Privacy Policy

1. Scope

This policy covers the Mapogo iOS app and the mapogo.app website ("we", "us"). It explains what information the app and site handle, why, and the choices and rights you have, including rights under United States state privacy laws and Canadian privacy law (PIPEDA and provincial equivalents such as Quebec's Law 25). The terms governing your use of the app and site are set out separately in our Terms of Use.

2. Your account and what it stores

Mapogo needs an account, which you create with Sign in with Apple (section 3). Everything you add is kept on your device and in your account on our servers, which is what backs it up and lets it appear on every device where you sign in to the same account. Your account stores:

• your profile: display name, bio, home country and currency, profile photo, and whether you subscribe to Mapogo Pro;
• your trips: names, destinations, dates, plans and everything you enter on them (including notes, links, confirmation numbers, prices, and how a cost is split), packing lists, and the text of your journal entries;
• trip cover photos and photos you attach to plans and journal entries;
• the countries, regions, and cities you mark as visited, and the places you tick off in trackers.

Photos you attach to tracker items are not uploaded: they stay on the device where you added them and travel only within your own device backup. Photos that are uploaded are resized and saved again first, which removes their location and camera details. Photos are only accessed when you pick them.

Your account's data can be read only by you, and by your friends for what section 11 lets them see. We do not look at your content unless you ask us to for support or the law requires it, and we never use it for advertising or sell it. Our servers are run by Supabase, which hosts the database, sign-in, and photo storage for us (section 18).

If you add a Mapogo home screen widget, the app writes a small snapshot for it (your visited country codes, the map color you picked, and, for the Next Up widget, the name and date of your next upcoming trip) into a shared container on the same device, because a widget cannot read the app's database directly. That snapshot never leaves your device either.

3. Sign in with Apple

Mapogo uses Sign in with Apple to create your account. When you sign in, Apple gives the app a stable identifier for your Apple account and, only the first time and only if you choose to share them, your name and email address. If you choose "Hide My Email," Mapogo only ever sees Apple's private relay address. The app passes Apple's sign-in token to our servers to open your account, so the identifier and the email address are stored with it, and your name becomes your display name, which you can change. We use them only to sign you in and run your account; we do not send you marketing email. You can revoke Mapogo's access in Settings, your name, Sign in with Apple on your device. Signing out leaves your data in your account and on the device; deleting your account is described in section 16.

4. Maps and Mapbox

The map is powered by the Mapbox Maps SDK, which streams map tiles over the internet. As part of providing the map, Mapbox collects anonymized usage and diagnostic data, such as a device or session identifier, coarse location, map-interaction events, and performance data, which Mapbox uses to improve its maps and services. This is collected by Mapbox, not by us, is not linked to your identity, and is not used to track you across other apps or websites. You can turn off this telemetry at any time in the app under Profile, Privacy & data ("Map usage analytics"). For details, see the Mapbox Privacy Policy.

5. Weather on country guides

A country guide can show current conditions for a destination city. To do that the app asks Apple's WeatherKit service for the weather at that city's coordinates, which come from data bundled with the app. The request tells Apple only the coordinates of the destination you are reading about. It does not include your location, your identity, or anything you have written, and Mapogo never asks for or receives your device location. Weather data is provided by Apple Weather; see Apple's weather data sources and the Apple Privacy Policy. If the request fails or you are offline, the card simply does not appear; the rest of the guide is bundled with the app and works with no connection.

6. Flight lookups

When you type a flight number into a trip itinerary and tap to look it up, the app sends that flight number and the flight date to AeroDataBox, a third-party flight-schedule service accessed through RapidAPI, to fetch departure and arrival times. Nothing else is sent: no account identifier, no location, and no other journal content. The lookup only happens when you tap it; you can always type flight details in by hand instead. AeroDataBox's handling of the request is governed by its own privacy policy, and RapidAPI's as the platform that routes the request; we do not receive or store the lookup.

7. Currency exchange rates

A country guide's Money card converts prices between currencies using today's exchange rates. To get them, the app asks an endpoint we run at mapogo.app, which in turn fetches a public rate feed (open.er-api.com) and caches it for every user of the app. This request carries no personal data and nothing that identifies your device; it is simply a request for the day's rates. If the request fails or you are offline, the card falls back to reference rates bundled with the app.

8. Things to do

Explore and a trip's Add a plan page can show bookable things to do from Viator for the cities on a trip, or for a country you search. To get them, the app asks the same mapogo.app endpoint, which in turn asks Viator for that destination and caches the answer for every user of the app. The request carries only the destination, the currency to show prices in, and which page of the app is asking: no personal data, nothing that identifies your device, and nothing else about your trip. Opening one of them loads its details the same way, by Viator's code for it alone. Their photos load directly from Viator's image servers, run by Tripadvisor, which like any web server receive your device's IP address when they send an image. If a request fails or you are offline, the section does not appear.

If you add one to a trip, its name, an estimated price, a start time, the meeting point, and notes are copied into a new plan, along with up to four of its photos, and are stored in your account like any plan you write yourself (section 2). Booking happens on Viator's website or app, as described in section 9.

9. Links that open other services

Country guides include links you can tap to leave the app, such as an official government entry page, a visa application service, a translation app, or a health authority's page. Nothing is sent unless you tap. The visa link is the only one that carries anything about you: it opens the service with the destination country and the passport nationality you chose in the app, so the page can answer the question you are asking it. Once you leave, those sites and apps are governed by their own privacy policies, not this one.

Booking links work the same way. "Book on Viator" on a thing to do, and the Flytographer photo shoot idea on a trip's Add a plan page, open that company's website in Safari, or its app if you have it installed. These are affiliate links: they carry Mapogo's affiliate code (and, on Viator's, a label for the page you tapped from), so the company can tell the visit came from Mapogo and may pay us a commission if you book. They carry nothing about you or your trip, and what you book, and anything you give the company to book it, stays between you and that company.

10. Purchases

The optional Mapogo Pro subscription is sold through Apple's App Store and billed entirely by Apple. We never receive your payment details, billing address, or Apple account information. Your subscription status is checked on your device against the App Store, and whether you subscribe is saved with your account, where your friends can see it as a badge on your name. You can manage or cancel the subscription in your Apple account settings, and refunds are handled by Apple under its media services terms.

11. Friends and shared trips

You become friends with someone through an invite link. The link carries your display name and an invite code, and a trip link also carries the trip it is for. You send it yourself, through the apps you choose; opening it shows a page on mapogo.app with your display name, which stores nothing. Removing a friend ends what they can see at once.

Your friends can see your display name, bio, profile photo, the countries, regions, and cities you have visited, and whether you subscribe to Mapogo Pro, and your past trips as described below. They never see your own packing list.

Once a trip has ended, it shows on your profile to your friends. This is on unless you turn it off: you can turn it off for every trip with "Show past trips on my profile" in Profile, Account, or hide a single trip from its settings. Upcoming trips, trips under way, and draft trips never show on your profile.

You can also share any trip, at any time, with friends you pick, either to view it or as traveling on it. A friend who can see a trip, on your profile or because you shared it with them, sees its name, places, dates, cover photo, its plans and their photos, and its journal entries and their photos, unless you turn off "Share journal with friends" in Profile, Account, which keeps your journal from every friend, including the ones traveling with you. A friend you add as traveling on the trip also sees the names of everyone on it and the plans' prices, splits, notes, links, confirmation numbers, and who added each one, and the trip's group packing list (what the trip needs once, and who is bringing it). They can change the trip's dates, cities, and cover photo, add, edit, and delete its plans and group packing items, split costs, and, while your journal is shared, write journal entries on it. Your own packing list is never shared, not even with the people traveling with you. A journal entry you write on a friend's trip, with its photos, is stored with their trip in their account. Everyone who can see that trip's journal sees it with your name on it; only you can change or delete it, and leaving the trip keeps it there. It is deleted when they delete the trip or when you delete your account. The app saves a copy of a trip you are traveling on on your device, with any changes you made while offline, so it opens without a connection; changes that cannot be sent within 14 days are discarded. Leaving the trip or deleting your account removes the copy.

Taking someone off a trip or removing them as a friend ends their access at once. Hiding a trip from your profile, or turning off past trips on your profile, ends it at once for friends who could see the trip only there. A photo a friend's device has already downloaded can stay in its cache for a short time.

12. Notifications

Trip reminders are local notifications scheduled entirely on your device. Nothing about them leaves your device, and you can disable them per trip or in iOS Settings.

13. The website

mapogo.app is a static site hosted on Cloudflare Pages. It sets no cookies and uses no advertising trackers. To see how many people visit, the site uses Cloudflare Web Analytics, which is cookieless: it counts a page view along with the referring site, country, and browser type, and estimates visitor numbers without storing a persistent identifier, fingerprinting your device, or following you to other sites. We see totals and trends, never individuals. Like any web host, Cloudflare processes technical request data (such as IP addresses) to deliver and secure the site; see the Cloudflare Privacy Policy. Because the site builds no profile of you and does not track you across sites, it does not respond to browser "Do Not Track" signals; there is nothing to turn off. Blocking the analytics script with a content blocker does not affect how the site works.

14. The launch waitlist

The website has one form: an optional launch waitlist. If you choose to submit your email address, we store it, together with the approximate country and browser identification (user-agent) that accompany the request, solely to notify you when Mapogo launches and, occasionally, to share launch-related updates. We rely on your consent, given when you submit the form. This data is written to a private database in our own Cloudflare account; we use no third-party email or form service, and we do not sell or share it. The request's IP address is held only briefly, to guard the form against abuse, and is not stored alongside your email address. We keep the email until the launch campaign is complete or you ask us to remove it, whichever comes first. To be removed at any time, email privacy@mapogo.app. Joining the waitlist is entirely optional and is not required to use the app.

15. What we do not do

• We do not sell your personal information, and we do not "sell" or "share" it as those terms are defined by the California Consumer Privacy Act. Supabase stores it only to run Mapogo for us.
• We do not show ads or use advertising networks. The things to do in section 8 are chosen by destination alone, never by anything about you.
• We do not track you across apps or websites. The app uses no analytics of our own; the Mapbox map SDK collects its own usage telemetry as described in section 4, and you can turn it off in the app. The website counts visits only in the cookieless, aggregate way described in section 13.
• We do not collect your precise location. Mapogo has no location permission.

16. Your choices and rights

You can view, edit, or delete any of your content in the app at any time, and changes reach your account the next time the app syncs. Delete account, in Profile, Account, deletes your account and everything stored with it on our servers, including uploaded photos, and then erases the app's data on that device. Signing out instead keeps your account and leaves the app's data on the device. You can opt out of Mapbox telemetry in the app and revoke Sign in with Apple in iOS Settings.

You may also ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by writing to privacy@mapogo.app. If you contact us by email, we hold your message only as long as needed to respond. We will respond within the time required by applicable law and will not discriminate against you for exercising any privacy right. Canadian users may also direct concerns to the Office of the Privacy Commissioner of Canada or their provincial privacy regulator.

17. Data retention and security

We keep your account's data for as long as you have the account. When you delete something in the app it is removed from your account, and when you delete your account everything stored with it is removed from our database and photo storage. Copies can remain in our hosting provider's routine backups for a limited time before they are overwritten. Data is encrypted in transit and at rest, and access rules in the database limit each account to its own data and to what its friends let it see. On the device, data is protected by iOS device encryption and your sign-in session is kept in the Keychain. No system is perfectly secure, and if a breach affected your information we would tell you as the law requires. Waitlist email addresses are kept as described in section 14 and protected by Cloudflare's security controls.

18. International transfers

Your account's data is stored by Supabase on Amazon Web Services servers in the United States (US East). If you live outside the United States, your information is transferred to and stored there. Apple, Mapbox, Cloudflare, Viator, and Tripadvisor's image servers may process the limited technical data described above on servers in the United States or other countries, under their own privacy policies and safeguards.

19. Children

Mapogo is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information through the app or site, contact us and we will help remove it.

20. Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date. Material changes will also be noted in the app's release notes.

21. Contact

Questions, requests, or complaints about privacy in Mapogo can be sent to privacy@mapogo.app. This address reaches the person responsible for Mapogo's privacy practices and personal information handling.