TrekLedgerBack to Mandooist

Privacy Policy

Last updated 13 October 2026

1. About this policy

TrekLedger ("we", "us", "our") is a Mandooist app operated by Jason Reeve, based in Australia. This Privacy Policy explains what information the TrekLedger mobile application ("the App") uses, where it goes, and the choices you have.

We handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. This policy also addresses the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where they apply.

The short version: your journal, including your locations, photos, voice notes and steps, lives on your phone and works fully offline. An account is optional. If you sign in, your journal is backed up to, and synced through, a Mandooist cloud account. If you never sign in, nothing is sent to us. The link to Stridefall, our movement game, isoff until you turn it on in Stridefall.

2. Information the App uses

2.1 Your journal, on your device

The App stores your trips, the page for each day, the notes and marks you record, the GPX tracks you import, copies of the photos you add, your voice notes, each day's step count and your settings on your device.

Signed out, we never receive this information, and nothing is backed up for you: useExport all data in Settings to keep your own copy. Signed in, a copy is stored in your account as described in 2.9. Deleting a trip removes it from your phone and, if you are signed in, from your account on your next sync. Uninstalling the App removes the copy on your phone. If you export a GPX file or a zip, or share one, you choose where it goes.

2.2 Location

If you allow location access, the App reads your precise location at the moment you save a mark, note, photo or voice note, and stores it with that entry. It is how a water source or campsite gets its place on the map.

GPS tracking is off by default. If you turn it on in Settings and allow "always" location access, the App records your route in the background, including with the screen off, until you turn tracking off. The route is stored as a track on your phone. While tracking is on, the App can send you local notifications (for example when you have not moved for a while, or the battery is low); these are generated on your phone. Your locations, marks and tracks stay on your phone unless you sign in, in which case they sync to your account (2.9), and they are visible to Stridefall only if you link it (2.10).

You can deny location access, or save an entry without a location and place it on the map by hand, and everything else keeps working.

2.3 Photos and camera

If you allow access to your photo library, the App looks at the date and, where the photo has one, the location of the photos on your phone, on your device, to suggest the ones taken on each day of a trip, the ones near your route first. On Android this uses the permission to read where a photo was taken. Only the photos you choose to add are copied into the App, as resized copies. You can share only selected photos with the App, or none. The camera is used only when you take a photo in the App.

2.4 Microphone

The microphone is used only while you record a voice note. The recording is saved on your device. If you are signed in with TrekLedger Plus, it is backed up to your account like your photos (2.9). Voice notes are turned into text on your phone, using a speech model that the App downloads once (about 57 MB) from Hugging Face. That download is a normal web request, so it carries your IP address, and no audio is sent.

2.5 Steps from Apple Health or Health Connect

If you connect it, the App reads your daily step count from Apple Health (iOS) or Health Connect (Android) to show it on each day's page. It reads steps only, never writes anything to Apple Health or Health Connect, and reads no other health data. You can also type a step count in by hand instead.

Each day's step count is part of your journal, so if you sign in it syncs to your account with the rest of that day (2.9) and is used for nothing else. It is never used for advertising, and never sold. The App's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements, and its use of HealthKit data follows Apple's HealthKit guidelines. You can revoke access at any time in the Health app or in Health Connect.

2.6 Maps

The map on each day's page is drawn from tiles fetched from OpenFreeMap when you are online. Like any web request, a tile request carries your IP address and the map area being shown. It carries no identifier, account or journal content. Offline, your tracks and marks still draw on a plain background and nothing is fetched.

2.7 Crash reports and suggestions

When the App crashes or hits an error, it may send a report to Sentry so we can fix it. A report can include your device model, operating system and App version, the error and its stack trace, and a short trail of what the App did just before, such as which screen was open. Reports do not include your journal, photos, voice notes or steps, and anything that looks like an email address or coordinates is removed before sending.

If you send a feature suggestion from Settings, that text is sent through Sentry too, including an email address only if you type one in so we can reply.

2.8 Advertising and purchases

The App shows no advertising and uses no advertising or tracking SDKs. TrekLedger Plus is an optional subscription that adds cloud backup of photos and voice notes. Purchases are processed by the Apple App Store or Google Play, and RevenueCat verifies your subscription. RevenueCat receives your account ID, a device identifier and the purchase receipt, never your payment card details.

2.9 Your account, backup and sync

You can use the App without an account. If you choose to sign in, you can use email and password, Google or Apple. The account is a Mandooist account, shared with our other apps that use the same login, and it is held with Google Firebase. We receive your sign in identifier and email address (or the private relay address Apple gives us). Passwords are handled by Firebase and we never see them.

Once you are signed in, the App backs up your journal to your account and keeps your phones in step: your trips, days, journal text, steps, companions, marks and notes with their locations and times, voice note transcripts, recorded and imported tracks (including the GPX files), plans and settings tied to those. This is stored in Google Cloud (Firestore and Cloud Storage) and is readable only by your account. With TrekLedger Plus, your photos and voice notes are backed up too. Without Plus, photos and voice notes stay on your phone only.

Signing out stops syncing. Delete account in the App's account screen deletes your TrekLedger documents and files from the cloud and then the login itself, which is shared with other Mandooist apps, so you are signed out of those too. Your journal on your phone is yours to keep or delete.

2.10 Linking to Stridefall (optional, off by default)

Stridefall is a movement game made by Mandooist. The link is off until you turn it on in Stridefall's Sources screen, signed in with the same Mandooistaccount. When it is on, Stridefall's backend reads the treks you record with the App's own GPS tracking after that moment, from the journal data already in your account (no separate upload): the date and times of each trek day, the trip's dates, distance, climb, moving time, tracking mode, step count and the route line. Stridefall uses this to count your treks as expeditions and to draw an outline of the route on a keepsake, with the first and last 500 metres left out so your home is not shown.

Imported GPX files are never sent. Your photos, voice notes, journal text and notes are not read by the link. You can turn the link off at any time in Stridefall's Sources screen, which stops any further reading. To have the records Stridefall has already made from your treks removed, email us. See Stridefall's own privacy policy for how it handles them.

3. How we use information

4. Third parties

We do not sell your personal information. The App shares limited data only with:

5. International transfers

Crash reports and suggestions (Sentry) may be processed in the United States, subscription records (RevenueCat) are processed in the United States, your synced journal is stored in Google Cloud data centres that Google selects, and map tile requests are served from wherever OpenFreeMap hosts them. We rely on those providers' compliance and transfer mechanisms where required.

6. Retention

7. Your rights

Depending on where you live, you may have the right to access, correct or delete information about you, to withdraw consent, and to complain to your privacy regulator. You can view, export and delete your journal yourself in the App, delete your account and its cloud copy from the account screen, turn off the Stridefall link in Stridefall, and withdraw any permission in your phone's settings. For anything held by Sentry or Stridefall, or for help with any of this, email us.

Australia: OAIC. EU and UK: your local data protection authority. California (CCPA): we do not sell personal information.

8. Children

The App is not directed at children under 13 (or 16 in the EU), and we do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy. The "Last updated" date above will change, and anything that changes where your journal goes will be explained in the App before it happens.

10. Contact us

You can reach us by email at support@mandooist.com.

Operated by Jason Reeve, Australia. TrekLedger support.

Back to Mandooist