Your data stays yours.

RigSense is operated by Topo Intel LLC, a Texas limited liability company. This policy covers the RigSense app for iPhone, from Apple's App Store, and the RigSense app for Android, from Google Play. Both apps keep the promises on this page, and where they work differently, the page says so.

RV owners choose off-grid living because they value independence. An app that tracks, profiles, or monetizes your data betrays that trust. Our privacy posture isn't defensive compliance — it's an active commitment to the community we're building for.

Both apps sign in to the same RigSense account and use the same servers. Everything else on this page applies to both, unless this table or a note says otherwise.

Data is split into four clear categories. Most sensor data never leaves your phone.

RigSense lets you add photos to spots so other travelers can see what a place actually looks like. Here’s who can see them, and how to remove one if you change your mind.

Who can see your photo. A photo you add to a spot shows up in that spot’s gallery for other RigSense users. It isn’t posted to the open web — there’s no public link, it won’t turn up in a web search, and it can’t be opened without the RigSense app.

What that means for you. People using RigSense can see your photo when they look at that spot. People who aren’t can’t — there’s no public link to pass around, and you need the app and an account to open a community photo. Even a link the app uses to show a photo stops working after a while on its own.

How to delete a photo. Open the photo in the app, tap the … menu, and choose Delete Photo. The file is removed from RigSense storage immediately, the photo disappears from the spot for everyone, and any link to it stops working right away. The Delete action is only available to the photo’s author — nobody else can remove your photos through that path. (Reports of policy-violating content go through the Report flow, which routes to our moderation team.)

If you shared a photo and someone saved a copy to their own device before you deleted it, that copy is theirs — the same as with any photo-sharing app. We can remove the photo from RigSense; we can’t reach into other people’s devices.

Deletion log. When a photo is deleted, we keep a short audit record — who deleted it, which spot it was attached to, the storage path that was removed, the timestamp, and the reason (author self-service, moderator action, or admin purge). This record persists after the photo file and contribution row are gone. The image data itself is not retained. The log is read-restricted to our moderation team and the platform service role; it is never exposed to other users or to the public. The purpose is forensics: if a photo is reported by another user as harmful and the author deletes it before review, we still need to know it existed. The log row is itself deleted if the spot is deleted, or unlinked from a user account if the user invokes their right-to-erasure under GDPR.

What we recommend. Treat photos you add to community spots as shared with the RigSense community — other travelers browsing that spot will see them. Don’t upload anything you wouldn’t want a fellow traveler to see.

Reporting and moderation. Every uploaded photo carries a Report action. If you see something that violates our guidelines, report it. Reported photos are reviewed and removed if they break our rules. Reports are logged and the reporting user is never disclosed to the photo’s author.

Photos you don’t upload. RigSense never accesses your camera roll or photo library beyond the specific photos you choose to attach to a contribution. We don’t scan your library, we don’t auto-upload, and we don’t read EXIF metadata other than the orientation tag needed to display the photo correctly.

We send two kinds of email, and only two.

Service and account email. Account verification, receipts, and notices about problems affecting your account — for example, if a bug stopped your sign-up from completing, or a security issue affects your data. These are part of providing the service you asked for, so they sit under the Contract lawful basis in the table above, and they are not something you opt out of separately. Close your account and they stop.

Marketing email: we don't send any. No newsletters, no product announcements, no promotions. If that ever changes it will be opt-in, and we would ask first. A service email will never carry a promotion.

Mail goes through our transactional email provider, listed in the processors table below. We do not sell, rent, or share your address, and we do not use it to build audiences on any advertising platform.

All GDPR individual rights are implemented via in-app controls — no need to email us for most requests. US users are protected under the same framework, which exceeds CCPA/CPRA requirements.

RigSense is for adults and isn't directed at anyone under 18, on iPhone or Android. We don't knowingly collect data from children. If you believe a child has given us data, email support@rigsense.app and we'll delete it.

Here's how long we keep each type of data, and what deletes it.

Neither app includes advertising, behavioral-tracking or third-party analytics SDKs: no Facebook SDK, no Google Analytics, no Firebase Analytics. The iPhone app bundles one third-party SDK, Sign in with Google, used only to sign you in when you choose it. The Android app uses Google's own libraries for location, maps, place search, push notifications, payments, sign-in, app updates, the rating prompt and QR code scanning. Google may receive your profile, device and usage data through these under its own privacy policy.

These companies handle user data for us. We have no data processors for advertising, profiling or data enrichment, because we don't do any of those things.

To provide location intelligence features, RigSense calls the following public and commercial APIs on your behalf. Unless noted, each receives only GPS coordinates. No account data or personal information is sent to them. Search services also receive the words you search for, and NHTSA receives the vehicle you look up. Most requests go through our Cloudflare Worker. Some go straight from your phone to the source, for example National Weather Service alerts when you're not signed in, and a source reached that way also sees your IP address. Rows tagged iPhone or Android apply to that app only.

When you delete your account, RigSense waits 7 days before deleting it. To cancel, sign back in within those 7 days. After that, the pipeline is irreversible. The steps are the same on iPhone and Android. If you no longer have the app, ask us by email and the same pipeline runs.

Deleting your account doesn't cancel a RigSense Connected subscription. Apple or Google Play bills it, so cancel it there.

If you have questions about this policy, want to exercise a data right not available in-app, or need to report a concern — reach out directly. We read every email.