Wildbound — Privacy policy

Last updated August 17, 2026

Stone Mesa Studio, LLC does not collect, sell, or track your data, and Wildbound has no ads, no analytics, and no account to create. Your trips, packing lists, gear and saved spots live on your device and, if you turn on iCloud, sync privately across your own Apple devices through Apple's iCloud1. One feature is different, and it is the reason this page is longer than our others: sharing a trip with a crew. Sharing copies that trip's list to a server we run2, because that is the only way the people you invited can see it. What goes there, and what does not, is set out below.

The promise, in plain terms No advertising, no analytics, no third-party tracking, no accounts, and nothing sold or mined — ever. Everything you do alone stays on your device and in your own iCloud. Only a trip you deliberately share leaves it, and only that trip.

What stays on your device

Your trips, lists, gear and spots

Planning a trip, building packing lists, keeping a gear library, tracking Upkeep jobs and saving spots all happen on your device. With iCloud turned on they sync across your own Apple devices through your private iCloud1 — Apple's infrastructure, which we cannot read. Turn it off: disable iCloud for Wildbound to keep everything on one device. Nothing about this requires the internet, and none of it reaches us.

Your saved spots and your home base

Spots are a private place-book: site numbers, notes, amenities, and how far each one is from home. If you tap "Use current location" the app asks iOS for your position at that moment and stores the coordinates on your device3. Wildbound has no background location, no location history, and no public map — your saved spots and your home base are never published, shared with other users, or sent to us. Turn it off: type coordinates by hand, or decline the location permission; everything else keeps working.

Looking for somewhere new

Searching for a place to camp is the one feature that sends anything about location. What goes out is what you typed and the centre of the map you are looking at, rounded to about a kilometre — not your device's position, and never your saved spots or your home base. Our server passes it to Apple Maps and to Recreation.gov6, and keeps the answer in a shared cache for a day so the same search from anyone is faster. Nothing identifies you: no account, no device id, nothing tying a search to a person. Turn it off: don't use the search — you can add a spot by typing its name and coordinates yourself.

Reminders

Reminders you set for yourself are scheduled as local notifications on your device and never reach a server. Reminders on a shared trip are different, and are covered below.

What happens when you share a trip with a crew

This is the only part of Wildbound with a server behind it. Nothing is copied there until you choose to share a specific trip, and each shared trip is kept separately from every other.

What is copied

When you share a trip, that trip's crew list is copied to our server2 so the people you invite can see and check it off. That copy holds:

the trip's title, start and end dates, and the name of the spot if you set one;
the trip's items and tasks — their names, categories, quantities, how far ahead a task is due, and which list each came from;
who checked off what, and when, and who an item is assigned to;
the display names you give the people on the trip, and a private link for each of them;
the text of any crew reminders you schedule, so the server can send them at the right time;
if a crew member turns on notifications, the push address their device gives us4.

What is never copied

Your gear library, your Upkeep jobs, your saved spots and their coordinates, your home base, your trip logs, and every trip you have not shared stay on your device. A shared trip carries the spot's name if you set one — never its coordinates.

Who can see it

Anyone holding the link. There is no account and no password: a link is the credential, which is what lets someone join from any phone or computer without installing anything. Treat a crew link like a house key — send it to the people you mean to invite, and no further. You can rename or remove any crew member, or delete the shared copy outright, from the trip's Crew screen.

How long it is kept

The shared copy of a trip is deleted automatically thirty days after the trip ends, and you can delete it yourself at any time from the Crew screen. Deleting it removes the items, the check-off history, the crew's names, their links, and any push addresses. Your own copy of the trip stays on your device — deleting the shared copy ends the sharing, not the trip.

How it is protected

Everything travels over HTTPS and is stored encrypted at rest by our hosting provider2. We do not read your trips, mine them, profile you, or use anything on that server for marketing, advertising or training. It exists to make sharing work, and for nothing else.

Your purchase

Using Wildbound on your own is free, with no time limit. Sharing a trip with a crew is a yearly subscription; the first month of it is free and starts the first time you share. If you join someone else's trip you never pay anything. Purchases are handled entirely by Apple's App Store5 — we never see your payment details, card, or Apple Account. The app asks Apple one question ("is this person subscribed?") and stores the answer. The optional tip jar works the same way and unlocks nothing.

No accounts, no ads, no analytics, no trackers

Wildbound has no account to create, no advertising, no analytics or crash-reporting service, and no third-party tracking libraries. We do not track you across apps or websites, and we have nothing to sell to anyone who would.

Notes

iCloud sync (Apple frameworks). If you enable iCloud, your trips, lists, gear, Upkeep and spots sync through your own private iCloud, under Apple's privacy policy. We operate no server that stores any of it. ↩
Crew sharing (Cloudflare). Shared trips are hosted on Cloudflare Workers and Durable Objects, in a separate store per shared trip, encrypted in transit and at rest and handled under Cloudflare's own policy as our processor. This is the only Wildbound feature that sends anything to a server we run. ↩
Location (Apple CoreLocation). Used only when you tap "Use current location", to fill in a spot or your home base. There is no background location and no location history; the coordinates are stored on your device and are never sent to our server. ↩
Push notifications (Apple APNs and Web Push). If a crew member turns on trip notifications, their device supplies an address that lets us deliver a nudge to it. It identifies a device, not a person, and it is deleted with the shared trip. A push carries the trip's title and the reminder's text and nothing from the packing list. ↩
Place search (Apple Maps and Recreation.gov). Used only while you are searching for somewhere to camp. The typed text and a coordinate rounded to roughly a kilometre are sent; the results are cached for 24 hours and are not associated with any person or device. ↩
Purchases (Apple StoreKit). The App Store processes the subscription and any tip, and tells the app only whether a subscription is active. Payment information goes to Apple, never to us, under Apple's privacy policy. ↩

Children's privacy

Wildbound is not directed at children under 13 and does not knowingly collect any personal information from anyone.

Changes to this policy

If this policy changes, we will update the date at the top of this page and post the revised version here.

Contact

Questions about privacy? Email us.