Privacy Policy

At Journeys and Pals, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, store, and share your information when you use our mobile application and related web services.

1. Information We Collect

To provide a seamless, offline-first planning experience, we collect the following categories of information:

• Account Information: When you register an account, we collect credentials powered by Supabase Auth (such as your email address, username, profile name, and avatar image).
• Travel Data: We store the itineraries you build, including dates, activities, notes, and photos added to your journeys. This data resides on your device in a local SQLite database and is synced securely to Supabase.
• Location Information: If you grant foreground location permissions, we access coordinates to assist in placing pins on your interactive planning map. We do not track your location in the background.
• Media Files: Photos you select to attach to itineraries are uploaded to private storage buckets on Supabase.

2. How We Use Your Information

We use the collected information for the following core purposes:

• To sync and back up your travel data bidirectionally between your local SQLite database and the cloud.
• To enable real-time collaboration so that your travel "pals" can view and edit the same itineraries simultaneously.
• To display route tracking on maps and deliver local activity notifications.
• To continuously troubleshoot, maintain, and optimize application performance.

3. Data Sharing and Collaboration

Journeys and Pals is collaborative by design. Please be aware of the following sharing behaviors:

• Invite Codes: Anyone with whom you share a journey's unique 6-character invite code will gain full access to view, edit, and contribute comments or activities within that journey.
• Third-Party Hosting: All cloud storage, database hosting, and authentication services are securely operated by Supabase. We do not sell or trade your personal data to any external marketing agencies.

4. Data Storage and Security

We implement standard, modern security measures to safeguard your credentials and travel logs:

• Offline Data: Your data is stored locally on your device using SQLite and is fully isolated using operating system sandbox mechanisms.
• Encryption: Data synced to the cloud is transmitted over HTTPS and stored using industry-standard database encryption protocols.
• Authentication Security: Password hashing and JWT token handling are entirely managed under Supabase Auth's robust architecture.

5. Your Rights & Data Deletion

You maintain full control over your data. You may request access to, correction of, or permanent deletion of your account and travel logs at any time. To completely wipe your data from our servers, you can initiate account deletion inside the application profile settings, or by reaching out to our support team.

6. Updates to this Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the app or on this web page and updating the "Last updated" date above.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: privacy@journeysandpals.com