your IP address and ordinary browser details. Cloudflare delivers the files and keeps its own request records for about a month. Our server, at OVHcloud, logs only the file, the answer, its size and the time, never an IP address, and keeps that log for 7 days. We keep only daily request totals.
Questions: support@outfour.net