Privacy Policy

01 Overview & scope

This policy explains what information Travel Deck ("Travel Deck," "we," "us") collects when you use the Travel Deck mobile apps and related services, how we use it, and the choices you have. It applies to the iOS and Android apps and any account you create with us. Travel Deck is operated by an independent developer based in Brazil, reachable at support@traveldeck.app.

By using Travel Deck you agree to the practices described here. If you do not agree, please don't use the app.

02 Information we collect

Account information

When you sign up we collect your email address and basic profile details (such as a display name and, if you add one, a profile photo). You can sign in with a one-time code we email you, or with your Apple or Google account. We never ask for or store a password.

Content you create

We store the places you save and the notes, star ratings and reviews, visits, tags, and photos you add to them. This content is the core of the product and is associated with your account.

Trips and collaboration

We store the trips you create — their name, destination, dates, cover photo, the places you add to each day, and any notes on them. When you invite someone to a trip, we process the email address you enter and the role you assign, so we can deliver the invitation and grant access if it's accepted. When someone invites you, we show you their name and the trip they're inviting you to.

Location, for the map

With your permission, we use your device location while you're using the app to show how far saved places are, center the map, and find places near you. Location is used only while the app is open, never in the background. You can use the rest of the app without granting location.

Device & usage data

We collect technical and usage data — app version, device type, platform, language, and in-app interaction events — to keep the app stable and understand which features are used. Once you sign in, this activity is associated with your account rather than anonymized (see "Third parties & providers" below).

Push notifications

If you enable notifications, we collect a push token and device identifiers so we can deliver them, along with your notification preferences — which categories you have turned on.

03 How we use it

• To provide core features: saving and organizing places, notes, ratings, visits, tags and photos, and syncing them across your devices.
• To keep your account secure and verify sign-in.
• To diagnose problems, improve performance, and prioritize new features.
• To send essential service messages (such as sign-in and verification emails).
• To send notifications about your trips and invitations, and — only if you turn them on — news and tips.
• We do not sell your personal data.

04 Third parties & providers

We rely on a small set of service providers to operate the app. They process data only as needed to perform their service:

• Amazon Web Services — our servers, database, backups, and the storage behind the photos you upload. Processed in the United States (us-east-1).
• Cloudflare — DNS, content delivery, and image resizing for the photos shown in the app; Cloudflare also delivers our email, including sign-in codes and trip invitations, sent from no-reply@traveldeck.app.
• Google — place details and photos, map rendering, static map images, and destination search.
• Amplitude — product analytics and feature management; once you sign in it receives your user id, email, and name.
• Sentry — crash and error reporting; it receives your user id, email, and username to help us diagnose problems.
• Datadog — performance monitoring and logging in the United States; it receives your user id, email, and name.
• OneSignal — delivers push notifications to your device; it receives your user id and technical device information (device type, operating system, app version, and a push token). It does not receive your email address or your travel content.

We may also disclose information if required by law or to protect rights and safety.

05 What people you invite can see

A trip you share is visible to everyone on it. Participants see your name and profile photo, the places you add to that trip, and the notes on them. They do not see your email address — the app never displays it to other participants. Only a pending invitation carries an address, and only to the person who sent it.

Your bucket list stays private. Saving a place, tagging it, rating it, or marking it visited is visible only to you, unless you add that place to a trip you share. People who are not on a trip see nothing about it.

Anything you contribute to a shared trip stays with that trip if you leave it — the plan the group is travelling on does not fall apart when one person steps away. If you want it removed, ask the trip owner or contact us.

06 Data retention

We keep your account and content for as long as your account is active. If you delete specific places, notes, or photos, they are removed from active systems and purged from backups within a defined window. If you delete your account, we remove your personal data within 30 days, except where we must retain limited records to meet legal obligations.

Pending trip invitations expire on their own. If you delete your account, invitations you sent and invitations addressed to you are withdrawn automatically at the same time.

Notifications shown in the app are kept for 12 months and then deleted.

07 Your rights & choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data:

• Access and correct — view and edit your profile details in the app.
• Delete your account — permanently remove your account and associated content from the app's profile screen; deletion is confirmed by typing your email.
• Request a copy — email us to receive a machine-readable copy of your places and content.
• Location permission — grant or revoke location access any time in your device settings.

To exercise any right not available in the app, contact us using the details below.

08 Children's privacy

Travel Deck is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

09 International transfers

Some of our providers process data outside your country. Our servers, database and media storage run on Amazon Web Services in the United States, and analytics, crash reporting and performance data are processed there by Amplitude, Sentry and Datadog. Push notifications are processed by OneSignal, also in the United States. Place and image data are handled by Google and Cloudflare. Where required, we rely on appropriate safeguards for these cross-border transfers.

10 Changes to this policy

We may update this policy as the app evolves. When we make material changes we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after changes means you accept the revised policy.

11 Contact

Questions about privacy or a data request? Reach us at support@traveldeck.app. Travel Deck is operated by an independent developer based in Brazil.