Privacy Policy

Effective date: 23 October 2026
Last revised: 23 October 2026
Supersedes: the RidgeReader Privacy Policy of 8 October 2026. This policy covers both the ridgereader.com website and the RidgeReader application.

Introduction

This Privacy Policy applies to Alpha Angle Labs, LLC, a Colorado limited liability company (“RidgeReader,” “we,” “us,” or “our”) and describes how we collect, use, and share information from users of the RidgeReader website, mobile application, and related services (collectively, the “Service”).

“Personal Information” means any information relating to an identified or identifiable individual. It does not include information that has been aggregated, de-identified, or anonymized such that it can no longer reasonably be associated with you.

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Service. Your use of the Service is also subject to our Terms of Use at https://ridgereader.com/terms.

Highlights

1. Information We Collect

1.1 Information you provide to us

1.2 Photographs and camera data — processed on your device

When you select a photograph for analysis, the application reads its embedded EXIF metadata within the application on your device and extracts:

None of this leaves your device as part of the analysis, and neither does the photograph. The slope computation, the terrain render, and the resulting statistics are all produced locally from terrain data already stored on your device. No analysis request is sent anywhere. If terrain for the photograph’s location is not yet on your device, the application requests it from us, which sends that location and the compass heading (Section 1.3); the photograph and its other metadata still stay on your device.

A photograph reaches us in exactly two circumstances, and both are your choice: you report a result that looks wrong and confirm the send (Section 2), or you have turned on Contribute and take a photograph with RidgeReader’s camera (Section 3). Photographs you select from your device’s photo library are never contributed, whether or not Contribute is on. Nothing about analysis uploads an image.

If a photograph contains no location data, the application asks you to enter coordinates manually. It does not substitute your device's current position. An uploaded photograph could have been taken anywhere at any time, and your current position describes you rather than the picture — using it would answer a question about the wrong terrain with no outward sign that anything had been assumed.

Taking a photograph inside the application is a different case. When you use the in-app camera, the application reads your device's live GPS position and its accuracy, compass heading, and tilt at the moment of capture, because there the device and the subject genuinely are in the same place. This occurs on your device and is not sent to us — unless Contribute is on, in which case these readings are sent with the photograph (Section 3).

You may strip EXIF metadata before selecting a photograph, or enter coordinates manually instead. Without heading data the application cannot orient the terrain render to match the photograph.

1.3 Information we receive when you request terrain

This is the main category of information the Service transmits to us, and it is narrower than it may appear. We receive the locations you ask us to build or download terrain for — and when you analyze a photograph somewhere whose terrain is not yet on your device, the application asks us to build it, so that location is among them. Once terrain covering an area is on your device, every analysis you run in that area is invisible to us.

1.4 Information we collect automatically

1.5 Local storage on your device

The Service stores the following in your browser's or device's local storage, where it remains under your control and is not transmitted to us except as described in Sections 3 and 4:

1.6 Information we derive

2. Reporting a Result That Looks Wrong

The terrain RidgeReader draws can be wrong — survey gaps, old elevation data, a compass reading that was off. When a result looks wrong you can send it to us so we can reproduce it.

Nothing is sent unless you press the button and confirm. There is no background upload, no automatic crash report, and no sampling of results.

What a report contains. When you send one, we receive:

What a report does not contain. We do not attach your identity, your other photographs, your saved routes, or anything from a previous session. A report is a single snapshot you chose to send.

Where reports go. They are stored with our database provider, Supabase, under access rules that permit reports to be created but not read back by anyone using the application. They are used to diagnose terrain and rendering problems and for nothing else — not for training models, not for marketing, and they are never published or shared.

Retention and removal. Reports are kept while the problem they describe is open and for a reasonable period afterwards, and no longer than 24 months. If you want a report deleted, email admin@ridgereader.com — include roughly when you sent it and where the photo was taken, since without an email address on the report that is how we find it.

If you would rather not send the photograph, describing the problem by email works too. It is harder for us to act on, but it is a real option.

3. Contributing Photos to Improve RidgeReader (optional)

RidgeReader draws terrain from your phone’s compass and tilt sensors, and those sensors are often wrong — a compass can be off by tens of degrees. We want to build models that correct this automatically, so the terrain view lines up with your photograph, and that recognize avalanche-terrain features in photographs. Training those models needs real photographs taken in the mountains, with the readings the phone recorded at the time. Contribute is how you can choose to provide them. It is entirely optional: using RidgeReader never requires it, and nothing about the Service changes if you leave it off.

3.1 It is off unless you turn it on

3.2 What is contributed

Only photographs you take with RidgeReader’s camera while Contribute is on. Photographs you select from your device’s photo library are never contributed, and nothing taken before you turned Contribute on is sent.

For each such photograph we receive:

What is not contributed: the slope statistics and terrain view you were shown, any adjustment you make to the view, your routes and zones, photographs from your library, reports (Section 2), and anything from a time when Contribute was off.

3.3 How contributions are protected

3.4 How contributions are used

Contributions are used only to train, test, and improve RidgeReader’s own models for:

They are used in-house only. We do not sell contributions, license them, share them with research partners, or provide them to third-party AI or machine-learning services for those services’ own purposes. They may be processed on computing infrastructure we rent, under terms that prohibit the provider from using them for any purpose of its own; any such provider will be listed in Section 7.1 before it is first used. We do not use contributions for advertising or marketing, and we do not publish them. We may publish aggregate results — for example, how much a model reduced compass error — that contain no photographs, locations, or other information about any contributor. Reports (Section 2) are never used as contributions.

3.5 Withdrawing and deleting

4. Accounts and Route Sync

Signing in is optional and is not required for any terrain or analysis feature. Its main purpose is to carry your work between your devices: a route drawn on a laptop appears on a phone at the trailhead. Signing in also makes Contribute available (Section 3).

What is stored in your account. When you are signed in, the application stores a single document containing your zones and drawn objects — their coordinates, names, colors, type, grouping, and the timestamps of your edits — together with records of items you have deleted, which are retained so that a deletion made on one device is not undone by another device that has not yet synchronized. This document is stored by our authentication and database provider, Supabase, and is protected by database-level access rules that permit only your own signed-in session to read or write it.

What is not stored in your account. Downloaded terrain data is not synchronized and is never uploaded. It is large, it is re-downloadable from us at any time, and it stays on each device. A zone that appears on a second device will offer to download its terrain there.

Signing out does not delete the routes on that device. They remain available locally, exactly as they would be for a user who had never signed in. Signing out turns Contribute off and discards any contributions not yet sent.

When you are signed out, no routes, drawings, or contributions are transmitted to us at all, except the geometry contained in a custom terrain request you specifically make (Section 1.3).

5. Server-Side Terrain Cache

To avoid repeatedly retrieving the same elevation data, we cache derived elevation and slope data on our servers.

6. How We Use Information

We use the information we collect to:

Aggregated and de-identified information is not associated with you, and we take reasonable steps to keep it that way.

7. How We Share Information

We do not share information about you except as described below. We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising.

7.1 Infrastructure and service providers

These vendors process information on our behalf and are not permitted to use it for their own purposes:

Provider Role What it receives
Supabase Authentication, account database, diagnostic-report storage, and contribution records Your account identifier, email, name, profile picture URL, and synced routes and zones; if you submit a diagnostic report, its prepared photo (faces blurred and embedded data removed on your device), terrain-view capture, report metadata, and any optional contact email; if you contribute, each contribution’s readings, location, and Contribute settings
Google Sign-in identity provider That you are signing in to RidgeReader; Google's own handling is governed by its privacy policy
Railway Backend hosting Terrain requests and their coordinates; IP address; if you contribute, each contribution’s readings and location on their way to storage (the photograph itself goes directly to Cloudflare R2)
Vercel Website and application hosting IP address and request metadata; aggregate, cookie-free traffic statistics for the website
Google Workspace Our email, including support and privacy requests The contents of emails you send us, your name and email address, and any attachments
beehiiv Waitlist and email delivery Your name and email address, if you joined the waitlist
Cloudflare R2 Storage and delivery of terrain files; private storage of contributed photographs and terrain snapshots Which terrain file you download; IP address; your contributed photographs, if you contribute

7.2 Elevation data providers

To build terrain, our servers query public elevation data sources — including the U.S. Geological Survey and the Microsoft Planetary Computer — for the geographic area being built. These queries transmit the coordinates of the area requested. For automatically generated regions, the area queried is the region built around the anchor point described in Section 1.3, not your precise coordinates. For custom regions built from your drawings, the area is derived from your route geometry at full precision. These providers do not receive your account identifier, email address, or any photograph. Their handling of request data is governed by their own privacy policies.

7.3 Third parties your browser contacts directly

The following are requested by your browser rather than by our servers, which means these providers receive your IP address directly from you, along with what you requested:

Provider What it is used for What it can observe
OpenStreetMap Map tiles Your IP address, and which map tiles you view — which indicates the area you are looking at
Esri (server.arcgisonline.com) Satellite and topographic map tiles Same as above
USGS (basemap.nationalmap.gov) Topographic map tiles Same as above
Komoot (photon.komoot.io) Place-name search Your IP address and the text of your search queries
Google Fonts Web typeface Your IP address on page load
Supabase Authentication and route sync As described in Section 7.1

We do not control these providers and do not receive the data they collect.

7.4 Other disclosures

Payment processor. If a paid tier is introduced, billing information will be shared with a payment processor to process payments.

Legal and safety disclosures. We may access, preserve, and disclose information where we believe doing so is required or appropriate to comply with law or legal process (such as a subpoena or court order), to enforce our Terms of Use, to detect and prevent fraud or security incidents, or to protect the rights, property, or safety of RidgeReader, our users, or the public. Where permitted by law, we will make reasonable efforts to notify you of legal requests for your data.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will make reasonable efforts to notify you if your Personal Information becomes subject to a different privacy policy.

With your consent. We may share information for other purposes with your permission.

8. Data Retention

Data Retention
Photographs Never received during analysis. A photograph sent in a report (Section 2) is kept while that problem is open and no longer than 24 months. A contributed photograph is kept as described below.
Reports Comment, analysis details, screen capture and optional email: same 24-month ceiling. Deletable on request — see Section 2.
Contributions (photographs, readings, and derived labels) Kept until you delete them or delete your account; deleted within 30 days of that request. Turning Contribute off stops new contributions but does not by itself delete earlier ones.
Contributions waiting on your device Deleted from your device once sent, never kept longer than 14 days, and deleted immediately if you turn Contribute off or sign out.
Terrain snapshots kept for contributions Kept while any contribution refers to them; other copies of terrain builds are deleted after 30 days. Public elevation data; no Personal Information.
Contribute settings A record each time you turn Contribute on or off, and which consent text you saw. Kept with your account and deleted with it.
Your routes and zones (signed in) Retained while your account exists. Deleted when you delete your account.
Your routes and zones (signed out) Held only on your device; we never receive them.
Account information Retained while your account is active and for a reasonable period afterward to meet legal, tax, and dispute-resolution obligations.
IP addresses used for rate limiting Held in server memory for up to one hour, then discarded. Not written to disk.
Server and hosting logs Retained according to each hosting provider’s settings: currently 14 days at Vercel, 7 days at Railway, and 1 day at Supabase. Cloudflare keeps no request logs for our terrain file storage.
Cached terrain data Retained on a rolling basis while in use. Contains no account or session identifier; the names of automatically generated regions reflect approximate location (about 110 meters) and compass sector (Section 5).
Deletion records (tombstones) Retained in your synced document for 90 days, so a deletion made on one device is not undone by another device that has been offline.
Waitlist details Retained until you unsubscribe or ask us to delete them.
Support correspondence Retained as long as needed to resolve your issue and for a reasonable period afterward.

After deletion, residual copies may persist in backups for a limited period before being overwritten.

9. Cookies and Similar Technologies

The Service does not use advertising or analytics cookies. It does not use a cookie consent banner because it sets no optional cookies.

The Service stores the following on your device using browser storage mechanisms rather than cookies:

You can clear all of the above through your browser or device settings. Doing so will sign you out and delete downloaded terrain and any unsent contributions, and — if you are not signed in — will delete your routes.

There is no accepted industry standard for responding to browser “Do Not Track” signals, and the Service does not currently respond to them.

10. Your Choices

11. Your Privacy Rights

We honor reasonable requests from U.S. users to access, correct, or delete Personal Information we maintain about them, including contributions. To make a request, email admin@ridgereader.com with the subject line “Privacy Request” and tell us whether you seek access, correction, or deletion. We may request information needed to verify that you are the person whose information is involved. We use verification information only for that purpose.

We do not sell Personal Information or share it for cross-context behavioral advertising. We do not use precise geolocation for advertising or to infer characteristics about you. We use it only to provide the terrain, account, or diagnostic-report feature you requested, or — if you turn on Contribute — to train and test our own models as described in Section 3, as described in this Privacy Policy. Because we do not sell or share Personal Information for advertising, we do not provide a “Do Not Sell or Share My Personal Information” or “Your Privacy Choices” link.

These rights are offered voluntarily to all U.S. users. If a law gives you additional rights, nothing in this policy limits those rights.

12. Security

We use technical and administrative safeguards designed to protect the information we maintain, including encryption of data in transit, database-level access rules that restrict each account's synced data to that account, and restricting administrative access to personnel who need it.

Because slope analysis runs on your device, the categories of information most sensitive to you are not exposed to us in ordinary use. The exceptions are contributions, if you turn on Contribute (Section 3), and a report you choose to send (Section 2), which carries a copy of the photograph, prepared on your device with the faces it detects blurred and its embedded data removed, and the location as a separate field; contributions and reports are stored under access rules that allow them to be created but not read back through the application.

However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your information, and any transmission of data to the Service is at your own risk. If we become aware of a security breach affecting your Personal Information, we will notify you and any applicable regulators as required by law.

13. Children's Privacy

We do not knowingly collect Personal Information from children under 13. Children under 13 may use the ordinary terrain, mapping, and on-device analysis features without an account. They may not create an account or, without a parent or legal guardian, submit a diagnostic report, join the waitlist, or contact support. If we learn that we collected Personal Information from a child under 13 without appropriate parental involvement, we will delete it.

Accounts are limited to adults. You must be 18 or older to create a RidgeReader account. No account is required to use the Service. Contribute requires an account, and is therefore available only to adults.

We rely on the age representation made when an account is created. If you believe a child under 13 has provided us with Personal Information, contact us at admin@ridgereader.com.

14. Third-Party Sites and Data

The Service displays and links to information from third parties, including avalanche forecast centers, map tile providers, and public elevation data providers. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing information to them.

15. International Users

The Service is intended for users in the United States, and its terrain coverage is limited to United States elevation data. Our infrastructure is not located in a single country. Account information and synced routes are stored by Supabase in Canada; our terrain generation backend runs in the United States, and terrain files are stored in North America, primarily the United States. Canada is recognized by the European Commission as providing an adequate level of data protection.

By using the Service, you consent to your information being transferred to, stored in, and processed in the United States and Canada, where privacy laws may differ from those in your jurisdiction.

At launch, the Service is offered only in the United States, and app store availability is limited accordingly.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised version takes effect when posted to this page. If we materially change how we use or share previously collected Personal Information, we will notify you through the Service, by email, or by other reasonable means.

17. Contact

Questions, comments, or concerns about this Privacy Policy or our privacy practices:

Email: admin@ridgereader.com Mail: Alpha Angle Labs, LLC, 1500 N Grant St, Suite #11862, Denver, CO 80203, USA