Last updated: August 2026
Who we are
Stanage Foundation operates stanage.org and the STANAGEGO hiker safety app.
We are based in England, UK. If you have any questions about this policy,
contact us at [email protected].
What data we collect
When you use STANAGEGO we collect:
- Apple ID — your stable Apple user identifier, provided when you sign in with Apple. We do not receive your Apple ID email unless you choose to share it.
- Trip data — location name, expected return time, and any notes you submit during a trip.
- GPS location — recorded during an active trip to track your route. Only stored if you grant location permission.
- Step count and distance — recorded during an active trip via your device's motion sensors. Only collected if you grant motion permission.
- Emergency contact details — name and phone number, entered voluntarily by you.
- Device token — used to send you push notifications about your trip status.
We do not collect advertising identifiers, browsing history, or any data unrelated to trip safety.
How we use your data
- To operate the check-in and check-out safety system.
- To send SMS alerts to your emergency contacts if you become overdue.
- To send push notifications to your device about your trip status.
- To display your trip history within the app.
We do not sell, rent, or share your data with third parties for marketing purposes.
Third-party services
- Apple Sign In — authentication is handled by Apple. See Apple's Privacy Policy.
- Twilio — SMS alerts are sent via Twilio. Your emergency contact's phone number is transmitted to Twilio solely to deliver safety alerts. See Twilio's Privacy Policy.
- Anthropic — when an API key is configured, inbound SMS body text and any trip location parsed from it are sent to Anthropic (Claude) to turn free-text messages into trip records. If no key is set, messages are parsed on our servers with a keyword fallback and are not sent to Anthropic. See Anthropic's Privacy Policy.
- Cloudflare — network traffic passes through Cloudflare for security and performance. See Cloudflare's Privacy Policy.
Data retention
Trip data is retained indefinitely so you can review your history. You can delete
your account and all associated data at any time by contacting
[email protected].
We will process deletion requests within 30 days.
Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data.
Contact us at [email protected] to exercise any of these rights.
Security
All data is transmitted over HTTPS. Authentication tokens are stored securely in
your device's Keychain. We do not store passwords.
Children
STANAGEGO is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision.