Privacy Policy

Last updated: December 30, 2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Our Commitment to You:

  • • We do not sell Your Personal Data to any third party
  • • We collect only the information necessary to provide the Service
  • • You retain ownership of all content You create
  • • You can delete Your Account and data at any time
  • • We will notify You of any data breaches that affect Your Personal Data

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access Our Service or parts of Our Service.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to BasePack and its owner(s).
  • Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: British Columbia, Canada.
  • Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Website and Mobile Applications.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • User Content means any content that You create, upload, or share through the Service, including but not limited to packing lists, inventory items, journal entries, photographs, comments, and other materials.
  • Website refers to BasePack, accessible from https://basepack.app
  • Mobile Applications refers to the BasePack applications available for iOS and Android devices.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address (required for account creation)
  • Username (required, chosen by You)
  • Display name (optional)
  • Profile photo (optional)
  • Cover photo (optional)
  • Bio (optional)
  • Social media URLs (optional)
  • Usage Data

User Content

The Service allows You to create, upload, and share User Content. You retain full ownership of Your User Content. We store this content solely to provide the Service functionality to You.

User Content includes:

  • Packing Lists: List names, item names, weights, prices, quantities, categories, collections, notes, product URLs, and item images
  • Trip Planning Data: Trip start and end dates, season classification (spring, summer, fall, winter, 3-season, 4-season), and duration (daytrip to multi-week)
  • Inventory Items: Gear names, descriptions, weights, prices, brand information, product URLs, and item photographs
  • Journal Entries: Trip journals, daily logs, trail reports, cover images, and written content
  • Trail Statistics: Distance traveled (miles/km), elevation gain/loss, moving time, and trail names
  • Camp and Weather Data: Camp locations, camp types (tent, shelter, hotel, hammock), weather conditions, and temperatures You choose to log
  • Waypoints and Routes: Named locations, GPS coordinates, arrival times, and GPX route files You upload
  • Social Interactions: Comments on journals, reactions (like, love, fire, useful), and follow relationships
  • Imported Data: Packing lists imported from third-party services (LighterPack, PackWizard, CSV files)

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of Our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.

Location Data

We do not actively track Your location in the background. All location data in the Service is voluntarily provided by You. Location information may be collected in the following ways:

  • Photo Metadata (EXIF): If You upload photographs containing embedded GPS coordinates, camera make/model, and capture timestamps, that metadata may be stored with Your content. You may remove this metadata before uploading.
  • Journal Map Blocks: When You add a map block to a journal, You may include location coordinates that You select.
  • Waypoints: You may create named waypoints with GPS coordinates, elevation, and timestamps to mark camps, water sources, summits, and other trail landmarks.
  • Daily Log Locations: When logging daily trail entries, You may enter start and end location names with GPS coordinates.
  • Auto-Fetch Current Location: The mobile app may request access to Your device's location to auto-fill map blocks. This is a one-time fetch that only occurs when You explicitly tap "Use Current Location" and is not continuous tracking.
  • GPX Route Files: If You upload GPX files, the route data including all GPS coordinates will be stored with Your journal.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain Our Service, including to monitor the usage of Our Service and ensure its proper functioning.
  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
  • To enable social features: to allow You to share content publicly, follow other users, and interact with the community through comments and reactions, if You choose to use these features.
  • To manage Your requests: to attend and manage Your requests to Us, including password reset requests and support inquiries.
  • To sync Your data: to synchronize Your packing lists, inventory, journals, and settings across multiple devices in real-time.
  • To communicate with You: to send You service-related notices, including security alerts, system maintenance notifications, and responses to Your inquiries.
  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, in which Personal Data held by Us about Our Service users is among the assets transferred. You will be notified before such a transfer occurs.
  • For other purposes: We may use Your information for other purposes, such as data analysis to identify usage trends and to evaluate and improve Our Service, products, services, and Your experience.

Sharing Your Personal Data

We do not sell Your Personal Data to any third party.

We will not share Your personal information for advertising or marketing purposes with third parties.

We may share Your personal information in the following situations:

  • With Service Providers: We may share Your Personal Data with necessary Service Providers to provide the Service to You, including for data storage, security, and authentication.
  • For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company. You will be notified before such transfer.
  • With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
  • With other users: When You share personal information or otherwise interact in public areas with other users, such information may be viewed by all users and may be publicly distributed outside. Your username and profile photo will be visible alongside Your public Contributions.
  • With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Public Content and Sharing

The Service allows You to make certain content public. When You choose to make content public, You control what becomes visible:

  • Public Packing Lists: When You toggle a list to "public" or generate a share link, the list name, items, weights, prices, categories, and any associated trip dates/seasons become visible to anyone with the link or browsing the Explore page. Your username and profile photo are displayed as the creator.
  • Public Journals: When You publish a journal as public, the journal content, cover images, trail statistics, map data, waypoints, and any location information You included becomes publicly viewable. Comments and reactions from other users will also be publicly visible.
  • Share Codes: Each public list and journal has a unique share code that creates a permanent link. Anyone with this link can view the content without an account.
  • Explore Page: Public lists and journals may appear on the community Explore page where other users can browse, search, and filter by season, duration, or trail name.
  • Public Profile: If You enable a public profile, Your username, display name, bio, avatar, and social media links become visible. Your public lists and journals will be accessible from Your profile page.

You may change the visibility of Your content at any time. Toggling a list or journal to private will remove it from public view.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.

  • Account Data: Retained while Your Account is active.
  • User Content: Retained until You delete it or delete Your Account.
  • Usage Data: Generally retained for up to twelve (12) months for internal analysis purposes, except when this data is used to strengthen security or improve functionality.
  • Backup Data: May be retained in encrypted backups for up to thirty (30) days after deletion for disaster recovery purposes.

Upon Account deletion, Your Personal Data will be removed from Our active systems within thirty (30) days, except where retention is required by law. We recommend exporting Your data before deleting Your Account if You wish to keep a copy.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

Your Personal Data is primarily stored and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection under the adequacy decision made pursuant to Article 45 of the General Data Protection Regulation (GDPR).

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Your Privacy Rights

You have certain rights regarding Your Personal Data. You may exercise these rights at any time:

  • Right to Access: You have the right to request copies of Your Personal Data. You can access most of Your data directly through the Service in Your account settings.
  • Right to Rectification: You have the right to request that We correct any information You believe is inaccurate or complete information You believe is incomplete. You can update most of Your information directly in the Service.
  • Right to Erasure: You have the right to request that We erase Your Personal Data. You can delete Your Account at any time through the Settings page. For detailed instructions and information on data removal, please visit our Account Deletion or Data Deletion pages.
  • Right to Data Portability: You have the right to request a copy of Your data in a structured, commonly used format. The Service allows You to export Your packing lists in CSV and text formats.
  • Right to Withdraw Consent: Where We rely on Your consent to process Your Personal Data, You have the right to withdraw Your consent at any time.

To exercise any of these rights, please contact Us using the information provided below. We will respond to Your request within thirty (30) days.

For Canadian Residents

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). Under these laws, You have the right to access Your personal information held by Us, and to request correction of any inaccurate information. If You have questions or concerns about Your personal information or wish to file a complaint, please contact Us using the information provided below.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice via email and/or a prominent notice on Our Service before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Data Breach Notification

In the event of a data breach that affects Your Personal Data, We will notify You as soon as feasible and no later than seventy-two (72) hours after becoming aware of the breach, in accordance with PIPEDA requirements.

The notification will include:

  • A description of the nature of the breach
  • The types of Personal Data that may have been affected
  • Steps We are taking to address the breach
  • Recommended steps You can take to protect Yourself
  • Contact information for further questions

We will also notify the Office of the Privacy Commissioner of Canada and any other relevant regulatory authorities as required by law.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.

The technologies We use include:

  • Essential Cookies: These Cookies are required for the Service to function properly, including maintaining Your authenticated session and security.
  • Preference Cookies: These Cookies remember Your preferences, such as Your theme setting (dark mode or light mode), display preferences, and unit settings (metric or imperial).
  • Local Storage: We use browser local storage to cache Your data locally for offline access and improved performance.

We do not use advertising Cookies or third-party tracking pixels. We do not serve advertisements on the Service. We do not share Cookie data with third parties for advertising purposes.

You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of Our Service.

Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement industry-standard security measures to protect Your data, including:

  • Encryption for data in transit and at rest
  • Secure authentication protocols
  • Granular access control policies
  • Regular security monitoring

While We strive to use commercially acceptable means to protect Your Personal Data, We continuously work to improve Our security measures and respond to emerging threats. We encourage You to use a strong, unique password for Your Account and to keep Your login credentials confidential.

Guest Mode and Local Data

The Service allows You to use certain features without creating an account ("Guest Mode"). In Guest Mode:

  • Local Storage Only: Your data is stored locally on Your device. This data is not transmitted to Our servers.
  • No Account Required: We do not collect Personal Data such as email or username in Guest Mode.
  • Device-Specific: Guest Mode data is only available on the device where it was created and cannot be synced across devices.
  • Data Migration: If You later create an account, Your local Guest Mode data can be migrated to Your account and will then be synced to Our servers and become subject to this Privacy Policy.
  • Data Loss Risk: Guest Mode data may be lost if You clear Your browser data, uninstall the app, or lose access to Your device. We are not responsible for loss of Guest Mode data.

We recommend creating an account to enable cloud sync and backup of Your data.

Imported Data from Third Parties

The Service allows You to import packing lists from third-party services. When You use the import feature:

  • External Import: You may import information by providing a public URL. We fetch the publicly available data from that URL to assist with data entry.
  • File Upload: You may upload data files containing item information. These files are processed to create records in Your account.

Important: We do not access Your third-party accounts directly. We only fetch publicly accessible data from URLs You provide. You are responsible for ensuring You have the right to import and use the data You import.

Imported data becomes Your User Content and is subject to this Privacy Policy and Our Terms of Service.

Gear Database

The Gear Database is a proprietary resource that provides product information for outdoor gear and equipment. The database's structure, compilation, and associated data are protected by intellectual property laws. This section explains how data in the Gear Database is collected and used.

What Data We Collect for the Gear Database

The Gear Database contains product information compiled from various sources. This information is not Your Personal Data but rather publicly available product specifications:

  • Product Specifications: Brand names, model names, product categories, subcategories, weights, dimensions, materials, colors, and technical specifications
  • Pricing Information: MSRP (Manufacturer's Suggested Retail Price) in various currencies, collected from manufacturer websites and retailers
  • Product Images: Product photographs sourced from manufacturer websites and third-party retailers
  • Product URLs: Links to product pages on manufacturer and retailer websites
  • Descriptions: Product descriptions sourced from manufacturer websites

How You Can Use Gear Database Data

When browsing the Gear Database:

  • No Account Required: You may browse the Gear Database without creating an account
  • Add to Inventory: Registered users may add Gear Database items to their personal inventory
  • Search History: We do not track or store Your search queries in the Gear Database

Data Accuracy Notice:

Gear Database information is provided for reference purposes only. Product specifications, weights, prices, and availability may be inaccurate, outdated, or incorrect. Some data is provided via third-party sources and may contain errors. Always verify product information directly with manufacturers or authorized retailers before making purchasing decisions.

Third-Party APIs and Data Sources

The Service integrates with third-party services to provide certain features:

    • Weather and Maps: We use third-party providers for weather forecasts and map features.
    • Intelligence Features: We use third-party tools to power certain intelligent features. Your Personal Data is not sent to these services.

Data Accuracy Notice:

We do not guarantee the accuracy of third-party data. Weather forecasts, product information, pricing, and other source data may be inaccurate, incomplete, or outdated. You should always verify critical information from official sources before relying on it for safety decisions or purchases.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us immediately.

If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers as quickly as is reasonably practical.

Users between the ages of 13 and 18 may use the Service only with the involvement and consent of a parent or legal guardian. The parent or guardian is responsible for supervising the minor's use of the Service.

Electronic Communications (CASL Compliance)

We comply with Canada's Anti-Spam Legislation (CASL). By creating an Account, You consent to receive service-related electronic communications from Us, including:

  • Account verification and password reset emails
  • Security alerts and notifications about Your Account
  • Service updates and maintenance notifications
  • Responses to Your support requests

We will not send You commercial electronic messages (marketing emails) unless You have expressly opted in to receive them. You may withdraw Your consent to receive marketing communications at any time by using the unsubscribe link in any email or by contacting Us.

All commercial electronic messages We send will include Our contact information and an unsubscribe mechanism as required by CASL.

Changes to This Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

For material changes that affect how We collect, use, or share Your Personal Data, We will notify You via email (if You have provided one) and/or a prominent notice on Our Service at least thirty (30) days prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after the effective date of any changes constitutes Your acceptance of those changes.

Contact Us

If You have any questions about this Privacy Policy, wish to exercise Your privacy rights, or have concerns about how We handle Your Personal Data, You can contact Us:

By visiting this page on Our website: https://basepack.app/contact

We will respond to all privacy-related inquiries within thirty (30) days.