Privacy

1. Introduction

This Privacy Policy describes how Alpine First Day Cover LLC ("AFDC") collects, uses, and protects information from users of the SpeleoMap mobile application.

SpeleoMap is an offline cave-mapping app for iPhone. The core application runs 100% offline, does not require an account or login, and does not require an internet connection to function. A small number of network requests occur in narrow, specifically described circumstances detailed in this policy.

By using SpeleoMap, you agree to this Privacy Policy.

2. Information We Collect

2.1 Cave Scan Data

Collected: 3D meshes, point clouds, ARKit mesh anchors, LiDAR depth data, keyframes (RGB images plus camera pose and intrinsics), and texture atlases generated during capture. Storage: On your device only, inside .speleomap session bundles. Uploaded to our servers: NO. Shared with third parties: NO.

2.2 Trajectory and Cave Line Data

Collected: Waypoints (position, heading, altitude, timestamp) generated from Core Motion sensors during recording cycles. Storage: On your device only, inside .speleomap session bundles. Uploaded: NO. Shared: NO.

2.3 Survey Data

Collected: Survey stations, annotations (NSS/UIS symbols), notes, passage measurements, cross-sections, and station-to-station relationships. Storage: On your device only, inside .speleomap session bundles. Uploaded: NO. Shared: NO.

2.4 Photos and Videos Captured In-App

• Collected: Photos and videos captured during a session, with attached 6DOF camera pose and timestamp. Videos include audio from the microphone unless you turn audio off in Settings → Media.
• Storage: On your device only, inside .speleomap session bundles.
• Uploaded: NO.
• Shared: Only if you choose to export or share them yourself.
• Photo information: Photos you share from SpeleoMap, and the copies saved to your Photos library when Photos is on (Settings → Media), include the project name, the station or pin the photo is assigned to, your caption, and SpeleoMap as the app that made them. Location (GPS) is never written into these photos, and any location already in the file is removed. The copies stored inside SpeleoMap are not changed.
• LiDAR photos: When you take a photo in LiDAR mode, a depth map (how far each part of the scene was from the phone) and the camera’s lens calibration are saved inside the photo file, so you can measure on the photo later. The depth map stays on your device with the photo, contains no location, and may be included in copies you share or save to Photos. LiDAR photos also store the direction of gravity at the moment you took them (which way was down), so heights and angles can be measured true to level; copies you share from SpeleoMap carry this reading too. It contains no location.
• LiDAR videos: When you record a video with LiDAR on, SpeleoMap also saves, for the frames it keeps depth for, a depth map, a LiDAR confidence map, the camera’s lens calibration, the camera’s position and direction relative to where the video started, and a sharpness score, plus any bookmarks you add. These are stored next to the video in a folder on your device and contain no location. Audio is recorded through the microphone unless you turn audio off in Settings → Media. The depth data leaves your device only if you share the video from SpeleoMap (as a .speleovideo file) or include it in a project export. Copies saved to your Photos library contain the plain video only.
• Thermal photos and videos (FLIR thermal camera, optional): A thermal photo is saved as the radiometric image the FLIR camera produces: the temperature of every pixel, the color palette, the emissivity and distance settings, the camera’s model and serial number, and the camera’s visible-light photo, all inside the photo file. A thermal video saves the picture as shown, with no sound, plus a temperature image at the rate you choose, in a folder next to the video. SpeleoMap adds no location to any of these. They stay on your device and leave it only if you share them, export your project, or have Photos on in Settings → Media; the copy saved to your Photos library is the file exactly as the camera made it (no project, station or caption added), and a thermal video’s copy is the plain video only. Thermal readings are for cave and survey work and are not a medical or health measurement.

2.5 Entrance GPS Location

Collected: A single GPS fix (latitude, longitude, altitude, accuracy), averaged from several readings, captured only when you lock the cave entrance before descending. Storage: On your device only, in entrance.json inside the session bundle. Uploaded: NO. Shared: NO. For cave surveys, background location is never used, and GPS is turned off immediately after the entrance fix is captured. Hike Line recording, which does use location while it runs, is described in Section 2.12.

2.6 HealthKit Workout Data

Collected: HKWorkoutSession data including duration, distance, elevation gain/loss, active calories, basal calories, steps, and heart rate (read from Apple Health, for example from an Apple Watch or another watch whose app saves heart rate to Health). On caving workouts, if you have entered your weight, SpeleoMap calculates active calories on your device from your movement and your weight (Section 2.13) and saves only the calorie total to Apple Health; your weight itself is never written to Apple Health. Caving workouts are marked as indoor and tagged as a SpeleoMap caving, hiking or training workout in Apple Health; training workouts are saved as Climbing (SRT), Running or Cross Training (crawling). For running, distance measured by your iPhone's motion sensors that the workout did not record is added to the workout in Apple Health. The local WorkoutRecord also keeps the time spent in each kind of movement (walking, crawling, on rope and so on) and the height climbed and descended on rope; SRT training keeps each lap and the rig name you type; running keeps distance over time for splits; crawl training records a line inside the training project, which is never shown on a map or counted as survey. Lifetime totals and badges are calculated on your device from these records; the list of badges you have already been shown is stored on your device only. Storage: Apple HealthKit on your device, plus a local WorkoutRecord snapshot inside the session bundle. Uploaded: NO. Shared: NO. Workout data is written to Apple Health with your permission and remains under Apple's HealthKit privacy controls. If you turn on Auto-emit route to Apple Health in Hike settings, the GPS route of each Hike Line is also saved with its workout in Apple Health on your device. SpeleoMap never transmits HealthKit data off your device. While no workout is running and heart rate tracking is on, the Workout tab reads the most recent heart rate in Apple Health and shows it with the time it was measured; that reading is only displayed, never stored or written anywhere. For running training you choose outdoors, track or treadmill; a treadmill run is saved to Apple Health as indoor. A name you give a training session is stored in its local WorkoutRecord.

2.7 Affiliated Organization and Subscription Reports

• Collected at onboarding: One optional field, Affiliated Organization (for example your grotto, conservancy or club), picked from the organization directory (Section 7) or typed in if it is not listed. You can leave it blank.
• Storage: On your device. The organization you enter at onboarding is recorded one time; editing your profile later does not change it.
• Transmitted: Each time a SpeleoMap subscription period is paid (the first purchase and each renewal) and if a payment is refunded, one report is sent to AFDC via Formspree. The report contains only: the Affiliated Organization you chose and its directory id (or “none”), the plan (monthly or annual), its price, the date, whether it is a new purchase, renewal or refund, and whether it was a test (sandbox) or real purchase. Renewals are reported the next time you open SpeleoMap.
• Not transmitted: Your name, email address, NSS number, Apple account, transaction identifiers, device identifiers, location or any cave data. The name, email and NSS number fields in Settings, Profile stay on your device and are used only on your device (for example on a PDF report cover, if you choose).
• Shared: Not sold, rented, or shared with any party other than the form-handling processor described below.

Purpose: AFDC may allocate a portion of subscription proceeds to cave conservation at its sole discretion (see Section 3 of the SpeleoMap Terms of Service). An Affiliated Organization you provide is a non-binding preference AFDC may consider when directing conservation funds; it does not obligate AFDC to pay any organization.

Third-Party Processor: Reports are transmitted via Formspree. Formspree receives only the report fields listed above, plus standard request metadata. Formspree's privacy practices are described at formspree.io/legal/privacy-policy.

Conservation Disclaimer: AFDC's cave conservation allocations are discretionary and are not a charitable donation made by you. You do not receive a tax-deductible donation receipt for any portion of your subscription, and an Affiliated Organization you provide does not entitle any organization to payment.

2.8 Cave Metadata (Per Session)

• Collected: Cave name, cave system, entrance name, team member names, equipment notes, conditions, free-form notes, BCRA survey grade, and magnetic declination. All entered by you.
• Storage: On your device only, inside .speleomap session bundles.
• Uploaded: NO.
• Shared: NO.

2.9 Support and Diagnostics

• Collected: Only if you contact support. With Attach diagnostics on (Settings → Support), the email includes diagnostics: a record of what the app did in your last 5 sessions. Before they leave your phone, SpeleoMap removes GPS coordinates, altitude, magnetic readings, device serial numbers, email addresses and project names (shown as Project 1, Project 2 and so on). You may also send screenshots or other information you choose.
• Storage: On systems controlled by Alpine First Day Cover LLC.
• Uploaded: Only what you choose to send.
• Shared: NO.
• Retention: Only as long as needed to diagnose and resolve your issue.

2.10 Export Files

• Generated: Survex (.svx), Therion (.th and thconfig), OBJ, PLY, USDZ, GPX, KML, GeoJSON, PDF, CSV, ZIP bundle files containing your session data, .speleovideo files (a LiDAR video with its depth data), and single training sessions (SRT, running or crawling) as a CSV or PDF file.
• Storage: Saved to your device only via the iOS share sheet.
• Uploaded: NO.
• Shared: Only if you choose to share the exported file yourself.

2.11 Imported Files

• Received: SpeleoMap bundle and item files that another SpeleoMap user shares with you, and survey or trail files from other software (Survex .svx and .3d, Therion .th, and GPX) that you choose to import.
• Photos and video from any camera, imported through the Media tab from Files or from your Photos library. Everything in the file is kept as it is inside your project, including the date taken and any location, depth or camera details it already carries; SpeleoMap does not add to it or send it anywhere. Photos you pick from your Photos library are only read; SpeleoMap does not change or delete them there.
• Processing: Entirely on your device. If Save to Photos app is on (Settings → Media), photos and videos imported from Files are also saved to your Photos library on your device; picks from your Photos library are not saved again.
• Import history: each project keeps a list of what you imported into it (date and time, file name, what it became, and whether it was imported, skipped or failed). Stored inside the project on your device only, not included in exported bundles; Clear removes it.
• Uploaded: NO.
• Shared: NO. AFDC never receives, processes, or has access to imported files or their contents.

An imported file may contain the sending caver's own cave data. SpeleoMap handles this data the same way it handles yours: stored on your device only and never transmitted to AFDC.

2.12 Hike Line Location Data

• Collected: Only while you are recording a Hike Line. A GPS trail of your position (latitude, longitude, altitude, accuracy, and time) at regular intervals, your compass heading, the pins you drop, and any destination coordinates you type in. Recording continues while the app is in the background during an active Hike Line, with the iOS location indicator shown, and stops when you end the Hike Line.
• Storage: On your device only, inside .speleomap session bundles.
• Uploaded: NO.
• Shared: Only if you choose to export or share it yourself, for example as a GPX or KML file, or a pin shared as a map link.

2.13 Height, Weight, and Stow Mode Profiles (Optional)

• Collected: Only if you enter them in Settings. Your height (used for Stow Mode distance and chest mount height), your weight (used only to estimate calories on caving workouts), your gear weight (used only for rope-climbing calories), and your Stow Mode phone mounts, movement styles, and calibration runs.
• Storage: On your device only, in the app's settings. Like other app data, it may be included in your own iOS device backup (Section 6).
• Uploaded: NO. Not sent at onboarding, not included in export files, and your weight and gear weight are never written to diagnostics.
• Shared: NO. Your weight and gear weight are never read from or written to Apple Health.
• Deleting: Clear the field in Settings → Profile, or delete the app.

2.14 Bluetooth External Devices (Optional)

• Used: Only if you turn on a device in Settings → External Devices. Laser Meter: SpeleoMap uses Bluetooth to find and connect to the meter or survey instrument you choose, and reads the measurements it sends, such as distance and angles, for your splays and Rangefinder notes. Environment Sensor: SpeleoMap listens to the temperature, humidity and air pressure your chosen sensor broadcasts; it never connects to or pairs with the sensor. Thermal Camera (FLIR ONE Edge and FLIR ONE Edge Pro): SpeleoMap uses Bluetooth and the camera’s own Wi-Fi network, to find and connect to the FLIR camera you choose and to receive its live thermal picture, temperatures, battery level, model and serial number. While the camera is connected, iOS joins your iPhone to the camera’s Wi-Fi, so your iPhone has no internet over Wi-Fi until you disconnect. This link is local between your iPhone and your camera; SpeleoMap uses FLIR’s software on your device to talk to the camera and sends no thermal images, temperatures, camera details or other data to FLIR or to AFDC. Photos and video from any other camera come in through Import (Section 2.11). GPS: a GPS receiver you pair in iOS Settings feeds your iPhone’s location, used exactly as described in Sections 2.5 and 2.12; SpeleoMap notes whether a fix came from a receiver.
• Stored: The paired meter’s and chosen sensor’s Bluetooth identifier and name, in the app’s settings on your device. Readings are stored with your project like any other measurement.
• Uploaded: NO. The device talks to your iPhone directly; SpeleoMap doesn’t use the device maker’s app or account.
• Shared: NO.
• Turning it off: Switch it off in Settings → External Devices (Bluetooth stops) or tap Forget this meter. For the thermal camera, turn Thermal Camera off (the camera disconnects) or tap Forget this camera; SpeleoMap keeps only the paired camera’s name and serial number in its settings on your device.

3. Information We Do Not Collect

SpeleoMap does NOT collect, transmit, or have access to any of the following:

• Device identifiers, advertising IDs, or IDFA
• Your location or location history. Location the app records stays on your device (Sections 2.5 and 2.12)
• Usage analytics, behavioral data, or session telemetry
• Automatic crash reports (we receive crash information only if you choose to send it to support)
• Contact lists, calendar data, or photo library content
• Network identifiers, IP-based tracking, or fingerprinting data

4. Cave Location Privacy

Cave secrecy is central to cave conservation. SpeleoMap is built so that cave locations cannot be exposed through us. AFDC does not collect, transmit, or retain cave locations on any system it controls.

• SpeleoMap records geographic location only on your device: the optional entrance GPS fix you choose to capture (Section 2.5) and, while you record a Hike Line, your trail, pins, and destinations (Section 2.12). None of it is ever uploaded to AFDC.
• Cave names, cave systems, entrance names, and all other cave metadata you enter remain on your device. They are never uploaded to or shared with AFDC.
• This protection is enforced by design, not only by policy. If you send diagnostics to support, GPS coordinates, altitude, magnetic readings and project names are removed from them on your device before they leave your phone.
• Because no cave location data is ever transmitted to AFDC systems, there is no cave location data for AFDC to sell, lose, disclose, produce in response to legal process, or have compromised in a breach.

We consider this privacy by architecture: not a promise that we will not look, but a design in which we cannot.

5. Apple Frameworks Used On-Device

SpeleoMap uses standard Apple frameworks that run entirely on your device: ARKit and LiDAR sensors (for 3D capture), Core Motion (for step detection, altimeter, and device motion), HealthKit (for workout sessions, with your permission), AVFoundation and the microphone (for video audio, with your permission), Core Bluetooth (only to connect to the laser meters, sensors and thermal cameras you turn on in Settings, Devices, with your permission), External Accessory and Wi-Fi hotspot configuration plus local network access (only to reach a FLIR thermal camera you connect, with your permission), and Core Location (for the GPS fix at the cave entrance, and for Hike Line trail recording and compass heading, with your permission). None of these frameworks transmit your data to Alpine First Day Cover LLC. HealthKit data is governed by Apple's privacy controls in your device Settings.

6. Device Backup

SpeleoMap does not include an in-app cloud sync or cloud backup feature. Your data is stored on your device. If you have iOS device backup enabled, your app data may be included in your standard encrypted iCloud backup. This is an Apple iOS feature controlled entirely by you. AFDC has no access to it. To back up or transfer a survey yourself, use the in-app Export feature to produce a bundle and save it wherever you choose.

7. Remote Configuration

SpeleoMap fetches a small reference data file (organizations.json) from a public URL when network is available so the in-app organization picker can show the current list of registered organizations. The fetch is anonymous and read-only. No personal information, profile data, scan data, or device identifiers are transmitted as part of this request. The file is cached locally and the app remains fully functional offline using the cached copy. Additional reference data sources may be added in future releases; this policy will be updated to disclose them when they ship.

8. Third-Party Services

SpeleoMap does not embed third-party analytics, advertising, tracking, or marketing SDKs. The app does not use Firebase, Google Analytics, AdMob, Crashlytics, or any equivalent service.

Formspree: Used to receive the subscription reports described in Section 2.7. Formspree receives only the report fields listed there, plus standard HTTP request metadata. It does not receive any cave data, scan data, photos, location data, HealthKit data, or session content. Privacy policy: formspree.io/legal/privacy-policy. Formspree also receives the email address, and the optional "I'm a…" choice, you enter on the speleomap.com Get notified form; AFDC uses it only to email you SpeleoMap launch news, never sells or shares it, and deletes it on request.

GitHub (raw.githubusercontent.com): Used to host the organization directory file fetched via remote configuration (Section 7). GitHub receives standard HTTP request metadata as part of any file fetch. No personal information or app content is transmitted in the request. Privacy policy: docs.github.com.

Website (speleomap.com)

The SpeleoMap website uses no cookies, analytics, advertising or tracking. Three forms send what you type to Formspree so we can reply: Contact (your name, email, subject and message), Get notified (your email and the optional “I’m a…” choice) and Conservation register (the organization details you enter). We use them only to answer you, send the launch news you asked for, or review a registration; we never sell or share them, and delete them on request. The site is hosted by Cloudflare, which keeps standard server logs (such as IP address and browser type) to deliver and protect the site. Privacy policy: cloudflare.com/privacypolicy.

9. How We Store the Information You Provide

Subscription reports (Section 2.7) are transmitted to AFDC via Formspree, then stored on systems controlled by AFDC. They are used only for the purposes stated in Sections 2.7 and 2.9. Support correspondence and any information you voluntarily share with support is stored on systems controlled by AFDC and used only to respond to your request. We do not sell, rent, or trade your personal information.

10. Your Rights

• Revoke any permission in iOS Settings
• Delete all on-device data by deleting the app
• Delete individual session bundles in the app's project list
• Request a copy of the personal information we hold about you by emailing support@speleomap.com
• Request correction or deletion of your information by emailing support@speleomap.com
• Request that we cease processing your information in connection with cave conservation
• Withdraw consent at any time

We respond to requests within 30 days. If you are in the European Economic Area, United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or the CCPA respectively, including the right to lodge a complaint with your local data protection authority.

11. Data Security

• All cave scan, trajectory, survey, photo, and HealthKit data stored locally on your device
• HealthKit data protected by Apple HealthKit security
• Session bundles written atomically to reduce risk of corruption
• Subscription reports transmitted to AFDC sent over HTTPS
• Profile information stored using reasonable technical and organizational measures

12. Children

SpeleoMap is a technical cave-surveying tool intended for a general audience and is not directed to children. Although it is rated 4+ in the App Store because it contains no objectionable content, the app is not designed for or marketed to children. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us in connection with the onboarding submission, contact us and we will delete it.

13. Changes to This Policy

If we make material changes to this policy, we will update the Effective Date and version number at the top and, where appropriate, notify users through the app or by email. Continued use of SpeleoMap after changes take effect constitutes acceptance of the updated policy.

14. Contact

Alpine First Day Cover LLC
Email: support@speleomap.com
Website: speleomap.com/legal/privacy-policy