Privacy Policy

Account. Your email address, used to create and sign in to your account, plus a display name and optional avatar if you set one.

Things you save on purpose. Captures (moments you keep from episodes), collections, saved spots, field-log entries, trips, gear lists, tribe messages, and similar content you create in the app. This content is stored in our database, hosted on Supabase, and is associated with your account.

Sync session basics. When you sync to an episode we record which episode and where in its timeline you synced, so your captures land at the right moments.

The current app does not use the microphone. A future feature called Ember Ear will offer audio-based episode syncing; if you enable it, the microphone is used only while you are actively syncing, audio is matched on-device or discarded immediately after matching, and no recordings are stored or uploaded. Ember Ear will be opt-in, and the OS permission prompt will only ever appear when you choose to use it.

Location access is optional and off by default. If you grant it, it’s used to pin saved spots and field-log entries where you actually were, and to center maps and conditions on your area. You can save spots and logs without location by placing pins manually. Denying location never blocks the rest of the app.

Every spot you save carries a privacy tier that you control, and nothing is public by default:

• Exact — the precise coordinates you saved, shared only with people or tribes you explicitly grant access to.
• Fuzzed — coordinates are randomized within roughly a 5 km radius before anyone else can see them. This is the default for new spots.
• Region — only a general area (not a pin) is ever visible to anyone but you.
• Vault — the tightest tier. Coordinates never leave your device’s view; the spot exists in the app for you alone.

There is no tier that makes a spot visible to TRYBAL users at large. Sharing is always explicit: you grant access to individual people or to tribes you belong to, and you can revoke a grant at any time. Sensitive locations (spawning beds, fragile access points) may be additionally fuzzed at the catalog level regardless of the tier you chose.

• No advertising trackers and no ad SDKs in the app.
• No selling or renting your data to anyone.
• No reading your contacts, photos, or other apps.
• No background location tracking — location is read only at the moment you use a feature that needs it.

Our website can optionally load Google Analytics for aggregate page statistics; the app itself contains no third-party analytics trackers.

Your account and content are stored with Supabase (our database and authentication provider), protected by row-level security so that, by default, private content is readable only by your account. Data is encrypted in transit.

A small internal admin console lets our team operate TRYBAL — moderating flagged content, resolving support requests, verifying creator claims, and answering guide-booking inquiries. It connects with elevated database access that is not subject to the per-account row-level security described above, so a team member using it can see things a stranger in the app never could: account emails, collection and trip names, saved-spot coordinates and their privacy tier, photos and captions submitted for identification (“Call It”), and the text of booking inquiries you send a guide.

What it deliberately does not show: your true honey-hole coordinates are never exposed through the console’s moderation views, which are built to work from privacy-tier metadata rather than the underlying pin. Access is restricted to a short allowlist of team accounts and every action is attributable to the admin who took it.

We keep your content for as long as your account exists. You can delete individual captures, spots, logs, and trips at any time in the app, and you can delete your entire account — see account deletion. Deleting your account removes your personal data from the production database; residual copies in encrypted backups expire on a rolling basis within 30 days.

TRYBAL is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

If we change this policy in a way that matters, we’ll update the effective date above and note the change in the app. Continued use after a change means you accept the updated policy.

Questions, concerns, or data requests: support@sourcedigital.net.