PeakShot is a UK mountain photography competition run by its founder, Michael Ahmed, during the beta. A limited company is planned before public launch; this notice will be reissued in the company’s name at that point. For anything in this notice, contact the founder directly through the app — a dedicated privacy contact address will be published here before public launch.

• Account details — your email address, a display name, and your confirmation at signup that you are 18 or over. Sign-in is by emailed magic link, so we never hold a password.
• Walk GPS tracks — recorded only while you have an active walk running in the app. The browser cannot and does not track you in the background, and we collect no location outside a walk.
• Photos you capture — the frames you take in Photo Zones, with their capture record (time, GPS fix, accuracy, an integrity hash).
• Device information for sync — basic browser and device details, timestamps and sync status, so offline photos and walk data upload correctly when you regain signal.
• Conditions stamp — the weather on the route at the time of your walk, stored as context for judging. This describes the mountain, not you.

We never collect your precise home location.

• Running your walks — starting walks, arming zones, tracking your route, building your bagging ledger and badges.
• Verifying entries — checking that a competition photo was genuinely captured in the zone, on foot, during your walk. This is the fairness promise the whole competition rests on.
• Judging — scoring your entries and generating your feedback.
• Safety and integrity — investigating suspected cheating, moderating public galleries, and keeping the service secure.

Where you have been on a hill is sensitive. Our standing rules for walk tracks:

• Never public. Your tracks are private to you and never appear on a public profile.
• Never real-time. Nothing we publish ever shows that you are on a hill right now; delayed publication is the default for anything derived from a walk.
• Retention is limited. Tracks are kept only as long as needed to verify entries for the season (including winner audit), then deleted or reduced to non-locating summaries such as distance and ascent.

Public copies of photos are stripped of embedded location data. Originals, with their capture records, stay in private storage for verification and audit only.

We use a small number of service providers, each doing one job under our instructions:

• Hosting — Vercel serves the website and app.
• Database and storage — Supabase holds accounts, walk data and photos, with access controls enforced at the database level.
• AI judging — Anthropic (the Claude API) receives entry photos and the zone brief to produce scores and feedback, and to flag suspect images for human review.

Weather providers receive route locations, not anything about you. We do not sell personal data and we do not run third-party advertising.

Under UK GDPR you can:

• Access and export your data — self-serve from your account settings.
• Delete your account and data — self-serve, no email required, no retention tricks.
• Correct inaccurate data, object to processing, and complain to the Information Commissioner’s Office (ico.org.uk) if you think we have got something wrong.

Our ICO registration is in progress and will be completed before public launch, along with a full data protection impact assessment covering location processing.

Ask the founder. During the beta the fastest route is directly through the app; we would rather hear a privacy worry early than read about it later.