Privacy Policy

DRAFT — not legal advice. Plain-language draft for an invite-only pilot. Have a qualified attorney review before relying on it.

Effective date: November 2, 2026

Last updated: November 6, 2026

ScoutTract (https://scouttract.com) is operated by Mike Lang, a sole proprietor. This policy explains what we collect during the invite-only pilot and why.

What we collect

• Account details: your name, username, email address, role, and the invitation that created your account.
• Usage logs: sign-ins (time, IP address, browser), which map layers and records you look up, reports you create, and how much data is requested and transferred.
• Terms acceptance: which document versions you accepted, when, and from what IP address and browser.
• Anything you choose to enter, such as notes, saved places, photos, or support messages.

How we use it

To run and secure ScoutTract, send invitations and account emails, answer support requests, and produce a daily operator report on server health and usage so we can fix problems and improve the pilot.

Hunting party location

Your last shared location stays visible to members of the same party until you clear it, leave the party, the party ends, or you delete your account.

Your location on the map: the 'Me' switch shows your position only on your own device. It is off by default, and your position is not sent to ScoutTract for it; only the on/off setting is saved to your account. Group location sharing is off by default and is set separately for each group. When it's on, only members of that group can see your latest position. You can stop sharing at any time, or have it stop automatically after 1, 4, 8 or 12 hours. ScoutTract keeps a trail of up to 24 hours and your last-known position until you clear it or the group ends. You can delete your trail and last-known position at any time by holding Delete my trail history for 3 seconds, except while an SOS or fall/crash alert you sent is active, so responders can find you.

SOS emergency contacts and medical information

Emergency contacts are optional. Email alerts to confirmed emergency contacts and the optional medical information fields are available now. Texts to emergency contacts are being turned on shortly; until then ScoutTract does not text your emergency contacts.

Your emergency contact's consent. Before an emergency contact can receive alerts, the contact must agree to this statement: "I agree to receive ScoutTract safety texts and optional email as this user's emergency contact, including their location and private live link after an SOS or uncancelled crash alert. Frequency varies by incident. Message and data rates may apply. Reply STOP to stop texts, HELP for help. Consent is not a condition of purchase. ScoutTract is not a substitute for 911." The contact must tick an unchecked I agree box and press a separate Confirm button; opening a link, or an email scanner previewing it, does not confirm anything. You send the one-time confirmation link to the person yourself, through a channel you choose; ScoutTract does not text or email them before they agree. Links expire after 24 hours, can be used once, and stop working if the contact's phone number or email address changes. Contacts who confirmed under the earlier text-reply process are asked to confirm again through a one-time link before the broader alerts described here apply to them; an earlier YES reply does not extend their consent.

Medical information. Medical information is optional. You may save medications, allergies, prescriptions and a note in your profile. These fields are encrypted at rest and, in the app, are available only to you. Administrators do not have a medical-profile viewer. The server must decrypt the information to show it to authorized viewers, so encryption does not make it inaccessible to the server operator, and it does not protect an unlocked phone.

When you first enter medical information, the setting "Share medical info with my emergency contacts during SOS" is on and clearly shown. You can turn it off before saving or at any time later. When it is on, your currently confirmed emergency contacts may see the information through their incident link. Texts contain only a short notice that medical information is available; the details are on the private link page. Party members, friends, public galleries and ordinary administrator screens never receive medical fields. Turning sharing off removes medical information from the link from then on, but cannot take back messages or screenshots already received.

The private SOS link. During an SOS, each confirmed contact gets their own private link that can be revoked. It shows only your current or last known position, up to the last hour of your recorded trail, your battery level when available, and medical information if you chose to share it. No login is needed, so anyone the contact forwards it to can use it until it is revoked or expires; contacts are asked not to forward it. A link expires 24 hours after the incident is resolved (active incidents also have a safety time limit), and sooner if the contact is removed, their phone number or email changes, or they reply STOP.

Limits. Location may be missing, out of date or inaccurate. Texts and emails can be delayed, blocked or unavailable. Directions open your chosen outside maps provider only when tapped. ScoutTract does not contact emergency dispatch and does not replace calling 911. Cancelling an SOS stops location collection for that incident and marks its page ended; it cannot recall an alert already delivered.

How long we keep it. Medical fields are kept until you change or clear them or delete your account. The incident trail covers at most the last hour. Your last position and contacts' link access are kept until 24 hours after the incident ends (or 24 hours after the active-incident limit). Expired invitation and incident records are removed by routine safety maintenance.

Login history

ScoutTract records successful sign-ins so authorized administrators can review them: the time, device or browser, and app label. Your last login time is kept separately from your last activity. Older imported records may show the device as unknown.

Login history stores a keyed, pseudonymous hash of your IP address rather than the IP address itself. This hash is still an identifier. New sign-in and device-session records no longer store raw IP addresses; this does not change or erase older records or separate consent and security logs.

Login history may record an approximate position with each sign-in. Approximate city and state may come from an offline, licensed dataset provided by the operator; no outside geolocation service is contacted. IP-based location can be wrong because of mobile networks, VPNs or out-of-date data, and shows Unknown when no valid dataset is available. If My location was already on when you signed in, a recent GPS fix from the previous two minutes may be attached, rounded to about 100 m. Login history never asks for GPS, and turning on My location after signing in does not apply to that earlier sign-in. GPS can be inaccurate or spoofed and is not proof of where a person was. If the position setting is turned off, stored positions are hidden from history and downloads.

Only administrators can view a user's login history or download it as a CSV file. Viewing, downloading and retention changes are recorded in the audit log, without positions, raw IP addresses, passwords or session credentials. There is no public link to login history.

By default login history is kept indefinitely. An administrator can choose 90 days or another period for automatic deletion; once deleted, events cannot be restored. Last-login time is kept separately. Login history is included when an account is deleted.

Who we share it with

We do not sell or rent your information, and we do not share it for advertising. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and SMS opt-in consent are never sold or shared for marketing. We use only the service providers needed to run the app:

• DigitalOcean hosts the app and its data on servers in the United States.
• Brevo delivers our emails, sent from invite@scouttract.com.

When you look up a location, the app may send that location (not your name) to public government data services to fetch the records you asked for. We may disclose information if the law requires it.

How long we keep it

We keep account information while your account is active, and logs only as long as they are useful for operating the service. When you ask us to delete your account, we remove your personal details, except records we must keep for legal or security reasons.

Security

ScoutTract is served over HTTPS, passwords are stored hashed, and access to the server is restricted. No system is perfectly secure.

Your choices

You can ask to see, correct, or delete your information, or close your account, by emailing catchall@scouttract.com.

Children

ScoutTract is not intended for anyone under 18.

Changes

If this policy changes, you will be asked to accept the new version before you continue.

Contact

catchall@scouttract.com