Plain-English summary: Trailmark collects only what is necessary to make the app work — your email, your travel logs, and the photos you choose to upload. We do not sell your data, we do not run ads, and you can delete your account and everything associated with it at any time.
Trailmark ("Trailmark", "we", "us", "our") is a mobile application developed and operated by Nephthali Salam trading as Atlas Kane. Trailmark is a digital travel passport app available on iOS and Android that allows users to log countries they have visited, attach photos and notes to those visits, and view their travel history on an interactive world map.
For the purposes of applicable data protection law, Nephthali Salam is the data controller responsible for your personal information.
Contact: nephthali.salam@brickous.com
Website: https://trailmark.brickous.com/
We collect data in two ways: data you provide directly, and limited technical data generated automatically by the app.
| Category | Data collected | When collected |
|---|---|---|
| Account | Email address, hashed password | At sign-up |
| Profile | First name, last name, display handle, home country, nationality, profile photo | During onboarding; editable at any time |
| Passport | Auto-generated passport number (TM-XXXXXXXX), account creation date | Automatically at sign-up |
| Visit records | Countries visited (ISO codes), trip date ranges (month/year), cities visited, free-text notes | When you log a visit |
| Photos | Images you upload, captions, place name and coordinates from Google Places (when you attach a location tag) | When you add photos to a visit |
| Location | Device GPS position (used to identify your current country in real time; not stored) | Only when you tap "locate me" |
| Session | Auth tokens (JWT access and refresh tokens stored locally on-device in encrypted storage) | At login; refreshed automatically |
| Crash reports | App state, stack traces, device type, OS version (via Sentry) | Automatically on app errors or crashes |
What we do NOT collect: We do not collect your contacts, calendar, microphone input, persistent background location, payment information, or any data from other apps on your device. We do not run advertising SDKs or collect any data for advertising purposes.
We use the data we collect for the following purposes:
We process your data on the legal bases of contract performance (to provide the service you signed up for), legitimate interests (to maintain the security and stability of the app), and consent (for location and camera access, which require your explicit permission).
Trailmark requests access to your device's GPS location in the foreground only — meaning the app can only read your location while it is open and actively in use. We never access your location in the background.
Location access is used for a single purpose: when you tap the "locate me" button on the map screen, the app reads your GPS coordinates, performs a reverse geocode to identify which country you are in, and suggests logging a visit to that country. Your raw GPS coordinates are never stored on our servers.
When you attach a location tag to a photo, you search for a place by name using Google Places Autocomplete. The coordinates stored are those returned by Google Places for the place you selected — not your live GPS position.
You may deny or revoke location permission at any time in your device Settings. Denying location permission does not prevent you from using any core features of the app; you can still log visits, add photos, and manage your passport manually.
Trailmark requests permission to access your photo library and camera when you attempt to add a photo to a visit. These permissions are requested at the point of use and are never accessed silently in the background.
You can revoke photo or camera permissions at any time in your device Settings. Existing uploaded photos remain in your account until you delete them or delete your account.
Trailmark uses a small number of trusted third-party services to operate. Each has its own privacy policy:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage | All user account, profile, visit, and photo data. Supabase runs on AWS infrastructure. |
| Google Maps Platform | Interactive map rendering (Android), Places search for location tags | Place search queries you type; coordinates from place selections. No personal identity is sent to Google. |
| Sentry | Error monitoring and crash reporting | Anonymised app state, stack traces, device model, OS version when a crash occurs. No personal travel data is sent to Sentry. |
| Expo (by Expo.io) | App build and update infrastructure | App bundle delivery. Expo may collect anonymised app analytics as per their privacy policy. |
We do not share your data with any advertising networks, data brokers, or analytics companies. We do not sell your personal information.
Your data is stored in Supabase, which is hosted on Amazon Web Services (AWS). Data is protected using the following measures:
expo-secure-store, which uses the iOS Keychain and Android Keystore system — encrypted hardware-backed storage.We take security seriously, but no system is 100% immune. If you discover a security vulnerability, please contact us responsibly at nephthali.salam@brickous.com.
We retain your personal data for as long as your account is active. Specifically:
Depending on your country of residence, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at nephthali.salam@brickous.com. We will respond within 30 days.
Trailmark is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at nephthali.salam@brickous.com and we will delete the information promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify users within the app or by email.
Your continued use of Trailmark after any changes take effect constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please get in touch:
We aim to respond to all privacy-related enquiries within 5 business days.
nephthali.salam@brickous.com