VistaBound
Start free trial

Privacy Policy

Version privacy-v1.0 · Effective June 18, 2026

Plain-language summary: We collect what we need to plan and save your trips: your email, a display name, the trip details you type in, and any reviews or photos you choose to post. If you use turn-by-turn navigation in our iPhone or Android app, the app uses your device's location to guide you along the route — that location stays on your device and is not sent to us or stored. We don't run ads, we don't use analytics trackers, and we don't sell your information — ever. A few service providers (email delivery, sign-in, AI itinerary generation, campground data, maps and routing) process limited data so the product can work. Email support@vista-bound.com to access or delete your data.

1. Who we are and what this covers

VistaBound is operated by Adventuring Enterprises, LLC, a Florida limited liability company doing business as VistaBound ("VistaBound," "we," "us"). This Privacy Policy describes how we collect, use, share, and protect personal information when you use the VistaBound website, our iPhone and Android apps, and our trip-planning and navigation features (the "Service").

The Service is offered to users in the United States and is for adults 18 and older.

For anything in this policy, contact us at legal@vista-bound.com or by mail at 7901 4th St N # 34812, St. Petersburg, FL 33702.

2. Information we collect

Account information. When you create an account: your email address, a display name you choose, and — if you sign up with a password — a scrambled (hashed) version of your password. We never store your actual password. If you sign in with Google or Apple, we receive your email address, name, and an account identifier from that provider; we do not receive or store your Google or Apple password, contacts, or other account data.

Trip information. What you enter to plan a trip: starting point, destination, travel dates, trip length, RV length, daily driving limit, and interests — plus the itinerary that gets generated and any edits you make. Saved trips are stored with your account. Locations in your trips are places you type or pick, not readings from your device.

Device location (mobile apps only). When you use turn-by-turn navigation in our iPhone or Android app, the app accesses your device's precise location (GPS) to show where you are on the map and to advance the directions as you drive. This happens on your device — the navigation engine matches your position to the route locally. We do not receive, transmit, or store your device location on our servers. To keep guidance going when the screen is off or the app is in the background, the app uses background location (on iPhone, this is the "Always" location permission; on Android, a foreground service). You can grant, limit, or revoke the app's location access at any time in your device's settings; without it, turn-by-turn navigation won't work, but the rest of the app still does. The website does not collect device location at all.

Reviews and photos. Campground reviews and photos you choose to post. These are public, shown with your display name. Photos are re-encoded before storage and their embedded metadata (such as the location where a photo was taken) is stripped.

Policy acceptance records. When you accept our Terms and this policy, we record which versions you accepted, when, and from what IP address and browser, so we can prove what you agreed to.

Technical information. Our servers use your IP address temporarily for rate limiting (protecting the Service from abuse); these counters expire within about an hour and are not stored in our database. We do not run analytics, advertising trackers, or session recording.

Cookies and local storage. We use only cookies that are necessary for the Service to work:

  • a session cookie (rvp_session) that keeps you signed in for up to 30 days;
  • short-lived cookies (about 5–10 minutes) that secure the Google/Apple sign-in handshake.

Your browser's local storage holds a working copy of the trip you're editing and your display name, so your draft survives a page reload. Because we use no advertising or analytics cookies, there is no cookie banner — there's nothing optional to opt out of.

3. How we use information

We use the information above to:

  • create and secure your account, and keep you signed in;
  • generate itineraries and save and sync your trips;
  • compute routes and provide turn-by-turn navigation in our apps;
  • show your reviews and photos to other users (that's their purpose);
  • send transactional email — account verification and password reset. We do not send marketing email, and we won't add any without a separate, optional opt-in;
  • protect the Service from abuse (rate limiting, security monitoring);
  • keep records of policy acceptance;
  • comply with law.

4. AI processing

When you generate an itinerary, the trip details you entered (locations, dates, rig size, daily drive limit, interests) are sent to a third-party AI provider to produce the plan. Your email address, name, and account information are not included in these requests, and the provider does not use your data to train its models.

5. Who we share information with

We do not sell personal information, and we do not share it for advertising. We share limited data with service providers that the Service needs to function:

  • A transactional email provider — delivers our account, verification, and password-reset email (receives your email address and the message content).
  • Google — if you use Google sign-in (the sign-in handshake); and Google's Places service receives campground names and trip-area coordinates to look up ratings, photos, and place suggestions. These lookups are about places, not about you, and aren't tied to your identity.
  • Apple — if you use Apple sign-in, when offered (the sign-in handshake).
  • A third-party AI provider — receives trip details to generate itineraries (Section 4).
  • Recreation.gov / RIDB — receives campground names and coordinates to fetch public facility data.
  • A maps and routing provider — provides our map tiles and computes road routes and drive times. It receives the coordinates of your trip's stops (the places you typed or picked) to calculate routes for planning and navigation. Your device's live location is not sent to it — position tracking during navigation happens on your device.
  • A web-font provider — your browser loads web fonts directly from a third-party server, which sees your IP address, as with any website resource.
  • A cloud hosting and database provider — runs our servers and stores our data on our behalf.

We may also disclose information if the law requires it, to protect the rights and safety of users or the public, or as part of a merger, acquisition, or sale of assets (we would notify you in that case).

6. We don't sell or "share" your information

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act. We have not done so in the preceding 12 months. Because we don't, there is no need for a "Do Not Sell or Share" opt-out, and we don't process personal information for targeted advertising or profiling that produces legal or similarly significant effects.

7. How long we keep information

  • Account information — kept while your account exists; deleted when your account is deleted.
  • Saved trips — kept until you delete them; trips you delete are purged from our systems within about 30 days.
  • Device location — used transiently on your device during navigation and not retained by us; we never receive or store it.
  • Reviews and photos — kept while posted; you can request removal (Section 8).
  • Sessions — expire after 30 days of inactivity; sign-out deletes them immediately.
  • Email verification and password-reset tokens — expire within 24 hours and 1 hour respectively.
  • Policy acceptance records — kept for as long as we may need to demonstrate acceptance, including after account deletion where the law allows.

8. Your rights and choices

You can correct your display name in the app, and you can sign out of all devices by changing your password.

Depending on your state (including under the California Consumer Privacy Act and similar laws in other states), you may have the right to know/access the personal information we hold about you, get a portable copy, correct it, or delete it. We honor these requests for everyone, regardless of state.

To exercise any of these rights, email support@vista-bound.com from the address on your account (that's how we verify it's you), and tell us what you'd like. We will respond within 45 days. To delete your account, email us the same way; once we confirm the request is yours, we will delete your account and the personal information associated with it. We do not offer in-app self-service deletion at this time, so account deletion is handled through this request.

We will never discriminate against you — by degrading the Service or otherwise — for exercising a privacy right. If we decline a request, we'll explain why, and you may appeal by replying to our response; we'll have someone other than the original decision-maker review it.

9. Security

We work to protect your information: passwords are hashed with a modern algorithm (scrypt), session and email tokens are stored only as one-way hashes, cookies are inaccessible to scripts (httpOnly), and photo metadata is stripped on upload. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach affecting your personal information, we will notify you as required by law.

10. Children

The Service is for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 — let alone under 13. If we learn that we have, we will delete it. If you believe a minor has an account, contact support@vista-bound.com.

11. Changes to this policy

This policy has a version number and effective date shown at the top. We may update it from time to time; when we make a material change — like a new category of data collected or a new kind of sharing — we will post the updated policy with a new effective date and give you reasonable notice (for example, by email or through the Service). Your continued use of the Service after the update takes effect means you accept it. If you do not agree, your choice is to stop using the Service and, if you wish, ask us to delete your account. Minor clarifications update the "Last updated" date. [[COUNSEL REVIEW: continued-use acceptance for privacy updates — confirm notice mechanics and that no data practice here requires affirmative opt-in.]]

12. Contact us

Privacy questions and requests: legal@vista-bound.com

Adventuring Enterprises, LLC d/b/a VistaBound
7901 4th St N # 34812, St. Petersburg, FL 33702

← Back to vista-bound.com