Privacy Policy

Last updated: 7 October 2026

Who we are

All Munros is made by Alexander Street, an independent developer in Scotland, who is responsible for your data (the data controller). Contact: support@allmunros.co.uk.

Without an account

Your name, hill fitness level, skills and qualifications, the Munros you have climbed, the walks you plan and the tracks you record are kept in the app's storage on your phone. Deleting the app deletes them. Some things still reach our servers or other services without an account: crash reports and the app-open signal (see Diagnostics), usage statistics, taps on partner links, and the lookups described under Location and Services we use.

Your account

You can sign in with Apple, with Google, or with an email address and password. Signing in with Apple can share your name and email (or Apple's private relay address). We store, in our database hosted by Supabase:

• Account details: your email address and sign-in method, and the date you agreed to the Terms and Community Rules. If you sign in with Apple, we also keep the token Apple issues for your sign-in, only so that deleting your account can revoke it.
• Profile: your display name, username, hill fitness level and hill skills. Your profile (display name, username, hill fitness level and skills) and the Munros you have climbed, with their dates, can be seen by other walkers. Your qualifications stay on your phone.
• Your log: the Munros you have climbed and when.
• Friends: who you have added and who has added you, and walkers you have blocked. Other walkers can see who you follow and who follows you; only you can see your blocks.
• Walks: the hill, route and date, the names you add to the party, your notes, who you invited and their replies. The people you invite can see them, and so can any walker who has added you as a friend, including your notes and the party names.
• Recorded tracks and photos and videos — see below.
• Reports you make about content or walkers. Only we can see them. The walker you report is never told who reported them.

The account directory is shared with the developer's other apps, so the same sign-in works in them. Deleting your account deletes it everywhere.

Location

All Munros only uses your location while the app is open and on screen, never in the background, and only when you ask for something that needs it:

• Hills near you. Your position is used on your phone to sort hills by distance, and is not stored. If you type a town or postcode instead, the text is sent to OpenStreetMap's Nominatim service to find it.
• Drive time. If you use your location to work out how long the drive to a hill is, your coordinates are sent to the public OSRM routing service (router.project-osrm.org). For public transport, they go into a Google Maps link that opens outside the app.
• Recording a walk. While you record, the app saves your position, height and the time every few seconds. The track is kept on your phone, and if you are signed in it is also saved to your account. The people on that walk can see it. So can anyone you send the walk's share link to: they see the whole track, with its times.
• Photo locations. When you add photos or videos to a walk, the place and time each one was taken (from the photo itself, or from your track) are uploaded with it, so it can be pinned to the route. The uploaded file can also keep the location your camera stored in it.
• Public walk reports. If you publish a report, anyone with its link can see the route (trimmed at the ends if you choose, without times), where each photo in it was taken, the date, how long the walk took, and the names of everyone on it. Link previews in messaging apps show the hill, the date and those names. Photos and videos in a report may still contain the location and time your camera stored in the file.

If you decline location access, everything else keeps working.

Photos and videos

• Choosing photos. The photos and videos you pick are uploaded when you add them to a hill's gallery (public — anyone can see them) or to a walk (the people on the walk can see them, and your share link opens them to more; you choose which go on a public report).
• Finding a walk's photos. With your permission, All Munros looks through the photos and videos taken during a walk, comparing their times and places with the route. This happens on your phone. Nothing is uploaded until you confirm which ones to add.
• Finding Munro days you never logged. The app can read the locations of your most recent photos (up to 3,000) and match them against Munro summits. This happens on your phone, and no photos are uploaded. If you confirm a day, it is added to your log like any other climb.

Guests who add photos to a walk from its web link give a first name, and their browser keeps a random code so they can add more later. They do not need an account. The time and place stored in each photo are read and uploaded with it, so it can be pinned to the route.

Usage statistics

We record what happens in the app in our own database. We use no analytics company. An event is a name like report_published or media_scan_started, the time, your account id if you are signed in, the walk it concerns, and a few details such as counts. On the web share pages, a random code stored in the browser takes the place of the account id. There is no advertising id and no device fingerprint. We use this only to understand which features work and to improve them.

Partner links

Some screens recommend places to stay or gear, and All Munros may earn a commission. When you tap one we record which partner it was, the walk, the screen, and your account id if you are signed in. The link you open carries a tag naming the screen and the walk, so the partner can credit All Munros. What the partner does with your visit is governed by their own privacy policy.

Diagnostics, crash reports and feedback

These go to a server run by the developer, and are only used to find and fix problems. An AI model (Claude, from Anthropic) reads crash reports and feedback, including any screenshot, to work out what went wrong and propose a fix.

• App-open signal. When the app opens or comes back on screen (at most every five minutes) it sends a short "the app is running" message with the app version.
• Crash reports. If the app crashes it sends the error, where in the code it happened, the screen you were on, your phone's operating system and version, and the app version. For smaller errors it only sends a count.
• Feedback. When you shake your phone (or use Report a problem) you see exactly what will be sent before anything goes: a screenshot of the screen you were on, the screen's address (which can include the id of the walk or walker you were looking at), your last few taps in the app, recent error messages, your operating system and app version, and what you type. You can remove the screenshot, send without the extras, or not send at all. If the screenshot shows your name or anything else personal, that is included.
• Replies. If you allow notifications when you send feedback, your phone's notification token is sent too, so we can tell you when the problem is fixed. The notification is delivered through Expo's push service.
• Credit. If you enter a name for the credit, it is shown to other users on the app's list of people whose reports led to fixes.

These carry a random code created when the app is installed, not your account, email or name, unless you type them in. The shake is detected with the motion sensor, which is used for nothing else.

Services we use

These services process data for us, or receive requests from your phone:

• Supabase — our database, sign-in and file storage, in London.
• Vercel and Cloudflare — host this website, the share pages, and the hill data files the app downloads.
• Apple and Google — sign-in, if you choose them.
• Anthropic — its Claude AI model reads crash reports and feedback to diagnose and fix problems.
• Expo — delivers app updates and the notification when a problem you reported is fixed. Update checks include the app version, platform, a random install code and a group name (almost everyone is in all; a few testers get updates first). The app decides the group on your phone, so your email never leaves it for this.
• Open-Meteo — mountain weather, requested for the hill's coordinates, not yours.
• OpenStreetMap (Nominatim and map tiles), OSRM, OpenFreeMap and AWS open terrain tiles — place search, drive times, maps and 3D terrain.
• Wikipedia and Wikimedia Commons — hill photos and descriptions.
• unpkg, jsDelivr, esm.sh and Google Fonts — code libraries and fonts for the map and 3D views.

Like any website, each of these sees your IP address when your phone contacts it.

What All Munros does not do

• No advertising and no advertising identifiers.
• No third-party analytics or tracking tools, and no tracking you across other companies' apps or websites.
• No selling or renting of personal data.
• No background location.
• No access to your contacts. The camera and microphone are never used.

How long we keep it

• Account data, your log, walks, tracks, photos and videos: until you delete them or your account.
• Usage statistics: kept to understand long-term use. When you delete your account they lose your account id. Some events about friend suggestions record the id of the friend involved; email us and we will remove those too.
• Diagnostics and feedback: only as long as it takes to fix the problem, and deleted on request.
• Reports about content: kept while we review them and for our moderation record.

Deleting your data

In the app: You tab → gear → Account & backup → Delete account, then tap again to confirm. This permanently deletes your account and, from our servers:

• your profile, log, friends, blocks and any reports you have made;
• your walks, with their tracks, members, photos and videos and any published report;
• the photos and videos you added to other people's walks;
• your hill photos and your partner-link taps.

If you signed in with Apple, All Munros also revokes its Sign in with Apple authorisation, so the app disappears from your Apple ID's list of apps using Sign in with Apple.

Usage statistics are kept, without your account id. If someone else published a report containing a photo you added to their walk, its published copy stays until they update or withdraw the report; email us and we will remove it. Deleting the app deletes what is on your phone. The two are independent: deleting only the app leaves your account in place. You can also email us to delete your account or diagnostics.

Children

All Munros is not directed at children under 13, and we do not knowingly collect personal data from them.

Your rights

Under UK and EU data protection law you can ask to access, correct, export or erase your personal data, or object to how we use it. We rely on providing the service you asked for, and on our legitimate interest in keeping the app working and improving it. Email us and we will respond within a month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

If this policy changes materially, the date at the top will change and the new version will be posted here.

Contact

Questions about privacy, or a request about your data: support@allmunros.co.uk.