Privacy Policy
Effective Date: October 15, 2026 • Compliant with Apple App Store Guidelines
Journeys & Pals is built for travelers, not advertisers. We do not sell your personal data, we do not build ad tracking profiles, and we never track or monetize your GPS location.
1. Information We Collect
We collect only the minimum information necessary to provide synchronized travel planning:
- Account Information: When registering, we store your email address and an encrypted Supabase Authentication User ID (UUID).
- Trip & Itinerary Data: Trip destination names, dates, activity stops, notes, and member associations you choose to create.
- Expense Records: Amounts, currencies, payer associations, and receipt photos uploaded to your shared journey.
- Travel Documents & Passes: Boarding passes, tickets, and reservations stored either locally on-device (SwiftData) or in the secure Supabase storage vault for shared journeys.
2. On-Device Processing & Apple Intelligence
When you use AI itinerary extraction (such as pasting a confirmation email or itinerary draft), processing is performed directly on your Apple device using native Apple Intelligence / Foundation models. We do not send your unparsed emails or personal notes to third-party ad networks.
3. Data Storage & Security
Solo journeys for free users reside exclusively on your physical iOS device using Apple SwiftData. Shared journeys and Creator Pass cloud backups are stored in encrypted PostgreSQL databases hosted by Supabase with strict Row Level Security (RLS) policies. Only invited journey members can access data related to a specific journey.
We respect your right to be forgotten. In compliance with Apple App Store Review Guidelines (Section 5.1.1(v)), we provide complete self-service account and data deletion:
Option A: In-App Instant Deletion
- Open the Journeys & Pals iOS app.
- Tap the Profile / Settings tab.
- Scroll to the bottom and tap “Delete Account”.
- Confirm deletion. Your user profile, cloud journeys, and vault files are purged immediately.
Option B: Web Request Deletion
If you no longer have access to the iOS app, you can submit an account deletion request via our Support Page or by emailing privacy@journeysandpals.com with your registered email. All associated records will be deleted within 7 business days.
5. Children’s Privacy
Journeys & Pals does not knowingly collect or solicit personal information from children under the age of 13. If we discover that personal data from a child under 13 has been collected, we will delete the information promptly.
6. Privacy Inquiries
For questions regarding our privacy practices or data rights, please contact our Data Protection team at privacy@journeysandpals.com.