Privacy Policy

1. Information We Collect

The information we collect depends on how you use the Services.

Account and profile information

When you create or use an account, we may collect your:

• email address;
• name or display name;
• account/user identifier;
• profile image or avatar, where available;
• authentication provider information; and
• account preferences, including your marketing communication preference.

If you create an account using Sign in with Apple or Google Sign-In, we receive information made available through that authentication service, such as your account identifier, email address, name, or profile image, depending on the provider and the permissions you grant.

Passwords used for email/password authentication are handled through our authentication provider and stored as password hashes rather than readable passwords.

Travel and user-generated content

When you use the App, you may choose to create or store information including:

• saved and customized itineraries;
• trip dates;
• itinerary stops and custom places;
• wishlist items;
• trip and stop notes;
• travel preferences;
• selected trip settings;
• manually entered budgets and expenses; and
• other information you choose to add to a trip.

Expense information is entered manually by you for travel-planning and budgeting purposes. We do not connect to your bank account, payment card, Revolut account, or other financial account to obtain this information.

Photos

You may choose photos from your device to add to trip notes or use as trip cover or highlight images.

Photos attached to notes are stored in private user storage. Certain images selected as trip covers or similar visual content may be stored using publicly accessible image URLs so that they can be displayed within the Services.

Depending on the image selected and the way the operating system processes it, an uploaded image may contain metadata associated with the original file.

We do not use your photos for advertising or to build advertising profiles.

Location and map information

The App may request permission to access your device's location while you are using the App so that your current position can be displayed on trip maps.

Uncharted by Us does not store your precise real-time device location on our servers or maintain a history of your movements. Our application code does not transmit your live GPS coordinates to our database.

Location information relating to places in an itinerary is different from your device location. We may store and process place names, Google Place IDs, latitude/longitude coordinates and related place information for destinations, activities, accommodation, restaurants, and other itinerary stops.

When map functionality is used, map providers may process information in accordance with their own privacy practices.

Purchases and subscriptions

If you purchase a subscription or other digital service through the App Store, the payment transaction is handled by Apple.

We do not receive or store your full payment-card information.

We may receive and store information necessary to determine your subscription status, purchase history, entitlement, subscription type and expiration or renewal status.

Diagnostics and technical information

We use error-monitoring and performance tools to help identify crashes and technical problems. This may include information such as:

• crash information and error messages;
• device model;
• operating-system and App version;
• performance information; and
• other technical diagnostic information.

We do not intentionally attach your name, email address, travel notes, photographs, expenses or precise GPS location to diagnostic events.

Technical service providers may also process information such as IP addresses as part of operating, securing or delivering their services.

Website information

When you use our associated website, standard technical information may be processed by our website hosting or infrastructure providers, such as browser information, IP address and information necessary to deliver the website.

If you voluntarily submit information through a waitlist, registration or contact form, we process the information you provide for that purpose.

2. How We Use Your Information

We process personal information where necessary to provide the Services, comply with our legal obligations, pursue legitimate interests where permitted by law, or where you have given consent.

We use information to:

• create, authenticate and manage your account;
• provide and personalize the App and its travel-planning functionality;
• save and synchronize trips, itineraries, preferences, notes, photos, budgets and other content;
• provide maps, place search and route functionality;
• process and verify subscriptions and premium access;
• maintain the security and integrity of the Services;
• diagnose crashes, bugs and performance problems;
• provide customer support and respond to requests;
• send transactional communications such as account confirmation or security-related messages;
• send marketing communications where you have explicitly opted in;
• comply with legal obligations and establish, exercise or defend legal claims; and
• improve and develop the Services.

We do not sell your personal information and do not use your information for cross-app advertising or tracking.

3. Legal Bases for Processing

Where the GDPR or similar European data-protection laws apply, we rely on the following legal bases as appropriate.

Performance of a contract: We process account information, trips, user content, preferences, subscriptions and related information where necessary to provide the Services you request.

Consent: We rely on consent where required, including for optional marketing communications and access to protected device resources such as location. You can withdraw consent at any time.

Legitimate interests: We may process limited information where necessary for legitimate interests such as securing the Services, preventing abuse, diagnosing technical problems and improving reliability, provided those interests are not overridden by your rights and interests.

Legal obligations: We may process or retain information where necessary to comply with applicable laws, regulatory requirements, tax or accounting obligations, or lawful requests.

4. Authentication

You may authenticate using email/password or supported third-party authentication providers, including Apple and Google.

When you use a third-party sign-in provider, that provider processes information according to its own terms and privacy practices. We receive only the information made available through the authentication process and necessary to establish and maintain your Uncharted by Us account.

5. How We Share Information and Our Service Providers

We use third-party providers to operate specific parts of the Services. We disclose information only as necessary for those providers to perform the relevant function.

Our current service providers and integrations include:

• Supabase — authentication, database hosting, file storage and backend functions. Account information, trips, preferences, notes, photos, budgets and other App data may be processed through Supabase.
• Apple — Sign in with Apple and App Store purchases/subscriptions.
• Google — Google authentication and Google Maps Platform functionality, including Maps, Places and Routes. Place searches, itinerary stop coordinates, Place IDs and route information may be processed by Google when those functions are used. We do not intentionally send your Uncharted by Us email address or account ID to Google Maps APIs as part of those requests.
• RevenueCat — subscription and entitlement management. We may provide an internal App user identifier and receive information relating to subscription and purchase status. We do not intentionally provide RevenueCat with your name or email address for this purpose.
• Sentry — crash reporting, diagnostics and performance monitoring. We configure the service without intentionally attaching your name or email address to diagnostic events.
• Apple App Store / StoreKit — processing App Store subscriptions and purchases. Apple handles payment credentials.
• Other infrastructure providers may process limited technical information necessary to deliver content or operate the Services.

We require service providers that process personal information on our behalf to protect it appropriately and process it consistently with applicable data-protection requirements.

6. External and Affiliate Links

The App may contain links to third-party travel services, including accommodation providers, activities, tours, hiking services, transportation providers, car-rental services and other travel-related websites.

Some links may be affiliate links. If you make a booking or purchase after following an affiliate link, we may receive a commission from the third-party provider at no additional cost to you.

Opening such a link may provide the destination service with information normally transmitted when accessing a website or app. Uncharted by Us does not intentionally append your Uncharted account ID, email address, live GPS location or private trip information to these external links.

Once you leave our Services, the third party's own privacy policy and terms apply. We are not responsible for the privacy practices of independent third-party websites and services.

7. Marketing Communications

Marketing communications are optional and opt-in.

Creating an Uncharted by Us account does not automatically subscribe you to marketing emails.

If you choose to receive marketing communications, we record your preference. You may withdraw your consent at any time through the available preference controls or by contacting us.

Account confirmation, authentication, security, service and other essential transactional communications are separate from marketing communications and may still be sent where necessary to operate your account.

8. Cookies, Analytics and Tracking

The current App does not use advertising SDKs or cross-app tracking technologies for targeted advertising.

We do not currently use IDFA-based advertising or App Tracking Transparency for cross-company tracking.

Our website or infrastructure providers may use technologies necessary to operate and secure the website. If we introduce optional analytics, advertising cookies or other technologies requiring consent, we will provide appropriate notice and consent mechanisms where required.

9. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.

Account information and user-created App data are generally retained while your account remains active. Trips, notes, photos, preferences, budgets, expenses and wishlist information may remain until you delete the relevant content or your account.

When you delete your account, we delete the account and associated user data from our active application systems, including user-owned database records and user-uploaded files associated with the account, subject to technical completion of the deletion process.

Certain information may remain temporarily in backups, security logs, fraud-prevention records or third-party systems in accordance with applicable retention periods. Subscription transaction records may also be retained by Apple, RevenueCat or us where necessary for legal, accounting, fraud-prevention or subscription-management purposes.

10. Account and Data Deletion

You can request deletion of your Uncharted by Us account directly within the App using the Delete Account functionality.

Account deletion is intended to remove:

• your Uncharted by Us account;
• profile and account information;
• saved and customized trips owned by you;
• trip and stop notes;
• uploaded user photos associated with your account;
• wishlist information;
• budgets and manually entered expenses;
• travel preferences; and
• other user-owned data associated with your account.

Some information may be retained where required by law or where necessary for legitimate purposes permitted by applicable law, such as transaction records, fraud prevention, dispute resolution or security records.

Third parties such as Apple may independently retain information under their own legal obligations and privacy policies.

You may also contact us at unchartedbyus@gmail.com regarding a privacy or deletion request.

11. Your Privacy Rights

If you are in the European Economic Area, United Kingdom, Switzerland or another jurisdiction providing similar rights, you may have the right, subject to applicable conditions, to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of your personal information;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with the competent data-protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

You may exercise applicable rights by contacting unchartedbyus@gmail.com. We may need to verify your identity before fulfilling certain requests.

12. International Data Transfers

Some of our service providers may process information in countries outside your country of residence, including outside the European Economic Area.

Where required by applicable data-protection law, we rely on appropriate safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.

13. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

These measures include authentication and access controls and restricted storage for certain user content. However, no electronic transmission or storage system can be guaranteed to be completely secure.

14. Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18.

If we learn that personal information from a child under 18 has been collected contrary to this policy, we will take appropriate steps to delete it.

15. Sensitive Personal Information

The Services are not designed to request sensitive or special-category personal information such as racial or ethnic origin, political opinions, religious beliefs, health information, biometric information or information concerning a person's sex life or sexual orientation.

Please avoid including sensitive personal information in free-text notes, photographs, expense labels or other user-generated fields unless necessary for your own personal use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our data practices, service providers or applicable laws.

When we make changes, we will update the "Last updated" date above. If changes are material, we may provide additional notice where appropriate or required by law.

17. Contact Us

For questions, requests or concerns regarding this Privacy Policy or your personal information, contact:

Rensapp Technology SRL
Uncharted by Us
Email: unchartedbyus@gmail.com