Privacy Policy · TrueTrail

The short version

A parent holds the account. Each scout gets a profile with a first name, a birthdate, a boy/girl choice for their trail figure, an optional troop number and swimmer-test date, and their progress — nothing else. The one place your scout types freely is the AI coach chat, and those conversations are never stored. We run no analytics, no advertising, and no third-party trackers of any kind. We never sell or share your data. You can delete a scout, or your entire account, yourself, at any time, and it deletes for real.

Who we are

TrueTrail is operated by Metrix Promotions LLC, 1497 Main Street, Suite 236, Dunedin, FL 34698. Metrix Promotions LLC is the company that appears on your card statement and in Stripe checkout, because it is the business that takes the payment.

What we collect

From you, the parent

Your email address and password. Used to sign you in. The password is stored only as a salted hash by our authentication provider — we never see it.
Billing identifiers. Your subscription status, the number of scout seats you bought, and the customer and subscription IDs our payment processor gives us. We never receive or store your card number. Stripe collects it directly.
A coupon code, if you redeem one, and the fact that your account redeemed it.

About each scout

A first name or nickname — whatever you choose to type. It does not have to be their legal name.
A birthdate. Required because several Scouts BSA requirements and merit badges have real age gates, and we will not guess at them.
Boy or girl, used only to pick which figure walks the trail. Nothing else in the app reads it — not suggestions, not eligibility, not the coach.
The date of the BSA swimmer test, only if you enter it, so we know which water merit badges are open. The test is good for one year. We store the date only — never how well your scout swims.
A troop number, only if you choose to enter one (like “214” or “313B”). Nothing in the app uses it yet; we ask because it may later let scouts in the same troop share things like trips and camps. Leave it blank if you prefer.
Their current rank and their progress — which requirements are started, completed, or signed off, and the dates you logged for activity- and duration-based requirements.
Interests chosen from a fixed list of taps (for example “outdoors” or “building things”), used only to order optional suggestions.
Dates of an upcoming campout or camp, if you enter one, so the app can suggest what to knock out while you are there.
Camp badge lists.If you add a camp's merit-badge list (a photo, a PDF, or pasted text), it is sent to Anthropic, our AI provider, so it can be read. TrueTrail does not keep the file; Anthropic handles it under its own terms as our processor. We keep the class schedule we read from it, attached to that camp, which you can then check and correct, plus a fingerprint of the file so reading the same file again is free. We also record how many lists were read, to enforce a daily limit, but not what they said.

The AI coach

Conversations are never stored. If your scout tells the coach something concerning, it will point them to a trusted adult and to crisis resources — but the conversation is not recorded, and you will not be notified. A short personalization summary is kept per scout, and you can view or delete it at any time.

What the coach sees.To answer, each message is sent to Anthropic, our AI provider, together with your scout's first name or nickname, an age range (not the birthdate), their rank and progress, their merit badges, and any upcoming camp dates. Anthropic handles it under its own terms as our processor. TrueTrail keeps none of the conversation; it lives only on your scout's screen and is gone when they leave the page.
Photos and PDFs.Your scout can share a photo or a PDF with the coach, for example a page from the handbook or a camp's badge list. The file is sent to Anthropic to answer that one message and is not stored by TrueTrail. If a camp guide is shared to plan a camp, it is read the same way the camp planner reads it: the schedule we extract is saved with the camp, but the file itself never is. Ask your scout to share pictures of scouting things, not people.
The personalization summary.Every few messages, a short note about your scout's scouting plans and interests is updated so the coach remembers them next time. Any part of a conversation the coach treats as sensitive is left out of that note automatically, before the note is written. You can read it and clear it on your scout's profile page.
Coach settings, if you set them on the profile page: a name for the coach to use and a preferred tone.
A count of messages, to enforce a daily limit — never what they said.

Automatically

Cookies that are strictly necessary. A session cookie that keeps you signed in, and a cookie recording which scout profile is currently selected. Both are HTTP-only. We set no advertising or analytics cookies, so there is nothing to opt out of.
Ordinary server logs kept by our hosting provider — things like IP address and request time — used to keep the service running and secure.

What we deliberately do not collect

This list is a design constraint, not a promise about the future of the industry. Today the app has no code path that gathers any of it:

Nothing physical. No height, weight, swim ability or classification, fitness scores, or photos of the scout. (The swimmer-test date above records only that the test was passed, and when.)
No stored free text from a child.Every screen a scout touches is taps and choices, except the coach chat, which is never stored, and pasting a camp's class list, which is the camp's text, not anything about the scout.
No location data, contacts, microphone, or camera access.
No school, address, or phone number for the scout.
No chat transcripts.Coach conversations are never saved, by us or in your scout's account, and nothing a scout says to the coach is reported to anyone.

No tracking, no advertising

TrueTrail contains no analytics SDK, no advertising network, and no third-party tracking scripts. We do not build advertising profiles, we do not permit behavioral advertising, and we do not sell or share personal information — including under the meaning those terms have in the California Consumer Privacy Act. There is no “do not sell my information” toggle because there is nothing to toggle.

How we use what we collect

To show your scout their progress and work out what they could do next.
To apply age and prerequisite rules correctly.
To run your subscription and enforce how many scout seats you bought.
To keep the service secure and to fix problems.
To give you support. The founder can see an account's email, plan and payments, its scouts' profile details, and activity counts (for example how many requirements were signed off this month), in order to answer questions and issue refunds. That view never shows card details.

We do not use your data to train machine-learning models, and we do not use it for marketing.

Email

We send no marketing email, no newsletters, and no reminder notifications. The only messages you will ever get are ones you triggered yourself: confirming your address when you sign up, or resetting your password. Payment receipts come from Stripe.

Who else touches your data

Only the service providers we need to run the product. Each processes data on our instructions, and none of them receives it for their own marketing:

Supabase — Database and authentication. Processed in United States (us-east-1).
Resend — Sends the emails that confirm your address or reset your password. Processed in United States.
Anthropic — AI provider. It reads the camp badge lists you upload (photos, PDFs, or pasted text) so we can turn them into a class schedule, and it writes the AI coach's replies. We keep neither the files nor the conversations. Processed in United States.
Vercel — Application hosting and delivery. Processed in United States.
Stripe — Subscription payments. Stripe collects your card details directly — they never reach our servers. Processed in United States.

We may also disclose information if we are legally required to, or to protect someone's safety. If Metrix Promotions LLC is ever acquired, your data could transfer to the buyer, who would remain bound by this policy or give you notice before changing it.

Your data is stored and processed in the United States.

Children's privacy

TrueTrail is designed for a Scouts BSA youth roughly 11–17, but it is sold to and controlled by a parent or guardian. This matters in a few concrete ways:

A child cannot create an account. There is one login per family and it belongs to the adult. A scout profile is a selection on that account, not a separate login.
Consent is tied to a real transaction. Every outside account pays a real charge, which is how we verify a parent is genuinely the one setting the account up.
We never contact a child. All email goes to the parent's address.
There is no social surface — no messaging, no sharing, no leaderboards, no way for one family to see another's scout.
A parent can see and delete everythingabout their scout at any time, from Settings and the scout's profile page — including the coach's personalization summary.

If you believe a child has provided us information without a parent's involvement, contact us and we will delete it.

Your choices

Delete a scout. Settings → delete profile. It removes that scout and all of their progress.
Delete your whole account. Settings → delete account. This cancels your subscription, deletes your login, and cascades to every scout, all progress, and all logged entries. It is immediate and cannot be undone.
Correct anything — names, birthdates, troop numbers, rank, and progress are all editable in the app.
Get a copy of your data. There is no self-serve export yet. Ask us and we will send it.

Depending on where you live you may have additional rights — to access, correct, delete, or object to processing. Contact us and we will honor them; we will not charge you or make you create an account to ask.

How long we keep it

Until you delete it. We do not expire accounts for inactivity. If your subscription lapses, nothing is deleted— the account becomes read-only, and everything your scout tracked stays visible so that resubscribing picks up where you left off. You can still delete a scout or your whole account while it’s read-only. Backups may persist for a short period after deletion before being overwritten.

Security

Traffic is encrypted in transit. Every table enforces row-level security, so a signed-in family can only ever read their own account's rows, and any request naming a scout is re-verified against the caller's account on the server. Administrative credentials are server-side only and never reach the browser. No system is perfectly secure, and we will not pretend otherwise — but we have deliberately kept the amount of data worth stealing small.

Changes to this policy

If we change it materially — especially if we start collecting something new — we will update the date at the top and, for significant changes, tell you in the app before the change takes effect.

Contact

Metrix Promotions LLC — 1497 Main Street, Suite 236, Dunedin, FL 34698
barak@metrixpromotions.com

This policy is governed by the law of Florida, as described in our Terms of Service.