Privacy Policy
Effective date: November 5, 2026
This Privacy Policy explains how Drupefruit LLC ("Drupefruit," "we," "us," or "our"), a California limited liability company, handles information in NeoRangeR™: the NeoRangeR app, the neoranger.com websites and the related services (the "Service").
The short version.
- Your group's messages and locations go radio to radio, encrypted with your group's key. They do not pass through our servers, and we cannot read them. Anyone with your group's key can, so share it only with people you trust; a group on a public default key, such as Meshtastic's default channel, can be read by any radio in range.
- The free app needs no account, and most of what it knows stays on your phone.
- If you use People at home, your trip plan and, while the trip is on, your position go to our servers, so the people you invite get notices on their phones. It is the one feature that sends your exact position to us.
- We never sell your location or other personal information, and never share it for advertising. We have no advertising, and we use no ad or tracking SDKs.
- We collect the minimum needed for the features you choose, and delete it on a schedule.
1. Scope
This Policy covers the Service. It does not cover radio hardware, the Meshtastic firmware, other apps you use with your radios, or the app stores, which have their own policies.
2. Information that stays on your devices
The app keeps these on your phone, not on our servers: your identity key, your groups and their keys, messages, positions you have received, trip plans (unless you share one with People at home, section 3), settings, offline map areas you have viewed, and the last weather report. Your radio stores its own settings and the radios it has heard. You can delete this at any time by clearing the app's data or resetting the radio. Video clips you record with Look around are saved on your phone and go nowhere unless you share them. Hey Neo's speech recognition runs on your phone, and what you say is never sent to us. Text it home sends a trip plan from your phone's own Messages app; it never passes through us. If your phone backs up to iCloud or a computer, that backup may include the app's data; Apple or your computer keeps it, and we never see it.
What the app asks your phone for
The app asks for each of these only when a feature first needs it, and you can turn each off in your iPhone's Settings.
- Bluetooth: to connect to your radio.
- Location: to show you on the map and, when you choose, share your position with your group over the radio. It keeps using location with the phone locked only while you share live, record breadcrumbs or use Take me there, and stops when you end it.
- Camera: to scan a group's QR code, and for Look around.
- Microphone and speech recognition: to turn your voice into a message when you hold to talk or use Hands-free, and for sound in a Look around clip when you choose it. Recognition runs on your phone.
- Photos (add only): to save the Look around clips you record.
- Motion and orientation: for the compass, so the map and Look around can turn with you and point the way.
- Notifications: to tell you about messages and alerts, and about trips you follow with People at home. For People at home, the app sends us the notification address Apple gives your phone (a push token), so we can send notices through Apple.
3. Information we collect
When you use the free app
The app makes the requests below only when your phone has an internet connection. With no signal, it shows what it saved the last time it had one, which may be out of date.
- Weather. Forecasts and alerts come from official weather services, such as the U.S. National Weather Service and Environment and Climate Change Canada. To get them, for where you are and for places you plan to go (a camp pin, the end of a route, a saved map), the app sends our servers an approximate location, accurate to about 2 km (1.2 miles), and our servers ask the weather service for that area. Your exact position, your name and your email are never sent. Like every request to our map and weather service, it carries the app's install code (see App check below), which is not linked to who you are.
- Tides, waves and buoys. The map shows tides, waves and buoy readings near you. To get them, the app sends our servers the same approximate location, accurate to about 2 km. Our servers ask the U.S. National Oceanic and Atmospheric Administration (NOAA) for the nearest tide station, wave data for an area about 50 km (30 miles) across, and its list of buoy readings. We count how often these answers are used, by plan, with no install code and no place.
- Maps. When the map loads map pieces from our servers, the requests show which areas are being viewed. Searching for a place name loads the list of names for its first letter, so that letter is seen too. Hill shading comes from public elevation data that our servers fetch from Amazon Web Services' open data, by map area only.
- Park and trail photos. Photos on park and place cards come through our servers, which fetch them from the National Park Service, Recreation.gov or Wikimedia Commons. Those sites never see you.
- Wildfires. To show wildfires near you (or, when the app does not know where you are, near the middle of the map), the app sends our servers a much rougher area, about 50 km (30 miles) across, and our servers ask the U.S. National Interagency Fire Center's wildfire data, hosted by Esri, for fires there.
- Alert bulletins. To get alert bulletins for your area, the app sends a grid square about 100 km (60 miles) across. If you turn on Relay or Trip Beacon, your radio also passes those bulletins on to other radios nearby.
- App check and daily map limit. To keep our map service for the real app and apply each plan's daily map limit, the app proves it is genuine using Apple's App Attest. Our servers keep one small record per install: a code made from Apple's key, the date, and how many map pieces were loaded that day. It is not linked to your name, email, purchases or location, and we delete it automatically soon after you stop using the app.
- Purchases. Plans are bought in the app through Apple's App Store. Apple processes the payment; we never see your card details or your Apple ID. The app sends us Apple's signed records of your purchases so we can turn on your plan: when you buy or restore, and again each time the app renews its app check, every few days. We check them and do not keep them.
- Radio software updates. When you update your radio's software, the app downloads it straight from Meshtastic's own update site, hosted on GitHub, which sees your IP address and the radio model being updated.
- Technical data. Like any website, our servers and our hosting provider receive your IP address, device and browser type and request times, which we use to deliver the Service and protect it from abuse.
When you use People at home (Trip Watch, on Pro)
People at home lets the people you invite follow your trip in their own NeoRangeR app and get notices on their phone, for example when you are back or running late. Following a trip is free. When you share a trip, we keep:
- The trip plan: where you are going and the way, when you leave and plan to be back, the names in your group, the exact spot you pinned, and the note you write for if you are overdue.
- The people you invite: the names you give them, and when they follow.
- Your position while the trip is on: about every 5 minutes, whenever your phone has signal, from your phone or your radio. We keep the latest one, so the trip knows when and where it last heard from you.
- Notification addresses: the push tokens of your phone and of each follower's phone, and a record of the last notices sent.
- The app's install code, so only your phone can change your trip.
Followers see your plan without the exact spot you pinned. If you are late, they also see your last position and your note. Notices go through Apple's push notification service and include your first name, the place's name and the times.
Accounts, cloud backup, and text messages or emails to people at home are not available yet. We collect none of that now, and we will update this Policy before they open.
When you join the launch waitlist
Your email address, whether you ticked "I'm a guide or outfitter," when you signed up and confirmed, and how many confirmation emails we've sent. We email you to confirm the address (no more than three times, even if the form is used again), and then once when NeoRangeR is on the App Store. Your address joins the list only after you confirm it. We do not keep your IP address. To stop abuse, we count sign-up tries from each connection under a one-way code made with a secret key. It isn't linked to your email, and we delete it automatically within a few days. To leave the list, reply to any of our emails or write to privacy@neoranger.com.
When you contact us
Your email address and what you write, so we can answer. If you use Report a problem in the app, the email it prepares also includes the app version, your phone's iOS version and your radio's model and software version. You see all of it before you send it.
Our website
neoranger.com uses Cloudflare Web Analytics, which counts page visits without cookies and without tracking you across sites. The app itself has no analytics SDKs.
4. How we use information
We use information only to provide, secure and support the Service: to show weather and maps, turn on the plans you buy, provide support, prevent fraud and abuse, keep records the law requires, understand overall use of our website, and run People at home and send its notices to the people you invite. We do not use your messages, locations or trips to build advertising profiles, and we do not use them to train general-purpose AI models.
5. What we do NOT do
- We do not sell, rent, lease, or trade your personal information, and we do not share it for cross-context behavioral advertising.
- We do not sell your location or give it to data brokers or advertisers. The only places it goes are those described in section 6.
- We do not show ads or include advertising or tracking SDKs.
- We do not read the messages your group sends over the radios; they never reach us.
- We do not sell, rent, lease, share, or otherwise disclose mobile phone numbers or SMS opt-in consent to third parties or affiliates for their own marketing or promotional purposes.
6. How information is shared
- With the people you choose. What you send over the radios goes to the radios and people you send it to. People at home shows your trip to the people you invite, as described in section 3. Information shared this way is in their hands.
- With service providers who process it for us, under contracts that limit their use to providing their service:
- Cloudflare: hosting, content delivery, security, email forwarding, website analytics, the waitlist form's bot check, storing the launch waitlist, and storing People at home trips
- Resend: sending the waitlist's confirmation and launch emails
- Apple: in-app purchases, the App Attest app check, and push notifications for People at home
- Public data sources receive an approximate area from our servers, never from you and never with your identity: official weather services, such as the U.S. National Weather Service and Environment and Climate Change Canada (about 2 km); NOAA's tide, wave and buoy services (about 2 km for the nearest tide station, an area about 50 km across for waves); the U.S. National Interagency Fire Center's wildfire data, hosted by Esri (the rough area); and Amazon Web Services' open elevation data (map areas). Photo sources such as the National Park Service, Recreation.gov and Wikimedia Commons receive no information about you.
- Meshtastic's update site, hosted on GitHub, receives your IP address and radio model when you download radio software, as described above.
- For legal reasons: when we believe in good faith that the law requires it, such as a valid subpoena or court order, or to protect someone's life or safety. Where allowed, we tell you first.
- In a business transfer such as a merger or sale, under this Policy's protections.
7. Data security
We protect information with measures including TLS/HTTPS for all traffic, encryption of group messages with your group's key (AES-256 for groups NeoRangeR sets up), encryption at rest, each People at home trip stored on its own and reachable only with its own secret links, and access limited to the people who run the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your phone locked and share group codes only with people you trust.
8. Data retention
| Information | How long we keep it |
|---|---|
| Weather answers (by rounded spot, no identity) | Kept briefly in a cache: up to a week for the place name, much less for forecasts and alerts |
| Launch waitlist | Until a few months after the launch email, or until you ask to leave. A sign-up never confirmed is deleted automatically after about a month. |
| Wildfire answers (by rough area, no identity) | Kept briefly in a cache, for minutes |
| App check record (install code, date and that day's map count) | Deleted automatically soon after you stop using the app |
| Purchase receipts sent by the app | Checked and not kept |
| Tide, wave and buoy answers (by rounded spot, no identity) | Kept briefly in a cache: up to a week for the station list, hours for tides and waves, minutes for buoys |
| Server and security logs | Our hosting provider, Cloudflare, keeps limited logs of requests to our servers, such as times, the addresses requested and errors, for up to 7 days, to run and protect the Service. We do not log the contents of trips. |
| People at home trips: the plan, names, your latest position, push tokens and the record of notices sent | Deleted 30 days after the trip is closed or cancelled. A trip that is never started, or never closed, is deleted 30 days after its planned return. |
| A follower's push token | Deleted when they stop following, or with the trip |
| Account and cloud backup (not yet available) | Until you delete your account, then up to 30 days |
| Our business and tax records (Apple handles payments; we never get your card or Apple ID) | As required by law, typically up to 7 years |
| SMS opt-out records (not yet available) | As long as required by carrier messaging rules and law |
9. Your rights and choices
- Control on your phone: choose what your radio shares and what the app shares, stop live shares at any time, turn off phone location, and clear the app's data.
- Access, correct, delete and export: you can ask for a copy of your information, correct it, export it or delete it, and, once accounts launch, delete your account in the app.
- California residents have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, the right to delete, the right to correct, the right to limit use of sensitive personal information (such as precise location), and the right to opt out of sale or sharing. We do not sell or share personal information, and we use sensitive information only to provide the features you ask for, so there is nothing to opt out of. You will not be discriminated against for exercising these rights.
- We honor requests from anyone, wherever they live.
To make a request, email privacy@neoranger.com. We verify requests against your email address (or your account, once accounts launch) before acting, and respond within the time the law allows (45 days in California). Anyone following a trip can stop following at any time in the app, which deletes their push token, and can also ask us to delete their details.
Do Not Track. We do not track you across other sites, so we treat every visit the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
10. Children's privacy
The Service is intended for adults, and for teens aged 13 or older using it with a parent or guardian. It is not directed to children under 13. We do not knowingly collect personal information from anyone under 13; if we learn that we have, we will delete it. A parent or guardian may share locations with a child in their care within their own group; that information stays on the family's own devices and radios.
11. Where information is processed
The Service is offered in the United States, and information we hold is processed in the United States.
12. Changes to this Policy
We may update this Policy. We will post the new version here with a new effective date, and tell you about material changes in the app (and account holders by email, once accounts launch) before they take effect.
13. Contact
Drupefruit LLC
Operator of NeoRangeR™
2108 N St STE N, Sacramento, CA 95816, United States
Privacy: privacy@neoranger.com
Support: support@neoranger.com
Security: security@neoranger.com