Privacy Policy

Data we collect

• Account data: your name, email address and password (our authentication provider stores it only in a secure, hashed form). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Profile data you add, such as your phone number and profile photo.
• Booking data: the participant's name, phone number, email, number of seats, payment method (bank transfer or cash), the name and phone number of an emergency contact, and your acceptance of the hike's terms.
• Payment receipts: if you pay by bank transfer, the photo or file of the transfer receipt you upload. We don't process card payments and don't store hikers' card details.
• Reviews and ratings you publish, waiting-list entries, and the hikes and clubs you save.
• Club data: for club accounts, the club's name, description, contact details, logo, cover image, the bank card number shown to hikers for transfers, and hike information.
• Instagram data: if a club connects its Instagram account, we access the account's posts (captions, images and links) to create draft hikes. We don't access private messages.
• Technical data: IP address, browser and device type, and server logs needed to run and protect the Service. If you turn on push notifications, also your browser's push subscription.
• Error reports: when a page or the Service fails, we store the error message, the page address (with email addresses and access tokens removed), the language, the browser type and, if you're signed in, your account ID, so we can fix the problem. Only administrators can see these reports, and they are deleted within 90 days.

How we use your data

• To create and manage your account and let you sign in.
• To handle bookings: we share your booking details with the club that organizes the hike so it can confirm your seat, check your payment and contact you about the hike.
• To send service messages by email and push notification, such as booking confirmations, payment and hike reminders, notices about changes or cancellations, and requests to review a hike.
• To show public reviews with your first name and profile photo.
• To translate hike and club descriptions automatically into Armenian, English and Russian.
• To keep the Service secure, prevent abuse and fix errors.
• If analytics is turned on, to understand in aggregate how the Service is used.
• To show clubs aggregate statistics for their pages, we count visits to hike and club pages ourselves, without cookies. We store only daily totals, the type of referring site and the page language. To count unique visitors we use a one-way hashed identifier that changes every day; your IP address is not stored.

We process data to perform our agreement with you (your account and bookings), based on our legitimate interest in running and improving a safe service, to meet legal obligations, and with your consent where required (for example, for push notifications).

Who we share data with

• The hiking club whose hike you book or review receives the data needed for that booking. The club is responsible for how it uses this data to run the hike.
• Service providers that operate parts of the Service for us: Supabase (database, authentication and file storage), Render (application hosting), Cloudflare (network and security), Resend (email delivery), browser push services (Google, Apple, Mozilla) and Meta (when a club connects Instagram).
• Translation and text-processing services (Google, Microsoft, MyMemory, OpenAI), which receive hike and club texts but not your booking data.
• If analytics is turned on: Plausible Analytics or Google Analytics.
• If error monitoring with Sentry is turned on: Sentry, which receives the same error reports.
• Public authorities, when the law requires it.

We don't sell your personal data. Some providers may process data outside Armenia. We choose providers that apply appropriate safeguards.

Cookies and local storage

We use cookies and similar technologies that the Service needs to work.

• Authentication cookies keep you signed in.
• The NEXT_LOCALE cookie remembers the language you chose.
• Your browser's local storage remembers, for example, that you closed the install prompt or a review reminder.
• A service worker lets you install the Service as an app (PWA) and shows a page when you're offline.

If analytics is turned on, Plausible doesn't use cookies, while Google Analytics sets its own cookies (such as _ga). You can block or delete cookies in your browser settings, but signing in won't work without the authentication cookies.

Push notifications

We send push notifications only if you allow them in your browser. You can turn them off at any time in your browser or device settings.

How long we keep data

We keep account data for as long as your account exists. Booking data and payment receipts are kept as long as needed for the booking, for resolving disputes, and for legal and accounting requirements. When you ask us to delete your account, we delete or anonymize your personal data unless the law requires us to keep it.

Your rights

You can ask us to give you access to your personal data, correct, delete or export it, object to or restrict its processing, and withdraw your consent at any time. You can change most profile data in your account settings. To delete your account or make another request, email info@peakhike.am from your account's email address. We'll reply within 30 days. You can also file a complaint with the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.

Security

We use encrypted connections (HTTPS), access controls and database security rules so that only you, the club that organizes your hike and authorized administrators can see your booking data. Payment receipts aren't public. No method is 100% secure, so please use a strong password.

Children

Only people aged 16 or older can create an account. Younger children can join hikes only with the consent of a parent or legal guardian, who makes the booking.

Changes

We may update this policy. We'll publish the new version on this page with a new date, and tell you about important changes by email or in the Service.

Contact

For privacy questions, write to info@peakhike.am.