Privacy policy

Your plans are
your business.

A plain-language account of what LST Camino Planner handles, why it is needed, and the choices you have.

Updated September 10, 2026

LST Camino Planner is designed to work usefully without an account. You may use the free route sample and keep schedules only on your device as a guest. If you create an account, purchase a route, or turn on schedule sync, we handle the information needed to provide those features.

The short version

Long Slow Travel does not sell personal information, show advertising, or track you across other companies’ apps and websites. Your live location is not sent to the Long Slow Travel backend. Maps are provided by Mapbox, whose SDK may send de-identified location and usage telemetry when location is gathered.

This Privacy Policy applies to the LST Camino Planner iOS app, the Long Slow Travel account and sync service, and this website. “Long Slow Travel,” “we,” and “us” refer to the independent operator of LST Camino Planner, Aurea Moemke.

Aurea Moemke, trading as Long Slow Travel, is the controller for the processing described here. The postal address is listed in the Imprint; privacy requests can be sent to support@longslowtravel.com. On your iPhone, the installed app is named LST Camino.

Information we handle

A

Account information

If you register, we receive your username, email address, account identifier, and password over an encrypted connection. Passwords are stored in a one-way hashed form rather than as readable text. We issue short-lived access credentials and a renewable sign-in credential to keep you signed in.

✉

Verification and recovery emails

We process your email address and short-lived verification or password-reset challenge information to verify ownership of an address and help you recover access. Our transactional email provider processes the recipient, message content, and delivery events needed to send and protect these messages.

⌁

Schedules, notes, journals, and favourites

Schedules are stored locally on your device. When you are signed in and sync, the service receives schedule names, dates, stage starts and finishes, route choices, rest-day settings, distances, notes, day journal text, journal timestamps and display preferences, and the identifiers of accommodations you mark as favourites for a schedule, together with the identifiers and timestamps needed to keep devices in sync.

Hiding a journal under the day title changes its display only: it is still saved and synced with the schedule. Journals are not end-to-end encrypted or protected by a separate journal password. Do not put passwords or unnecessary sensitive information about yourself or others in notes or journals.

◈

Route purchases

Apple processes payment. Long Slow Travel does not receive your card or bank details. To verify and restore a route, we receive purchase information such as the product, transaction identifiers, purchase status, and purchase date, and associate the verified entitlement with your Long Slow Travel account.

⌖

Location and map usage

If you grant “While Using the App” location access, Trail Mode shows your location only while the app is open; it does not provide background tracking or emergency monitoring. Your live location is not sent to the Long Slow Travel backend. The Mapbox Maps SDK may send de-identified location and product-interaction telemetry to Mapbox when the app gathers location. It is not used by Long Slow Travel for advertising or linked by us to your account.

Displaying or downloading Mapbox maps also makes network requests for the selected map area. Mapbox can receive connection information such as your IP address, app/SDK version and requested map resources, even without location permission. Turning off telemetry does not turn off map delivery requests.

✉

Support messages

If you contact support or submit a correction, we receive your email address and the contents of your message, including any route, accommodation, device, or diagnostic details you choose to include.

↗

Connection information

Like most internet services, the account API and hosting providers may process IP addresses, request times, device or browser information, and security logs to deliver the service, prevent abuse, and diagnose faults.

A

Website language preference

When you choose a language using this website’s selector, we store that choice in your browser’s local storage under lst-site-language so it is remembered on later visits. It is not an advertising identifier and is not sent to our account API. The preference stays until you change it or clear this website’s data in your browser. Without a saved choice, the site uses the language in the page URL or your browser’s language setting. The site does not set analytics or advertising cookies.

How we use information

We use the information described above only as needed to:

  • create, verify, and secure your account;
  • send necessary verification and password-recovery messages;
  • sync schedules you choose to associate with your account;
  • verify route purchases and restore access;
  • deliver route content and service updates;
  • answer support requests and review corrections;
  • detect abuse, maintain security, diagnose faults, and comply with legal obligations.

We do not use your schedule notes, location, or purchases for targeted advertising. We do not use third-party advertising SDKs.

Services and sharing

We disclose information only to service providers needed to run LST Camino Planner, when you direct us to, or when required by law. The principal providers and independent services are:

Apple

Distributes the app, processes App Store payments, and supplies signed purchase information used to verify route access. Apple handles payment and App Store information under its own policy.

App Store & Privacy
Mapbox

Provides maps in the iOS app. Its mobile SDK sends de-identified location and usage telemetry by default when location is gathered and provides an opt-out through the map attribution control.

Mapbox Privacy Policy
Render

Hosts the production account API and managed PostgreSQL database in Frankfurt. It processes account and sync data, requests, IP addresses, and operational logs as needed to provide and secure the service.

Render Privacy Policy
Brevo

Sends account-verification, password-reset, and other necessary service emails. It processes recipient addresses, message content, delivery status, and anti-abuse information for that purpose.

Brevo Privacy Policy
Proton Mail

Hosts the Long Slow Travel support mailbox. When you email support, Proton processes the addressing information and message needed to receive, store, and answer it.

Proton Privacy Policy
GitHub Pages

Hosts this static website. Long Slow Travel does not place analytics or advertising cookies here. GitHub may process connection data to operate and secure its hosting service.

GitHub Privacy Statement

Long Slow Travel does not sell or rent personal information. We do not permit service providers to use account-linked information for their own advertising.

Accommodation website, booking, email, telephone, WhatsApp, and external map links open a service you choose. Those providers handle the request under their own policies. The app may include the selected accommodation or place location in a map link; it does not attach your account, schedule, or journal. If you export and share a schedule PDF, the destination you choose receives that file. Review it before sharing.

Storage, security, and retention

Offline schedules and installed route content are stored on your iPhone. Account and synced schedule information is stored in a managed PostgreSQL database in Render’s Frankfurt region. Basemap tiles require their own download in Trail Mode; installing route content does not download every map area. The app uses HTTPS for network requests and stores its authentication credential using Apple’s Keychain. No method of storage or transmission is completely secure, but we use reasonable safeguards appropriate to the service.

We retain account-linked information while your account remains active and as needed to provide purchases and sync. Support messages and security records are retained only as long as reasonably needed to resolve the issue, maintain the service, or meet legal obligations.

Deleting a schedule or day hides it from normal lists and synchronizes a deletion marker. The current service retains these marked-deleted records, which may still contain notes or journals, for synchronization; it does not automatically purge them after a fixed number of days. Deleting a journal using its Delete button instead clears its text and timestamp when the change syncs. Account deletion removes the account-linked records from the active database. Offline devices and backups can retain earlier copies until they synchronize or the backup is removed.

When in-app account deletion completes, your active server account, token, synced schedules, profile, and route entitlements are permanently deleted. Limited residual copies may remain temporarily in protected backups until they rotate, or where retention is required by law. Apple keeps its own record of App Store purchases under Apple’s policies.

Some providers are established outside the European Economic Area or may permit support or subprocessors to access information from other countries. Frankfurt hosting does not mean that all processing is restricted to the EU. The provider policies linked above describe international processing; contact us for information about the transfer safeguards applicable to your data and how to obtain a copy.

Your choices and controls

  • Use guest mode: use the free sample and keep schedules on one device without creating a Long Slow Travel account.
  • Control location: deny or change LST Camino’s location permission at any time in iPhone Settings. The planner still works without showing your live position.
  • Control Mapbox telemetry: open the attribution control displayed on an in-app map to access Mapbox’s telemetry preference.
  • Manage journals: use the Journal button on a schedule day to read, edit, or delete its journal. The show/hide setting controls display, not whether it syncs.
  • Delete schedules: remove individual schedules in the app.
  • Delete your account: open Account → Settings → Delete Account, enter your current password, and confirm. This is permanent. Guest schedules remain on the device, and App Store purchases remain associated with your Apple Account.
  • Ask about your information: email us to request access, correction, or deletion where applicable. We may need to verify that the account belongs to you.
  • Exercise additional rights: where applicable, you may request restriction, object to processing based on legitimate interests, receive portable account data, or withdraw consent prospectively.
  • Lodge a complaint: if you believe the processing of your personal data infringes the GDPR, you have the right to complain to a data-protection supervisory authority. You may do so in particular in the EU member state where you usually live or work, or where you believe the infringement occurred.

You can also contact the Bavarian State Office for Data Protection Supervision (BayLDA), which supervises private-sector data protection in Bavaria. This does not limit your right to complain to another competent supervisory authority.

Children

LST Camino Planner is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate. Local age thresholds may be higher.

Changes to this policy

We may update this policy as LST Camino Planner evolves or legal requirements change. We will publish the revised policy here and change the effective date. If a change materially affects how account-linked information is used, we will provide additional notice where appropriate.

Questions or privacy requests

Talk to a human.

For privacy questions or requests, contact Long Slow Travel by email.

support@longslowtravel.com