Privacy Policy
Effective date: July 2, 2026 · Terms of Service · Back to the app
Squanto is a hunting map. By nature it handles something sensitive: where you go and where you plan to go. This policy explains exactly what we collect, where it goes, and how to get it out. The short version: your scouting data belongs to you, we don't sell it, we don't share it with other users, and you can export or delete everything at any time.
1. What we collect
- Account: email address, name (if you provide one), password (stored as a hash by our auth provider — we never see it).
- Scouting data you create: map pins, routes, GPS track recordings, observations, photos you upload (compressed copies), trail-camera sightings, and feature feedback. This includes precise location coordinates — that's the point of the app.
- Subscription data: your plan status and Stripe customer/subscription IDs. Card numbers go directly to Stripe and never touch our servers.
- Usage counters: daily counts of AI scout reads per account (for fair-use limits).
- Technical logs: our hosting provider (Vercel) keeps short-lived request logs (IP address, endpoint, status) for security and debugging.
2. Where your data goes (processors)
We use a small set of service providers to run Squanto. Each receives only what its job requires:
| Service | Role | What it sees |
|---|---|---|
| Supabase | Authentication & database | Account info and your synced scouting data, protected per-user by row-level security |
| Stripe | Payments | Email, payment details, subscription status |
| Vercel | Hosting | Request logs (IP, URL, status) |
| Anthropic (Claude) | AI scout reads | Terrain features, weather, and time-of-day for the area you ask about — no name, email, or account identity |
| Mapbox | Map rendering | Map-tile requests (which areas you view) and your IP |
| ReportAll USA | Parcel boundaries/ownership | Coordinates of parcels you view or tap |
| Open-Meteo | Weather | Coordinates of your prediction area |
| OpenStreetMap (Nominatim) | Place search | Search text you type |
| USGS / BLM / USDA / Esri | Public map layers | Map-tile requests for the areas you view |
| Spypoint | Trail cameras (optional) | Only if you connect your own Spypoint account |
We do not sell personal data, and we do not share your scouting locations with advertisers or other users. There is no advertising or cross-site tracking in Squanto.
3. AI processing
When you request a "scout's read," we send the detected terrain features, current weather, and time of day to Anthropic's Claude API to generate the summary. Requests are not used by Anthropic to train models (per their API terms) and carry no account identity. Your pins, tracks, and photos are never sent to the AI.
4. Where data lives & how long
Your scouting data is stored in your browser (so the app works offline) and synced to our database so you can sign in anywhere. It stays until you delete it — individual items in the app, or everything at once via account deletion, which permanently removes your account, scouting data, usage counters, and subscription records. Stripe retains transaction records as financial regulations require. Hosting logs expire automatically on a short cycle.
5. Your controls
- Export: account menu → Export my data downloads everything (pins, routes, tracks, observations, photos, settings) as one JSON file. GeoJSON and GPX exports are also available.
- Delete: account menu → Delete account permanently erases your account and data and cancels any active subscription.
- Email: we send transactional email only (sign-up confirmation, password reset, billing). No marketing lists.
6. Security
All traffic is encrypted (HTTPS). Database access is enforced per-user with row-level security. Payment card data is handled solely by Stripe (PCI-DSS Level 1). API keys for paid services live only on our servers. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly by email.
7. Children
Squanto is not directed to children under 13 (or under 16 where GDPR applies) and we do not knowingly collect their data.
8. Changes
If we materially change this policy, we'll give notice in the app or by email at least 14 days before it takes effect.
9. Contact
Privacy questions or requests: support@squantohunt.ai