ARCH TRAILHome

Arch Trail Android app

Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains what personal data Arch Trail processes, why it is used, who receives it, how long it is kept, and which rights you have.

Arch Trail is operated by Toffe Peer, based in the Netherlands, which acts as the controller for the processing described here. For privacy questions or requests, contact privacy@archtrail.nl. You can request account deletion through the Delete Account page.

1. About Arch Trail

Arch Trail is an independent location-based collecting app for discovering McDonald’s restaurant locations, recording visits, building a personal collection, tracking progress, earning achievements and ranks, and using friends, group and ranking features.

Arch Trail is not affiliated with, endorsed by, or sponsored by McDonald’s Corporation or any subsidiary or franchisee.

2. Data we process

Account and authentication data

When you sign in, we process your internal user ID, email address, display name, profile image URL, account creation and update times, authentication method, and security tokens. Google sign-in can provide your Google account identifier, verified email address, name and profile picture. Email-link sign-in uses a one-time token and your email address. Passwords are not collected or stored by Arch Trail.

Access tokens are valid for one hour. Refresh-token hashes can be kept for up to 90 days unless they are revoked or the account is deleted. One-time login records expire after 10 or 15 minutes, depending on the sign-in method.

Visits, collection and verification

For signed-in users we store visited location IDs, visit date and optional time, visit type, notes, companion text, favourite status, whether a photo was submitted, verification status, an evidence key used to prevent duplicate visits, and the calculated distance between the device and the location during verification. We do not store the device’s raw GPS coordinates as part of a visit record.

Progress, achievements, ranks and collection totals are calculated from visit data. Local copies of visits, preferences and selected photo references can also be stored on your device. Android cloud backup is disabled for the app.

Location data

With your permission, Arch Trail uses approximate or precise device location to show nearby locations, position the map, calculate distance and verify a visit. The app requests location when you use a relevant feature; it does not collect a continuous background location history. Android or its location providers may process the request under their own terms.

When you suggest a missing location, the coordinates you choose, the address, city, country, map URL, note and submitted IP address may be stored with that suggestion. The submitted IP address is cleared after 30 days. Location suggestions are not linked to an Arch Trail account.

Photos and submitted content

If you choose a photo using Android’s document picker or invoke a camera app, Arch Trail processes the selected image and its local reference. Arch Trail does not declare a broad Android camera or photo-library permission. Photos explicitly submitted for community use are resized, converted to JPEG, uploaded to our server and linked to your account while awaiting moderation. Approved photos can become publicly visible as a location photo. Rejected photos remain restricted to authorised administration until removed.

Profile edits and a profile photo selected inside the current app build are stored locally on the device. A Google-provided profile image URL may be stored on the server. Group images are uploaded as encoded JPEG data and stored with the group.

Friends, groups and rankings

If you use social features, we process your username, discoverability choice, display name, profile picture, follow requests and connections, blocked accounts, group memberships, group invitations, group name, description and image. Group members can see ranking information derived from verified visit totals, including score and position. Depending on your discoverability and relationships, other users can see your username, display name, avatar, collection totals, countries, rank and relationship status. Your email address is not shown through these social features.

Push notifications and device data

If you enable notifications, we process a Firebase Installation ID, Firebase Cloud Messaging registration information, platform, app version, locale, time zone, notification setting, activity timestamps and delivery results. These are used for service messages, community notifications and moderation outcomes. Google Firebase processes device and delivery data under Google’s terms.

Technical, security and communications data

Our servers and reverse proxy may temporarily process IP addresses, request times, requested paths, user-agent information and error details for security, rate limiting and troubleshooting. Location suggestions store the submitting IP address. Administrative changes store the administrator’s email, IP address, user agent and an audit record. If you contact us or submit a deletion request, we process the contact details and message needed to handle it.

Arch Trail does not currently include a third-party analytics SDK or crash-reporting SDK. Application and server errors may still appear in local Android system logs or restricted server/container logs. We do not use advertising identifiers.

Purchases

The current Arch Trail code does not use Google Play Billing and does not process purchase tokens or payment details. Google Play may independently process distribution or purchase information under Google’s privacy policy. We will update this policy before introducing app-managed billing or entitlements.

3. Why we use data

Arch Trail does not sell personal data.

4. Legal bases

Where the GDPR applies, account, visit, collection and requested social functions are processed to perform our agreement with you. Device permissions and optional uploads are processed with your choice or consent where required. Security, abuse prevention and limited operational logging rely on legitimate interests, balanced against your rights. We may process information to comply with a legal obligation.

5. Permissions

The Android app declares internet, approximate location, precise location and notification permissions. It asks for location or notifications when relevant. Photo selection uses the Android document picker and camera capture uses an external camera activity, so the current app does not declare broad camera or media-library permissions. You can deny or revoke permissions in Android settings, although related features may stop working.

6. Service providers and sharing

We share data only where needed to operate Arch Trail, respond to lawful requests, protect users or enforce rights. Current providers and recipients include:

These providers process data under their own privacy terms and, where they act for us, applicable contractual data-protection obligations. Some provider processing can occur outside the European Economic Area using an adequacy decision, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or another lawful safeguard.

7. Retention and deletion

Account, visit, collection, social, push-device and submitted-photo records are generally retained while your account is active. Expired authentication records are periodically eligible for deletion. A submitted photo may remain available while it is being reviewed or published.

When your account is deleted through the authenticated in-app route or the verified web process, the active database account, refresh tokens, visit and collection records, push-device records, social profile, connections, blocks, memberships, invitations and account-linked photo submissions are deleted. Uploaded visit-photo files and published location-photo references created from those submissions are also removed. Local app data for that account is cleared when deletion is completed in the app.

Backups and logs. Operational database backups are retained for no more than 90 days under the configured rotation. A deleted account may remain in a protected backup until that backup expires. If a backup is restored, completed deletion requests must be re-applied before normal operation. Arch Trail API container logs are size-rotated with no more than three files of 10 MB each. The public proxy has no request access log enabled. Restricted administrative security audit records may be retained while necessary to protect the service, investigate an incident or meet a legal obligation.

Anonymous or aggregated information that can no longer reasonably identify you may be retained. Google and other independent providers may hold information under their own retention rules.

8. Account and data deletion

You can start deletion from the account or privacy section in the Android app. You can also use https://www.archtrail.nl/delete-account. The web process sends a time-limited confirmation link to the account email address so another person cannot delete your account merely by knowing your email.

9. Security

We use encrypted network connections, hashed one-time and refresh tokens, short-lived access tokens, Android Keystore encryption for sign-in tokens, access controls and restricted administration. No internet-connected service can be guaranteed completely secure.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent where processing relies on consent. We may need to verify your identity. Contact privacy@archtrail.nl or use the account deletion process.

You may lodge a complaint with a competent supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

11. Children

Arch Trail is not specifically directed at young children. If you are below the age at which you can consent to data processing in your country, use Arch Trail only with the involvement of a parent or legal guardian where required. If we learn that data from a child was processed unlawfully, we will take appropriate steps to remove it.

12. Changes and contact

We may update this policy when the app, providers, processing or law changes. The latest version and update date will be published at https://www.archtrail.nl/privacy.

Toffe Peer
Netherlands
Email: privacy@archtrail.nl
Website: www.archtrail.nl