Shepherd’s Sky

Shepherd's Sky privacy notice

Last updated 2 November 2026

This notice explains how Dibs McCallum uses personal data in Shepherd's Sky.

Data we process

Children

Shepherd's Sky is not directed to children under 13 and we do not knowingly create accounts for them. A young person who is old enough to use the service should involve a parent or guardian in decisions about sharing photographs, profile information or precise locations.

Precise location

Shepherd's Sky asks for foreground location permission only when you use a location-based feature. Your device coordinates are used to find nearby guides, resolve a local forecast and help you select a trip starting point. The current app does not continuously track you in the background. You can deny or revoke permission in device settings and choose a place manually instead.

When publishing a community photograph, you choose whether to link a guide and how much location context to disclose. Sensitive and wildlife locations may be reduced to a safer level even when you select a more precise option. Standalone posts do not disclose a location.

Why we use data

We process data to provide your account and requested app features, perform our contract with subscribers, keep the service secure, moderate community content, improve reliability with proportionate diagnostics, and meet legal obligations. Where consent is the appropriate basis, such as optional device permissions and notifications, you can withdraw it through your device or app settings.

Maps and third parties

Interactive maps inside the current iPhone, iPad and Android apps are rendered by Mapbox. Required Mapbox attribution remains visible and Shepherd's Sky disables optional Mapbox telemetry. Mapbox features are subject to the Mapbox Terms of Service and the Mapbox Privacy Policy. If you choose a navigation action, your device may open Apple Maps, Google Maps, Waze or another service you select; that external service then processes the destination under its own terms and privacy notice. Shepherd's Sky guide descriptions, parking notes, safety notes and community contributions are maintained independently and are not represented as map-provider content.

We also use service providers for account authentication, infrastructure, weather forecasts, app distribution, notifications and subscriptions. Each receives only the data needed for its role and is subject to its own terms and safeguards.

Sharing and international processing

Published community posts, processed photographs, comments, selected location context and profile attribution are visible to signed-in users. Public guide contributions and profile attribution are visible to other users. Private trips and groups are visible only to their participants unless a participant creates a share link. Service providers may process data outside the UK; appropriate contractual and organisational safeguards must be maintained where required.

Retention and your rights

We keep account and activity data only for as long as needed for the service, safety, dispute handling and legal obligations. A private source copy of a community upload may be retained for up to 30 days for processing, moderation and disputes. A metadata-stripped 4096-pixel archival rendition and smaller delivery versions remain while the post remains published. We retain a one-way SHA-256 fingerprint of the uploaded source with the post for moderation, duplicate and dispute evidence; it is not shown in the community feed. Deleting a community post removes it from the feed and schedules its public media for removal. Account deletion removes photographs attributed to your account from location guides and pending guide revisions, and schedules the copies we manage for deletion. Shared location facts and other members' contributions remain. A file still used by another member's contribution is not deleted while that reference remains. We do not control copies hosted by other services. Limited moderation and legal records may be retained in anonymised form where needed for safety, disputes or legal obligations.

You can export your account data and request account deletion from Profile > Settings. If you cannot access the app, email the privacy contact below to request deletion; we will verify that the request comes from the account owner. Account deletion does not cancel a subscription managed by Apple or Google. Depending on applicable law, you may also ask for access, correction, restriction, objection or portability, and may complain to the UK Information Commissioner's Office.

Contact

The data controller is Dibs McCallum. Privacy enquiries: [email protected].

Version 2026-11-02-account-photo-removal