Privacy Policy

Privacy Policy for OilTrails and GeoPics

Effective date: August 25, 2026

Ash Point Software Ltd. (“Ash Point,” “we,” “us,” or “our”) provides the OilTrails mobile applications and website, along with the standalone GeoPics application. This policy explains how we handle information when you use these products and related services, collectively called the “Services.”

Information We Handle

Account information

An account is required for the OilTrails website application and is optional for supported mobile features. If you use an account, we may collect your email address, name or display name, authentication identifier, preferences, plan and access level, and information needed for team seats or shared subscriptions.

Information needed to provide features

OilTrails processes the locations, searches, coordinates, routes, waypoints, map selections, and other information you submit to provide the feature you requested. With device permission, a mobile app may use your current location for mapping, distance, weather, GeoPics, or navigation.

Some information is used only for the immediate request. Information is stored or synchronized when you choose a feature that requires it, such as history, saved locations, routes, Collections, team collaboration, shared links, GeoPics, photos, notes, or related metadata.

Mapping, routing, weather, navigation, and field-data providers may receive the information needed to return a result you requested.

Basic search information may be logged anonymously for the purpose of evaluating search performance to improve location results.

Purchases and subscriptions

Apple, Google, RevenueCat, and Stripe may process purchases and subscriptions. Ash Point receives the information needed to provide and support access, such as the billing provider, plan, subscription status, renewal or cancellation state, transaction status, currency, value, and refund status. Ash Point does not receive or store full payment-card numbers from these providers.

Support, security, and crash information

If you contact us, we collect the information you provide, such as your name, email address, subject, message, and any diagnostic details you choose to include.

We and our providers may process technical information needed to operate, secure, and troubleshoot the Services. This may include app or browser version, operating system, device type, language, timestamps, authentication activity, network and security signals, and error information.

Crashlytics may collect crash reports and related diagnostic context. Crash diagnostics are separate from usage analytics.

Analytics and Campaign Measurement

OilTrails uses Google Analytics to improve the reliability, usability, and performance of the Services.

Google Analytics product events do not include searched locations, exact coordinates, addresses, routes, waypoints, notes, free text, Collection member identifiers, photos, filenames, EXIF data, GeoPic metadata, raw billing-provider identifiers, or payment-card information.

When you are signed in, your Firebase account identifier may be used through Google Analytics’ dedicated User-ID feature. It is not added to event or campaign parameters or sent to advertising providers. This allows eligible activity to be understood across signed-in OilTrails platforms.

Advertising measurement

We use limited campaign measurement to understand whether advertising led to outcomes such as activation, a trial, or a verified purchase. We do not use OilTrails activity to build advertising profiles or target people based on their locations, searches, routes, notes, or photos.

Google Ads may receive approved conversion outcomes through its link with Google Analytics. On Apple platforms, Apple may generate privacy-preserving, aggregate campaign postbacks. An eligible advertising network, including Meta for an eligible iOS campaign, may receive an Apple-generated aggregate postback. OilTrails does not send Meta direct website, Android, or app events.

We do not use the Facebook SDK, Meta Pixel, Meta Conversions API, LinkedIn Insight tag, advertising identifiers, enhanced conversions, Google Signals, personalized advertising, remarketing audiences, fingerprinting, or a mobile measurement partner.

Cookies and Local Storage

The website uses cookies or browser storage for authentication, security, preferences, app state, and analytics. Mobile apps use local storage for settings and feature state. Clearing app or browser data may reset local preferences.

How We Use Information

We use information to:

  • Provide mapping, location lookup, routing, weather, GeoPics, Collections, collaboration, sharing, account, subscription, and support features.
  • Authenticate users and synchronize information they ask us to store.
  • Process purchases, subscriptions, refunds, access, and team seats.
  • Protect accounts, prevent fraud, and maintain service reliability.
  • Diagnose crashes and technical problems.
  • Improve product and search performance.
  • Measure aggregate campaign performance.
  • Meet legal, regulatory, accounting, and dispute-resolution obligations.

When We Share Information

We do not sell or rent personal information. We disclose information only as needed for the purposes described in this policy, including to:

  • Google and Firebase, for authentication, hosting, database services, security, Google Analytics, Crashlytics, and approved Google Ads reporting.
  • Mapbox and other mapping, routing, navigation, weather, or field-data providers, to provide a result or service you request.
  • Apple, Google Play, RevenueCat, and Stripe, to process purchases, subscriptions, refunds, and access.
  • Meta, only as a possible recipient of an aggregate postback generated by Apple for an eligible iOS campaign.
  • Infrastructure, email, contact-form, and support providers, to operate the Services and communicate with you.
  • People or organizations you choose, when you share a route, Collection, GeoPic, link, team seat, or other content.
  • Professional advisers or authorities, when reasonably necessary to comply with law, protect rights and safety, investigate abuse, resolve a dispute, or complete a corporate transaction.

Providers may process information in Canada, the United States, or other jurisdictions where they or their subprocessors operate. Information in another jurisdiction may be subject to that jurisdiction’s laws.

Retention and Deletion

We retain information only as long as reasonably needed to provide the Services, maintain security, resolve disputes, and meet legal, accounting, tax, and reporting obligations.

Security

We use safeguards appropriate to the sensitivity of the information, including access controls, authenticated service boundaries, protected configuration, encryption in transit, and provider security controls. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

Your Choices and Rights

Depending on applicable law, you may ask to access, correct, or delete personal information; understand how it has been used or disclosed; withdraw consent; or raise a privacy concern.

Submit a request through our contact page. Address your request to the Privacy Officer and include enough information for us to understand and verify it. Do not send a password or payment-card number.

If you are not satisfied with our response, you may have the right to contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Children’s Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from a child under 13 without appropriate authorization. Contact us if you believe a child has provided personal information.

Changes to This Policy

We may update this policy when the Services, providers, laws, or privacy practices change. We will post the updated policy and change its effective or modification date. We will provide additional notice or request consent when required for a material change.

Contact Us

For privacy questions, requests, or complaints, contact:

Privacy Officer
Ash Point Software Ltd.
OilTrails contact page

Edit History

  • 2026-08-25: Updated analytics, campaign attribution, and advertising exclusions.
  • 2024-03-06: Added third-party services and website account information.
  • 2023-08-17: Added crash logging.
  • 2023-01-13: Added Android cross-device data synchronization information.