Elevate 3D — Privacy Policy

Effective date: June 14, 2026 Last updated: June 14, 2026

Elevate 3D ("Elevate 3D", "we", "us", or "our") turns your outdoor activities — runs, walks, hikes, and rides — into 3D terrain renderings and shareable videos. This Privacy Policy explains what information the Elevate 3D iOS app collects, how we use it, the legal bases we rely on, who we share it with, and the choices and rights you have.

By creating an account or using the app, you agree to the practices described here.

1. Who we are

Elevate 3D is built and operated by an independent solo developer (the "developer"). We are not a registered company; "Elevate 3D" is the name the app is published and operated under. For the purposes of the EU/UK General Data Protection Regulation, the developer is the data controller for the personal information described in this policy.

If you have any questions about this policy or your data, or want to exercise any privacy right, contact us at contact@elevate3d.io.

2. Information we collect

We collect only what we need to run the app. We do not sell your personal information, we do not "share" it for cross-context behavioral advertising, and we do not use it for cross-app or cross-site tracking (our App Tracking declaration is NSPrivacyTracking = false).

2.1 Account information

To use Elevate 3D you create an account. Authentication is handled through our authentication provider (Supabase Auth) using one of:

• Sign in with Apple — Apple shares a unique identifier and, depending on your choice, your name and a real or Apple-relay email address.
• Sign in with Google — Google shares your basic profile and email address.
• Email one-time code (OTP) — you provide an email address and verify it with a code.

We store your email address, an account identifier, and your subscription/entitlement status on our servers so you can sign in across devices and so we know which features you have access to.

2.2 Health and fitness data (Apple Health / HealthKit)

With your explicit permission, the app reads workout data from Apple Health to build your 3D renderings. This can include:

• Workouts (runs, walks, hikes, rides)
• Workout routes (the GPS path of an activity)
• Heart rate, cadence, and power samples associated with a workout

This health data stays on your device. It is read from Apple Health, processed locally, and stored in the app's local database. It is not uploaded to our servers and is never used for advertising or marketing (consistent with Apple's HealthKit requirements). It leaves your device only if you choose to export or share a video you create.

You can revoke the app's Health access at any time in Settings → Privacy & Security → Health → Elevate 3D.

2.3 Imported route files (GPX)

You may import activity files (e.g. GPX) you already have. These contain the geographic coordinates, timestamps, and elevation of your activity. We use them the same way as HealthKit routes — locally, to generate terrain and video. The app does not track your live location in the background; location information comes only from the workouts and files you choose to import.

2.4 Map and terrain data requests

To render the terrain under your route, the app downloads map imagery and elevation tiles for the area your activity covers (from third-party mapping providers such as Mapbox and public elevation/satellite sources). This means the geographic area of your activity is sent to those providers as part of the tile request so the correct imagery can be returned. Downloaded tiles are cached on your device to reduce repeat requests.

2.5 Analytics and diagnostics

We use PostHog (US region) to understand how the app is used and to find and fix problems. This includes:

• A device/installation identifier
• Usage and diagnostic events — screens viewed, features used, app lifecycle events (install, update, open), and performance/error information
• Approximate, coarse location inferred from your IP address by the analytics service (city/country level), used for aggregate usage statistics

Analytics is not linked to advertising, is not shared with ad networks, and does not track you across other apps or websites. (See our App Privacy "nutrition label" on the App Store for the summarized categories: Identifiers and Diagnostics, used for Analytics.) You can turn analytics off at any time — see §7.

2.6 Content you create

The 3D scenes, compositions, and exported videos you create are generated and stored on your device. Exported videos are saved to your Photos library only when you ask the app to save them.

2.7 Device permissions we request

You can grant or revoke any of these at any time in the iOS Settings app. Denying a permission only disables the related feature.

3. How we store and sync your data

• On your device: your imported workouts, routes, health samples, 3D scenes, and rendered media are stored locally in the app.
• Apple iCloud (CloudKit): your profile and trail list sync through your own private iCloud container, under your Apple ID. We do not have access to that container; it is governed by Apple's iCloud terms and privacy policy.
• Our servers (Supabase): we store your account email, account identifier, and subscription/entitlement status, as described in §2.1.

4. How we use your information, and our legal bases

We use the information above to provide and improve the app. Where the GDPR or similar laws apply, we rely on the following legal bases:

We do not sell your personal information, and we do not use your health, fitness, or location data for advertising. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Who we share information with

We share information only with the service providers (sub-processors) that make the app work, and only as needed for the purposes above:

These providers process data on our behalf under their own terms and privacy policies. We do not share your information with advertisers or data brokers.

We may also disclose information if required by law, to comply with legal process, or to protect the rights, safety, and security of our users or the public.

6. Data retention and deletion

• Account data (email, identifier, entitlement) is retained while your account is active.
• On-device data (health, routes, scenes, media) remains until you delete it or uninstall the app.
• Analytics data is retained in aggregate to track product trends.

Deleting your account: you can delete your account and its associated server-side data from within the app. Deleting the app from your device removes the locally stored data on that device; data synced to your private iCloud container is governed by your Apple ID settings. To request deletion or ask about your data, contact contact@elevate3d.io.

7. Your choices and rights

In-app and device controls:

• Health access: revoke anytime in iOS Settings → Privacy & Security → Health.
• Camera / Photos: revoke anytime in iOS Settings.
• Analytics: we honor an opt-out; you can disable analytics collection so that no usage or diagnostic events are sent.
• Account deletion: available in-app (see §6).

Your legal rights. Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — request a copy of the personal information we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — ask us to delete your personal information ("right to be forgotten").
• Restriction / objection — ask us to limit or stop certain processing, including processing based on legitimate interests.
• Portability — receive your information in a portable, machine-readable format.
• Withdraw consent — where we rely on consent (e.g. Health access), withdraw it at any time, without affecting prior processing.
• Non-discrimination — we will not deny you service or charge you differently for exercising these rights.

To exercise any right, contact us at contact@elevate3d.io; we will respond as required by applicable law.

EU/UK users (GDPR): you also have the right to lodge a complaint with your local data-protection supervisory authority.

California users (CCPA/CPRA): in the past 12 months we have collected the following categories of personal information: identifiers (account/device identifiers, email), internet/usage activity (diagnostic and usage events), and coarse geolocation (IP-derived). We collect this for the business purposes in §4 and disclose it only to the service providers in §5. We do not sell and do not "share" (for cross-context behavioral advertising) your personal information, and we have not done so in the past 12 months. You have the rights to know, delete, and correct your information, and to be free from discrimination for exercising them.

8. Security

We use industry-standard measures to protect your information, including encrypted transport (HTTPS/TLS) for all network communication and Apple's on-device protections for locally stored data. No method of transmission or storage is completely secure, but we work to protect your information using reasonable safeguards.

9. Children's privacy

Elevate 3D is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. International users

We operate from, and process data in, the United States. If you use the app from outside the United States, you understand that your information will be processed in the United States and other countries where our service providers operate, which may have different data-protection laws than your own. Where required, our service providers maintain appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide notice within the app. Your continued use of the app after an update means you accept the revised policy.

12. Contact us

Questions, requests, or concerns about this policy or your data:

Email: contact@elevate3d.io