This Policy applies to anyone who uses the Service. The Service is intended for U.S.-based adults and is not directed to children under 13. See Section 11 ("Children's Privacy").

10Point is a wildlife habitat mapping tool. It provides interactive maps with habitat density overlays, wind condition data and forecasts, public land access boundaries, location search, and user waypoints (pins), folders, colors, and preferences.

10Point requests foreground location permission ("while using the app") to center the map on your current position and to surface nearby features. Your device location is used in-session only — we do not log, store, or transmit location history. Waypoints you place are GPS coordinates you choose manually, not automatic captures of where you have been.

We use PostHog, a product analytics service, to understand how the Service is used — for example, which features are popular and where users encounter problems. When you are signed out, PostHog uses an app-generated identifier. When you sign in, we associate analytics events with your app account ID so we can understand usage across authenticated sessions. Events may include feature interactions, page views, subscription tier, platform, and app version. We do not intentionally send your email address, precise device location, waypoint coordinates or names, or location-search text to PostHog. We do not use PostHog for advertising, cross-app tracking, or cross-site behavioral advertising. You can learn more about PostHog's privacy practices at posthog.com/privacy.

On a successful account deletion, we delete the PostHog person profile linked to your account ID and queue its historical events and any recordings for deletion. PostHog processes the queued historical-data deletion asynchronously, so those records may remain for a limited time after your account deletion succeeds.

We collect information in three main ways: (1) information you provide, (2) information generated by your use of the Service, and (3) information from third parties you choose to use (like Google or Apple sign-in).

Accounts are optional for basic use. If you create an account, we collect your email address and authentication credentials (email/password, Google OAuth, or Sign in with Apple). Passwords are managed by Supabase Auth and stored as a hash — we do not store plaintext passwords.

If you sign in with Google or Apple, we receive the provider-specific account identifier and email address the provider makes available. Apple may provide a private relay email address instead of your personal address. We do not collect phone numbers, physical addresses, or social profile data.

When Apple supplies a revocable refresh credential after a successful Sign in with Apple callback, our authenticated gateway validates it and stores a server-side encrypted copy only so we can revoke the Apple authorization when you delete your account. After that transfer succeeds, the app removes provider credentials from its persisted authentication session. We do not use the refresh credential for another purpose.

When you are signed in, we sync the following to our database (via Supabase): waypoints (GPS coordinates you choose, name, color, folder assignment), folders (name, visibility toggle), and preferences (selected state, selected species, layer settings). A waypoint whose sync is pending or has failed may remain stored locally on your device until it syncs successfully, you discard it, or you delete your account.

On the web, your owner-scoped last map view may also retain waypoint coordinates locally for navigation continuity after server sync. This local map state is removed when you delete your account or clear the site's data.

When you are not signed in, waypoints and folders you create are kept only for your current session. They are not saved and are cleared when you close or reload the app, and they are never sent to our servers. Sign in to save them.

App preferences (such as your selected state, species, layer settings, and — on the web — your last map view) are stored locally on your device for convenience and are not sent to our servers when you are not signed in.

If you subscribe to 10Point Pro ($6.99/mo or $49.99/yr), purchases are handled by the Apple App Store (iOS), Google Play (Android), or Stripe (web) managed through RevenueCat. We do not store your credit card number or full payment details. We may receive or access limited subscription-related information such as subscription status, product identifiers, transaction timestamps, and an app-specific RevenueCat user ID. For signed-in users, that identifier is linked to the user's 10Point account so subscription access can follow the account across devices.

Even without analytics SDKs, some technical data is processed when you access the Service, including through our hosting and security providers (e.g., Cloudflare). This may include IP address, user-agent and device/browser type, request timestamps, and basic diagnostic/security logs. We use this information primarily for security, reliability, and abuse prevention — not for advertising.

We use only essential cookies or local storage needed to maintain sessions (e.g., Supabase auth tokens) and keep you signed in. We do not use third-party tracking cookies for advertising.

Our native apps may detect whether you are online or offline to show user-facing status messages. We do not transmit data while offline and we do not track offline behavior.

We use collected information to:

We do not use your information for targeted advertising.

We share information only as needed to run the Service, comply with law, or protect rights.

Supabase — Authentication, database, user data storage. Data shared: email, password hash (Supabase-managed), waypoints, folders, preferences.

RevenueCat — Subscription management. Data shared: app-specific user ID (linked to the 10Point account when signed in), subscription status, transaction metadata.

Stripe (via RevenueCat) — Web payment processing. Payment info is processed by Stripe, not stored by us.

Apple App Store / Google Play — App distribution and in-app purchases. Standard platform data per their policies.

Google OAuth — Optional sign-in. Data shared: Google account ID, email.

Sign in with Apple — Optional sign-in. Data received: Apple account identifier, email address when Apple makes one available, and a revocable refresh credential when Apple provides one. After validation, the refresh credential is stored encrypted solely for authorization revocation when the account is deleted.

Mapbox — Location search (geocoding). Data shared: search query text (proxied; we do not intentionally send your user ID).

Cloudflare — Edge hosting, CDN, Workers. Data shared: standard request metadata (IP, user-agent, logs for performance/security).

PostHog — Product analytics. Data shared: app-generated identifier when signed out; 10Point account ID when signed in; feature interactions, page views, subscription tier, platform/device type, and app version. We do not intentionally send email addresses, precise device location, waypoint coordinates or names, or location-search text to PostHog. PostHog data is used solely to understand and improve the Service, not for advertising or cross-app tracking. Successful account deletion removes the linked PostHog person profile and queues its historical events and any recordings for asynchronous deletion.

Protomaps — Basemap tiles. Data shared: tile requests (generally no user account data).

We may share information if we believe it is reasonably necessary to comply with law, regulation, legal process, or government request; enforce our Terms of Service; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, or safety of users, the public, or 10Point.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

We operate in the United States (Michigan-based). Our vendors (e.g., Supabase, Cloudflare, RevenueCat, Stripe, Mapbox) may process data in the U.S. and potentially other locations where they operate.

Logged-in users: We retain your account data and synced content (waypoints, folders, preferences) as long as your account is active or as needed to provide the Service. On the web, an owner-scoped local map-state cache may also retain waypoint coordinates for navigation continuity until account deletion or site-data clearing.

Non-logged-in users: Waypoints and folders are kept only for your current session and are cleared when you close or reload the app. Preferences may remain on your device until you clear the app or site data.

Deleting content: You can delete individual waypoints and folders in-app. Deleted items are removed from your account data in Supabase (subject to typical technical delays for backups).

Account deletion: You can delete your account (a) in-app under Account → Delete Account, (b) on the web at 10point.app/delete-account, or (c) by contacting [email protected]. The deletion service first deletes the PostHog person profile linked to your account ID and queues its historical events and any recordings for deletion. It then removes your linked RevenueCat customer profile, active Supabase account, server-synced waypoints and folders, and synced preferences. PostHog processes historical event and recording deletion asynchronously. Limited records may remain temporarily in backups or be retained when required for security, legal compliance, accounting, fraud prevention, chargebacks, or dispute resolution.

Subscriptions: Deleting the RevenueCat customer profile cancels a subscription purchased through RevenueCat Web Billing on 10point.app. It does not cancel an App Store or Google Play subscription; cancel those separately to prevent future charges.

Sign in with Apple: When an encrypted revocable refresh credential is available, we automatically use it to revoke the Apple authorization during account deletion. If no revocable credential is stored, account deletion still completes and the confirmation directs you to remove 10Point under Sign in with Apple in Apple Settings.

Analytics: Account deletion resets the PostHog identity on that device, deletes the linked PostHog person profile, and queues historical events and any recordings tied to the former account ID for deletion. The queued historical-data deletion may complete asynchronously.

Payment records: Payment platforms may retain transaction records as required for tax, accounting, fraud prevention, chargeback handling, dispute resolution, and legal compliance under their own policies.

Some U.S. state laws provide additional rights (e.g., California, Virginia, Colorado). Depending on your state of residence, you may have rights to request access to personal information we hold about you, request deletion, request correction, and opt out of certain types of processing.

We do not sell personal information and we do not share it for cross-context behavioral advertising. To make a request, contact [email protected]. We may need to verify your request (for example, by confirming access to the email address on the account).

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure. You are responsible for keeping your login credentials confidential.

10Point is not intended for children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact [email protected] and we will take steps to delete it.

We may update this Policy from time to time. If we make material changes, we will update the "Last Updated" date and may provide additional notice in the app or on 10point.app.

If you have questions or requests related to privacy, contact: Email: [email protected] Website: 10point.app