Privacy Policy · TrueTrail

The short version

A parent holds the account. Each scout gets a profile with a first name, a birthdate, and their progress — nothing else. Your scout never types free text anywhere in the app, so there is nowhere for personal details to end up by accident. We run no analytics, no advertising, and no third-party trackers of any kind. We never sell or share your data. You can delete a scout, or your entire account, yourself, at any time, and it deletes for real.

Who we are

TrueTrail is operated by Metrix Promotions LLC, 1497 Main Street, Suite 236, Dunedin, FL 34698. Metrix Promotions LLC is the company that appears on your card statement and in Stripe checkout, because it is the business that takes the payment.

What we collect

From you, the parent

Your email address and password. Used to sign you in. The password is stored only as a salted hash by our authentication provider — we never see it.
Billing identifiers. Your subscription status, the number of scout seats you bought, and the customer and subscription IDs our payment processor gives us. We never receive or store your card number. Stripe collects it directly.
A coupon code, if you redeem one, and the fact that your account redeemed it.

About each scout

A first name or nickname — whatever you choose to type. It does not have to be their legal name.
A birthdate. Required because several Scouts BSA requirements and merit badges have real age gates, and we will not guess at them.
Their current rank and their progress — which requirements are started, completed, or signed off, and the dates you logged for activity- and duration-based requirements.
Interests chosen from a fixed list of taps (for example “outdoors” or “building things”), used only to order optional suggestions.
Dates of an upcoming campout or camp, if you enter one, so the app can suggest what to knock out while you are there.

Automatically

Cookies that are strictly necessary. A session cookie that keeps you signed in, and a cookie recording which scout profile is currently selected. Both are HTTP-only. We set no advertising or analytics cookies, so there is nothing to opt out of.
Ordinary server logs kept by our hosting provider — things like IP address and request time — used to keep the service running and secure.

What we deliberately do not collect

This list is a design constraint, not a promise about the future of the industry. Today the app has no code path that gathers any of it:

Nothing physical. No height, weight, swim classification, fitness scores, or photos.
No free text from a child. Every screen a scout touches is taps and choices.
No location data, contacts, microphone, or camera access.
No school, troop number, address, or phone number for the scout.
No chat transcripts. The AI coach is not part of this version. When it ships, conversations will not be stored — and this policy will be updated before it does.

No tracking, no advertising

TrueTrail contains no analytics SDK, no advertising network, and no third-party tracking scripts. We do not build advertising profiles, we do not permit behavioral advertising, and we do not sell or share personal information — including under the meaning those terms have in the California Consumer Privacy Act. There is no “do not sell my information” toggle because there is nothing to toggle.

How we use what we collect

To show your scout their progress and work out what they could do next.
To apply age and prerequisite rules correctly.
To run your subscription and enforce how many scout seats you bought.
To keep the service secure and to fix problems.

We do not use your data to train machine-learning models, and we do not use it for marketing.

Email

We send no marketing email, no newsletters, and no reminder notifications. The only messages you will ever get are ones you triggered yourself: confirming your address when you sign up, or resetting your password. Payment receipts come from Stripe.

Who else touches your data

Only the service providers we need to run the product. Each processes data on our instructions, and none of them receives it for their own marketing:

Supabase — Database, authentication, and the emails that confirm your address or reset your password. Processed in United States (us-east-1).
Vercel — Application hosting and delivery. Processed in United States.
Stripe — Subscription payments. Stripe collects your card details directly — they never reach our servers. Processed in United States.

We may also disclose information if we are legally required to, or to protect someone's safety. If Metrix Promotions LLC is ever acquired, your data could transfer to the buyer, who would remain bound by this policy or give you notice before changing it.

Your data is stored and processed in the United States.

Children's privacy

TrueTrail is designed for a Scouts BSA youth roughly 11–17, but it is sold to and controlled by a parent or guardian. This matters in a few concrete ways:

A child cannot create an account. There is one login per family and it belongs to the adult. A scout profile is a selection on that account, not a separate login.
Consent is tied to a real transaction. Every outside account pays a real charge, which is how we verify a parent is genuinely the one setting the account up.
We never contact a child. All email goes to the parent's address.
There is no social surface — no messaging, no sharing, no leaderboards, no way for one family to see another's scout.
A parent can see and delete everything about their scout at any time, from Settings.

If you believe a child has provided us information without a parent's involvement, contact us and we will delete it.

Your choices

Delete a scout. Settings → delete profile. It removes that scout and all of their progress.
Delete your whole account. Settings → delete account. This cancels your subscription, deletes your login, and cascades to every scout, all progress, and all logged entries. It is immediate and cannot be undone.
Correct anything — names, birthdates, rank, and progress are all editable in the app.
Get a copy of your data. There is no self-serve export yet. Ask us and we will send it.

Depending on where you live you may have additional rights — to access, correct, delete, or object to processing. Contact us and we will honor them; we will not charge you or make you create an account to ask.

How long we keep it

Until you delete it. We do not expire accounts for inactivity. If your subscription lapses, nothing is deleted — the account becomes read-only, and everything your scout tracked stays visible so that resubscribing picks up where you left off. Backups may persist for a short period after deletion before being overwritten.

Security

Traffic is encrypted in transit. Every table enforces row-level security, so a signed-in family can only ever read their own account's rows, and any request naming a scout is re-verified against the caller's account on the server. Administrative credentials are server-side only and never reach the browser. No system is perfectly secure, and we will not pretend otherwise — but we have deliberately kept the amount of data worth stealing small.

Changes to this policy

If we change it materially — especially if we start collecting something new — we will update the date at the top and, for significant changes, tell you in the app before the change takes effect.

Contact

Metrix Promotions LLC — 1497 Main Street, Suite 236, Dunedin, FL 34698
barak@metrixpromotions.com

This policy is governed by the law of Florida, as described in our Terms of Service.