Last updated: April 2026
Calispot is a community map for finding outdoor workout spots. We collect as little as possible. We do not sell your data. We do not track your physical location — only the spot locations you explicitly submit yourself.
Account email address
If you create an account, we store your email address so you can sign in and manage your submitted spots. We do not send marketing emails. Your email is used only for authentication and, if needed, to help you recover access to your account.
Submitted spots and photos
When you submit a spot, the location coordinates, name, description, and any photos you upload are stored in our database and made publicly visible on the map. You are choosing to share this data with the community — that is the purpose of the app.
Your device’s location
If you allow the browser to share your location (to see nearby spots or to pre-fill coordinates when submitting), that location data is used locally in your browser only. It is never sent to or logged by our servers.
Anonymous page-view analytics
We use Vercel Analytics to understand which pages are visited. This collects no personal identifiers — no cookies, no fingerprinting, no IP addresses stored. It just tells us how many people visit a given page.
Running Calispot requires trusting a small number of external platforms. Here is exactly what they are and what they receive:
Supabase
Handles authentication (sign-in, sign-up), the database (spots, reviews, photos), and file storage (uploaded photos). Your email and submitted content are stored on Supabase’s infrastructure. Supabase is SOC 2 Type II certified. See supabase.com/privacy.
Mapbox
Renders the map. When you view the map, your browser makes requests to Mapbox to load map tiles. Mapbox may log those requests (including your IP address) per their own privacy policy. See mapbox.com/legal/privacy.
Vercel
Hosts and serves the app. Vercel receives standard web request data (IP addresses, user-agent strings) as part of normal CDN operation. See vercel.com/legal/privacy-policy.
Google (OAuth only)
If you choose “Continue with Google”, you are redirected to Google to authenticate. Google shares your email address with us to create your account. We do not receive your password or any other Google account data. See Google’s privacy policy.
You can delete your account at any time directly from your profile page. Deletion is immediate and permanent. Spots you submitted will remain on the map as community data — they are no longer linked to you after deletion.
If we make material changes to how we handle your data, we will update the date at the top of this page. Using the app after a change constitutes acceptance.
Questions? Email philipgjorup@gmail.com.