Privacy Policy

How we collect, use, and protect your information

Last Updated: January 3, 2026

Welcome to DuckTrails! We are committed to protecting your privacy and ensuring you have a positive experience using our mobile application and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DuckTrails mobile application.

By using DuckTrails, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us when you:

  • Create an Account: Email address, username, password, and profile photo (optional)
  • Complete Your Profile: Jeep model/type, display name, and biographical information (optional)
  • Create Duck Profiles: Duck names, descriptions, personality traits, birth dates, and photos
  • Scan Ducks: Comments, notes, and photos you add when scanning

1.2 Location Information

DuckTrails collects and processes location data to enable core functionality:

  • GPS Coordinates: Collected when you scan a duck or register a new duck to track journeys
  • Location History: Stored to map duck travels and calculate distance achievements
  • Approximate Location: Used for community features, leaderboards, and geographic achievements

Important: You can disable location permissions in your device settings, but this will limit core features of the app, including duck scanning and journey tracking.

1.3 Device and Technical Information

We automatically collect certain information about your device and usage:

  • Device model, operating system, and version
  • Unique device identifiers (Device ID, advertising ID)
  • IP address and general location (city/country level)
  • App usage statistics and crash reports
  • NFC hardware capabilities and usage

1.4 Photos and Media

When you upload photos for your profile or duck profiles, we:

  • Store photos in secure cloud storage (Firebase Cloud Storage)
  • May process photos to optimize file size and format
  • Display photos publicly on duck profiles and user profiles
  • Do not access other photos on your device without explicit permission

1.5 NFC Data

DuckTrails uses NFC (Near Field Communication) technology:

  • We write unique duck identifiers to NFC tags you provide
  • We read NFC tags to identify and scan ducks
  • We do not collect any other data from NFC tags or devices
  • NFC tags contain only a unique DuckTrails identifier, no personal information

1.6 User-Generated Content

Content you create is collected and stored:

  • Duck descriptions and personality profiles
  • Scan comments and notes
  • Activity feed posts and interactions
  • Achievement progress and unlocks

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core App Functionality

  • Create and manage your user account and duck profiles
  • Track duck scans and journeys across locations
  • Calculate distances traveled and geographic achievements
  • Display duck locations on maps
  • Enable NFC scanning and duck identification

2.2 Community Features

  • Display your profile to other users
  • Show your ducks and their journeys publicly
  • Generate leaderboards and community statistics
  • Feature outstanding ducks in the "Duck of the Week"
  • Enable social interactions and activity feeds

2.3 Notifications

  • Send push notifications when your ducks are scanned
  • Alert you when achievements are unlocked
  • Notify you of community events and featured content
  • Send service updates and important announcements

2.4 Analytics and Improvements

  • Analyze app usage patterns to improve user experience
  • Monitor and fix technical issues and crashes
  • Develop new features based on user behavior
  • Optimize app performance and reliability

2.5 Security and Fraud Prevention

  • Verify user identities and prevent fraudulent accounts
  • Protect against spam, abuse, and malicious activity
  • Enforce our Terms of Service
  • Comply with legal obligations

3. How We Share Your Information

3.1 Public Information

The following information is public by design:

  • Duck Profiles: Names, descriptions, photos, locations, and scan history
  • User Profiles: Username, profile photo, Jeep type, achievements, and statistics
  • Leaderboards: Rankings, scan counts, and distance records
  • Activity Feeds: Recent scans and duck movements

Note: This information is accessible to all DuckTrails users and may be viewable on our website at ducktrails.com/d/[duckId]

3.2 Third-Party Service Providers

We share information with trusted service providers who assist us in operating the app:

  • Firebase (Google): Authentication, database, cloud storage, push notifications, and analytics
  • Cloud Infrastructure: Hosting and data storage providers
  • Analytics Services: Usage analytics and crash reporting
  • Communication Services: Email delivery for account notifications

These providers are contractually obligated to protect your data and use it only for services provided to DuckTrails.

3.3 Legal Requirements

We may disclose your information if required to:

  • Comply with legal obligations, court orders, or government requests
  • Enforce our Terms of Service or other agreements
  • Protect the rights, property, or safety of DuckTrails, users, or the public
  • Prevent or investigate fraud, security issues, or technical problems

3.4 Business Transfers

If DuckTrails is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Storage and Security

4.1 Where We Store Data

Your data is stored on secure servers provided by Firebase and Google Cloud Platform, located primarily in the United States. By using DuckTrails, you consent to the transfer of your information to the United States and other countries where our service providers operate.

4.2 Security Measures

We implement industry-standard security measures:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of sensitive data at rest
  • Secure authentication using Firebase Authentication
  • Regular security audits and updates
  • Access controls and monitoring

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4.3 Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account:

  • Your personal profile information is deleted within 30 days
  • Duck profiles you created may remain visible with anonymized ownership
  • Scan history and locations are retained for duck journey tracking
  • Backups may retain data for up to 90 days

5. Your Privacy Rights and Choices

5.1 Access and Update Information

You can access and update your information through the app:

  • Edit your profile in Settings > Edit Profile
  • Update duck profiles from your Duck Collection
  • Review your scan history and activity
  • Manage notification preferences

5.2 Location Permissions

You can control location access:

  • Disable location services in your device settings
  • Choose "While Using the App" for limited access
  • Note: Disabling location will prevent duck scanning and journey tracking

5.3 Push Notifications

You can manage notifications:

  • Disable notifications in Settings > Notifications
  • Control notification types (scans, achievements, community)
  • Turn off notifications in your device settings

5.4 Analytics Opt-Out

You can limit analytics collection:

  • Toggle "Share Analytics" in Settings > Privacy
  • Use your device's "Limit Ad Tracking" feature

5.5 Account Deletion

You have the right to delete your account:

  • Go to Settings > Privacy > Delete Account
  • This action is irreversible and will remove your personal data
  • Duck profiles you created may remain with anonymized ownership
  • Contact privacy@ducktrails.com for assistance

5.6 Regional Privacy Rights

For California Residents (CCPA)

You have the right to:

  • Know what personal information we collect and how it's used
  • Request deletion of your personal information
  • Opt-out of sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your rights

To exercise these rights, contact privacy@ducktrails.com

For European Residents (GDPR)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with supervisory authorities

To exercise these rights, contact privacy@ducktrails.com

6. Children's Privacy

DuckTrails is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@ducktrails.com, and we will delete such information.

7. International Data Transfers

DuckTrails is based in the United States, and your information is processed and stored in the United States and other countries. These countries may have different data protection laws than your country of residence. By using our services, you consent to the transfer of your information to countries outside your country of residence.

8. Third-Party Links

Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the new Privacy Policy in the app
  • Updating the "Last Updated" date
  • Sending a push notification or email for material changes

Your continued use of DuckTrails after changes constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

This Privacy Policy is effective as of January 3, 2026.