XPLO is provided by Christian Casariego, Hardstrasse 24, Embrach, Switzerland. For privacy questions or requests, email contact@xplo-outdoor.ch. This notice covers the XPLO iPhone app, its companion features and this website.
The essential distinction
Your saved activities, routes and imported Health data are stored locally in the current release. XPLO does not require an XPLO account or sync that library to an XPLO server or iCloud. Some features still use the internet: maps, route planning, nearby places, weather, mountain information and purchase validation connect to their service providers.
XPLO does not sell your personal data or use your activity and Health records for advertising. There are no advertising SDKs or general behavioural analytics in the current app. Purchase reporting is described separately below.
Your local library
Depending on what you use, the app stores GPS tracks, dates, distance, elevation, activity statistics, routes, titles, notes and equipment preferences. Optional profile values, such as height, weight, birth year or cycling power settings, support the calculations and features you select. These records remain on your device unless you choose to export or share them.
The activity library and sensitive profile, Health, recording-recovery and paired-device delivery files are excluded from device backups. Keep separate exports of important activities and routes. Ordinary app preferences may still follow Apple's device-backup settings. Removing the app can permanently remove local records that you have not exported.
This release does not remove copies created by an earlier iCloud-enabled version, older device backups or previous exports. It also does not automatically retrieve records that exist only in an earlier cloud copy. Those copies must be managed separately in the relevant service.
Permissions are feature-specific
- Location: GPS supports recording, navigation, nearby places and mountain alignment. Background location supports an active recording or navigation session when the screen is locked.
- Apple Health: with your permission, XPLO can read selected workouts, routes and measurements, and write saved workouts. Read and write access are separate choices. Health access is optional for ordinary GPS recording.
- Camera and photos: mountain AR processes the camera view on your device. Photo matching uses the access you grant to find relevant photos locally. XPLO does not automatically upload the camera view or photo library.
- Motion and Bluetooth: device motion helps align mountain views; Bluetooth supports sensors you pair, such as heart-rate sensors.
- Apple Watch and widgets: selected workout and route data transfers between your paired devices. Widgets read a local shared summary and route image; generating a map image may request a map area from Apple.
Manage access in iOS Settings, Apple Health and XPLO's You settings. Withdrawing permission stops future access; it does not delete records already imported into XPLO or exported to another app.
When a feature goes online
A map request identifies a map area. Route planning sends the points needed to calculate your route. Nearby-place searches, terrain and weather requests identify the relevant location or region. Providers also receive ordinary network information, such as your IP address, and may keep request logs.
Depending on your selected map and feature, services include Apple Maps/WeatherKit, swisstopo, OpenStreetMap and Overpass services, OpenFreeMap, Valhalla, BRouter, AWS-hosted Tilezen terrain, and regional map layers such as basemap.at, IGN, basemap.de, OpenTopoMap and Waymarked Trails. Mountain details can request public information from Wikipedia and Wikidata. Source and licence credits are available in the app.
Importing Health workouts does not automatically send their routes for online surface analysis. If you explicitly choose Analyze surfaces for an activity, the route coordinates are sent to map providers for that request. The app explains this before you choose the analysis.
Full coordinate links can be read locally. When you import a shortened Apple or Google Maps link, XPLO may contact that provider to resolve it; address lookup uses Apple's geocoding service. Opening an external information link is also a separate connection to that website.
Relevant provider information includes Apple's privacy policy, the Swiss geoportal's legal information, OpenFreeMap, BRouter's privacy policy and Wikimedia's privacy policy.
Purchases and access
Apple handles App Store payments. RevenueCat validates purchases, restores access and provides purchase reporting. This involves purchase receipts and transaction details, a generated anonymous purchase identifier, and technical service information such as the app and operating-system version. XPLO does not attach your name, email, route library, photos, body measurements or Health records to that identifier. Automatic device-identifier collection and RevenueCat SDK diagnostics are disabled in the current configuration.
Purchase reporting is still off-device processing, even without a named XPLO account. XPLO does not receive your payment-card details. A local date-only safeguard helps prevent a trial from restarting after reinstall; this purchase-access record may survive removal of the app in the system Keychain. See RevenueCat's privacy policy.
Diagnostics and support
XPLO keeps a limited diagnostic history locally: fixed event types, numeric error codes, app/OS versions and performance summaries. This history is bounded to 200 events, 30 days and 128 KiB. It is not automatically uploaded. You can preview a report and decide whether to share it.
If you email support, Christian Casariego receives your email address, message and any attachments you choose to send, through the email services used to deliver and handle that correspondence. We use that material to answer you, investigate the issue and meet any applicable legal obligations. We retain it while needed for those purposes, including resolving a continuing issue or dispute, and then delete it when it is no longer needed. Avoid sending an entire activity library or sensitive Health information when a description of the problem is enough.
This website
This is an informational website hosted through Cloudflare. We do not add advertising pixels, a newsletter database or visitor-analytics scripts. Cloudflare processes connection and request information, which can include your IP address, requested page, browser information and request time, to deliver and protect the website. Service logs and security information follow the provider's handling and retention rules. See Cloudflare's privacy policy.
We do not use cookies to follow you across websites or personalise advertising. Your browser still caches website resources, and the hosting provider may use technical measures needed for delivery or security. Following an external link opens a service with its own privacy practices.
If you choose a light or dark appearance, this website saves that preference locally in your browser so it can apply on your next visit. This functional preference is not sent to XPLO or used for advertising or visitor analytics. Change it with the appearance switch, or remove it by clearing this website's stored browser data. Without a saved choice, the website follows your device's appearance setting.
Retention, deletion and your choices
- Saved activities and routes remain locally until you delete them or remove the app. Existing library entries remain viewable and exportable after trial access ends.
- Automatic terrain and place caches are bounded and can be replaced or cleared. You can remove downloaded packs in Offline maps. Downloaded data is separate from saved activities.
- Interrupted recording and transfer files remain until completion, acknowledgement or explicit discard, so a temporary interruption does not itself erase an unsaved recording.
- Apple Health records, exported files, old cloud copies and data you shared with other apps are independent copies. Deleting them in one place does not delete them everywhere.
- Purchase and provider records follow the retention necessary for purchase validation, fraud prevention, service operation and applicable legal obligations. Deleting XPLO does not itself delete those off-device records.
International processing and your rights
Your local library stays on your device, but requested online services and website delivery can involve processing outside Switzerland. The recipients below depend on the features and map layers you use. An operator's home country is not necessarily the country of every server handling a request.
- Apple — Ireland and the United States, with international processing. Apple provides native maps, geocoding, WeatherKit and App Store services. For people in Switzerland, the EEA and the UK, Apple identifies Apple Distribution International Limited in Ireland as the relevant privacy controller and describes general storage in the United States. Its privacy policy describes worldwide processing and Standard Contractual Clauses for international transfers of data from those regions.
- RevenueCat — United States. RevenueCat, Inc. processes purchase-access information and states that it stores customer data on AWS in the United States. Its data-processing terms incorporate Standard Contractual Clauses, including Swiss adaptations, for applicable restricted transfers. Its privacy policy explains onward processing and contractual protections for service providers.
- Cloudflare — United States and EEA storage; globally distributed delivery. Cloudflare, Inc. delivers and protects this website through its international network and can access information from other countries. Its transfer disclosure identifies the Swiss–US Data Privacy Framework for applicable US transfers, with Standard Contractual Clauses as a fallback and for other international transfers.
- swisstopo — Switzerland; disclosed cloud hosting in Ireland and Germany. The Federal Office of Topography operates the Swiss map, elevation and terrain services. It describes using AWS cloud servers in Ireland and Frankfurt, Germany. A Swiss map source therefore does not mean that every request stays in Switzerland.
- Regional map operators — Austria, France and Germany. The selectable layers include basemap.at, provided by the City of Vienna and Austrian provinces; IGN's Géoplateforme in France; Germany's Federal Agency for Cartography and Geodesy for basemap.de; and OpenTopoMap's operator in Germany. These identify the recipients' locations, rather than a promise that all delivery infrastructure is restricted to those countries.
- OpenStreetMap query and routing services — independent operators. The main Overpass service and the Valhalla endpoint are operated by FOSSGIS e.V. in Germany. The Swiss Overpass endpoint is operated by the Swiss OpenStreetMap Association in Switzerland. Both Private.coffee fallback addresses, including the former Kumi address, are operated by Private.coffee in Austria; its privacy notice identifies Austria for public-facing processing. A fallback can therefore send the requested area to a different operator when an earlier service cannot respond.
- OpenFreeMap — Hungary, with possible Cloudflare delivery. Hyperknot Software Kft. in Hungary operates the vector-map service. Its privacy policy also identifies Cloudflare as a possible delivery provider. The same globally distributed delivery considerations apply when Cloudflare is used.
- Tilezen terrain on AWS — United States. Outside the Swiss terrain service, XPLO can request Mapzen/Tilezen tiles from the public AWS bucket in the US East (Northern Virginia) region. AWS's privacy notice describes international processing and its participation in the Swiss–US Data Privacy Framework.
- Mountain information and imported short links — United States and international services. Wikipedia and Wikidata requests go to the Wikimedia Foundation, whose privacy policy describes US processing and possible onward transfers. Resolving a Google Maps short link contacts Google; its privacy policy describes worldwide server processing. Apple's policy applies to Apple Maps link resolution.
BRouter and Waymarked Trails are additional independent services for routing and trail overlays. BRouter publishes its request-log practices, including routing coordinates, but does not name a fixed hosting country in that notice. Waymarked Trails' published service information likewise does not promise a particular processing country. Their operators receive the requested route or map area and ordinary network information; a local map view does not guarantee local processing.
Where data-protection law requires a legal basis, we rely on providing the features or support you request, your permission for optional access, our legitimate interest in secure and reliable operation, and applicable legal obligations, as relevant to the particular processing. Optional Health and device permissions can be withdrawn through the platform controls.
Depending on the law that applies to you, you may request information, access, correction, deletion, restriction or a portable copy of personal data under our control, object to certain processing, or withdraw consent. Contact contact@xplo-outdoor.ch. We may need proportionate information to verify a request. We cannot access or recover a library that exists only on your device. You can also contact your local data-protection authority; in Switzerland this is the Federal Data Protection and Information Commissioner.
Ride Together is disabled in this release. Strava integration has been removed; previously shared third-party copies remain under those services' controls. If XPLO's data practices change, we will update this notice and its date, and provide an additional notice or permission request where required. Read more about the current protections on the data security page.