Parkspan privacy policy

Effective and last updated: September 22, 2026

The primary version of this policy is maintained at parkspan.com/privacy.

Parkspan is an Android app from Deloran LLC for navigating national and state parks, planning visits, and using downloaded maps offline. This policy describes the Android app, including version 0.6.1-beta. Privacy and support contact: martin@deloran.us.

Parkspan has no user accounts or automatic cloud synchronization of personal records. It does make network requests for maps, remote park photographs, and optional public-data updates. Files and reports can also leave the device when you choose to save or share them.

Information kept on your device

Saved parks, visited status and dates, trips, stops, private notes, preferences, selected access points, and pass details are stored in app-private storage. These records support planning, saved places, pass reminders, and local estimates.

Optional visit and eligibility answers include party size, children and vehicles in the party, residence, vehicle-registration state, and qualifications such as age eligibility, military or veteran status, Access eligibility, or a fourth grader in the party. These answers can reveal personal or sensitive circumstances. They are used locally to estimate pass coverage and costs, not to verify official credentials.

You may import or photograph the front and back of a park pass. The app uses Android’s document picker or an external camera application for the image you select. Pass images may contain names, pass identifiers, or other information visible on the card. Parkspan encrypts its stored image copies with a device-held Android Keystore key; it does not automatically upload them or send them to an image-recognition or credential-validation service. Other local records use app-private storage without this separate image encryption.

Location and permissions

Optional approximate or precise foreground location shows your position and accuracy on maps, follows your position when requested, and supports nearby-distance calculations. Parkspan does not record a location history or request background-location permission. Location access stops when the relevant screen is no longer active in the foreground. Displaying a map around your position can reveal that area through map-resource requests described below.

Optional notification permission supports local pass-expiration reminders. Internet, network/Wi-Fi status, and Android background-work permissions support resource downloads and scheduled work. You can change location and notification permissions in Android settings. The app does not request contacts, microphone, or broad photo-library access; camera capture is handled through the camera application you choose.

Maps, photographs, and public updates

Maps are rendered with MapLibre Android SDK using resources from OpenFreeMap, with OpenStreetMap and OpenMapTiles attribution. Online maps and offline downloads request resources for the area being viewed or downloaded. The provider and its delivery infrastructure receive your IP address and requested resources, which can indicate the map area. Parkspan does not send them your saved-place collection, trip notes, eligibility answers, or pass images.

OpenFreeMap’s privacy policy describes ordinary logs without stored IP addresses, possible temporary IP logging during security incidents for up to 30 days, and CDN processing. Its infrastructure practices are governed by its own policy.

Full-size park photographs can load from the source hosts credited in the app, including park agencies and Wikimedia. Those hosts receive your IP address and the requested image URL, which may identify the park being viewed. Some photographs may be prefetched while a park gallery is open on an unmetered connection. Bundled preview images do not need a network request. Remote photographs are loaded through Coil and OkHttp and cached on the device. See the source host’s privacy notice, including Wikimedia’s privacy policy, as applicable.

If you configure an HTTPS public-data publisher, it receives your IP address, requested package URL, app-version request header, and cache-validation information when updates are checked. These requests do not send personal planning or wallet records. The app has no publisher preconfigured in this version. Daily checks on an unmetered connection are optional; signed-file imports can be used without a publisher.

Opening an official website or another mapping application brings that service into use. Directions links may include destination coordinates. Those services handle requests under their own policies.

Backups and files you choose to share

Automatic Android cloud backup is disabled in the app configuration. The app also excludes its data from Android’s configured device-transfer rules. Device manufacturers may provide separate transfer mechanisms.

The optional full-backup feature creates a password-encrypted file containing personal places, preferences, trips, pass details, and pass images. You choose its destination using Android’s document picker. A selected cloud-storage provider may upload that file. A separate places export is an unencrypted JSON file containing saved/visited places and preferences, including saved visit assumptions; it excludes trips, pass-wallet records, and pass images.

Protect exported files and the full-backup password. Deloran LLC cannot recover that password or remotely retrieve records kept only on your device. Original photographs and copies saved outside the app remain under your control at their destination.

Diagnostics and support

Parkspan records limited diagnostic event codes and timestamps locally, including a code for an uncaught error. There is no automatic crash-report upload. You can generate, preview, save, or share a report from Settings → Support → Diagnostics.

Reports contain app and catalog versions, Android API level, device model, processor architecture, permission states, a broad free-storage category, and selected event codes. Automatically generated fields exclude pass images, credentials, searches, coordinates, and your place collection. Any issue description you enter is included, so review it before sharing.

Opening the share menu does not send the report automatically. If you send it, your chosen recipient and email or sharing service receive the file. Please do not send passwords, unnecessary pass images, or other sensitive information.

If you contact Deloran LLC, we receive your email address, message, and any attachments you choose to send. We use that information to respond, investigate reported problems, and follow up on your request. Email services process the correspondence to deliver and store it.

We retain company and support correspondence for up to 12 months after the last correspondence, then delete company-controlled copies, unless a longer period is required by law. You can request earlier deletion at martin@deloran.us. We handle deletion requests within 30 days; if legally required retention prevents deletion, we explain the applicable limitation.

Deletion from our correspondence does not remove copies you or other recipients keep. Email providers may retain separate operational or backup copies under their own retention rules.

Analytics, advertising, and third-party services

Parkspan does not use Google Analytics, Firebase Analytics, Firebase Crashlytics, Sentry product crash reporting, advertising SDKs, tracking pixels, payment SDKs, or a third-party user-account backend. It does not sell personal data or use it for advertising.

MapLibre, Coil, and OkHttp support the resource requests described above. AndroidX/Jetpack Compose, Room, WorkManager, Kotlin coroutines, and serialization support the interface, local storage, and app operations. The presence of these libraries does not make the app’s network activity anonymous; map, image, update, and user-selected sharing services receive the information described in this policy.

Retention and deleting your data

Personal records remain on the device until you remove them, clear personal data, clear the app’s storage through Android, or uninstall. To use Parkspan’s deletion control, open Settings → Manage data → Clear personal data, read the confirmation, and confirm when ready.

This removes app-owned personal place records, trips, notes, pass details and images, visit assumptions, preferences, selected access points, downloaded map resources, local diagnostics, temporary capture files, and cached viewed park photographs. It cancels reminders and turns off automatic public-data checks. The public park catalog is retained, and the configured publisher URL may remain. If cleanup reports an error, do not assume deletion completed.

Deleting downloaded maps alone preserves your other personal records. Uninstalling removes app-private storage, subject to the device’s own transfer behavior. Neither action recalls reports you sent or deletes exported backups, original photos, or copies held by other services; remove those separately at their destination.

Diagnostic event logs are rotated when a new event is written if the existing log exceeds its size limit or its oldest event is over seven days old. Generated reports include only recent events. Temporary diagnostic ZIP files older than one day are cleaned up when report cleanup runs; these are not guaranteed background deletion deadlines. The Clear personal data control also removes these app-owned diagnostics.

There are no online accounts to close. For information sent to Deloran LLC, request deletion at martin@deloran.us; the correspondence retention and 30-day request process above applies. We cannot remotely erase records stored only on your phone.

Children’s privacy

Parkspan is a general-audience park-planning app and is not directed to children under 13. It has no age-verification or user-registration system. Family-planning options, such as the number of children in a party or a fourth-grade pass qualification, are optional local entries. Avoid including children’s personal information in support messages. If such information has been sent to Deloran LLC, contact us to request its review and deletion.

Security and your choices

The app uses HTTPS for map, remote-image, and configured public-data requests, app-private storage for personal records, Android Keystore encryption for stored pass images, and password encryption for full backups. No storage or transmission method provides an absolute security guarantee. Keep your device protected and share files only with intended recipients.

You can decline optional permissions and eligibility questions, control public-data checks, delete local records, and choose whether to export or share. You can contact martin@deloran.us about access, correction, or deletion of information you have sent to Deloran LLC.

Policy updates and contact

We update this page and its date when these practices change. A policy or website update does not change the behavior of an already installed app.

Developer: Deloran LLC. Privacy and support: martin@deloran.us. Product help: Parkspan support. Company information: Contact Deloran LLC.

For this website’s hosting, font, and contact-link practices, see the DELORAN website privacy notice.