Privacy Policy

• We collect what Travelled needs to work: your account, your profile and the travel information you choose to add.
• Travelled does not track your live or background location. The places in your travel record are the ones you add yourself.
• We don’t sell your information, and Travelled doesn’t currently use advertising, analytics or crash-reporting services.
• You can download a copy of your data and delete your account yourself in the app, and contact us to use any of your privacy rights.

Travelled is a travel record app developed and operated in the United Kingdom. In this policy, “Travelled”, “we” and “us” mean the operator of the Travelled app and this website, who is responsible for your personal information (the “controller”).

The legal name and contact details of the operator of Travelled will be published here before launch.

You can contact us about anything in this policy at privacy@thetravelled.app.

Account information

Your email address and password when you create an account, and the identifiers our systems use to recognise your account. Your password is stored in a protected (hashed) form by our authentication provider.

Age check

During account setup, we ask you to enter your date of birth so we can check that you meet Travelled’s minimum age. We use it only to make that check and don’t keep it. We keep a record that the age requirement was met and when you confirmed it.

Profile information

Details you choose to add to your profile, such as a display name, your home country and a profile photo. Profile photos are stored privately.

Travel information

The countries, cities and places you add, whether you mark them as Dreaming, Going or Travelled, and the trips you record, including destinations, dates and other details you enter.

Photos you upload

Images you choose to add, where the app supports it. Images are processed so that embedded location (GPS) metadata is removed rather than kept.

Purchases

If you buy Travelled+, we receive information about your purchase, such as what you bought, when, and whether it is active, so we can give you access to it. Payments are handled by Apple — we never receive your card details.

Technical and security information

When the app or this website connects to our servers, our hosting providers automatically record limited technical information, such as your IP address, the time of the request and the address requested. This is used to run the service and keep it secure.

When you contact us

Your email address and whatever you tell us in your message, so we can help.

We don’t collect your contacts, microphone input, health information, advertising identifiers or live location.

Travelled is about the places you’ve been, but it doesn’t need to follow you there. The app does not collect your device’s live or background location.

The places in Travelled are the ones you deliberately add — a country you’ve visited, a city you’re planning to see, a trip you’re looking forward to. That information is part of your travel record because you chose to record it.

• To create and run your account and sign you in.
• To store your travel record and show it back to you — your map, trips, journey and passport.
• To send service emails about your account and signing in.
• To provide Travelled+ if you buy it.
• To answer your questions and support requests.
• To keep Travelled secure, prevent misuse and fix problems.
• To meet our legal obligations.

We don’t send marketing emails. Creating an account is not consent to marketing — if we ever offer marketing emails, we will ask you first and you’ll be able to unsubscribe at any time.

Data protection law requires a lawful basis for each way we use personal information. We rely on:

• Contract — to provide the account and features you asked for, including checking that you meet our minimum age, your travel record, service emails, purchases and support.
• Legitimate interests — to keep Travelled secure, prevent misuse, fix problems and keep a record that each account met our minimum age, where those interests aren’t outweighed by your rights.
• Legal obligation — to keep records the law requires, for example relating to purchases.
• Consent — only for genuinely optional things, and only if we introduce them. You could withdraw consent at any time.

Agreeing to our Terms of Service is not the same as consenting to data processing.

We don’t sell your personal information or share it with advertisers. We use a small number of service providers to run Travelled:

• Supabase — hosts our database, account sign-in and file storage on our behalf. Our primary Supabase project is hosted in London, United Kingdom (eu-west-2).
• RevenueCat — manages Travelled+ purchase and entitlement information on our behalf, so the app knows what you have unlocked. RevenueCat doesn’t take payments; Apple does.
• Mapbox — provides the maps in the app. To deliver map imagery, Mapbox receives the technical information needed to do so, such as your device’s IP address. Travelled doesn’t track your location, so it has no live location to share.
• Our website hosting provider — delivers this website.

Apple distributes the app through the App Store and processes App Store payments and refunds. Apple acts independently and handles that information under its own terms and privacy policy, not ours.

We may also disclose information if the law requires it, to protect people’s rights and safety, or as part of a change of ownership of Travelled — in which case this policy would continue to protect your information.

Travelled’s primary database and file storage are hosted in London, United Kingdom (eu-west-2).

Some of our service providers, and the providers they rely on, may still process information in other countries — for example Apple, RevenueCat and Mapbox. Where personal information is transferred outside the UK, we make sure appropriate protections are in place where UK data protection law requires them.

We keep information only for as long as we need it, and for no longer than these principles allow:

• While your account is active — we keep your account, profile, travel information and photos so we can provide Travelled, and so your travel record is there when you come back. This includes the record that you met our minimum age and when. Your date of birth is never kept after the age check.
• When you delete your account — your account, profile, travel information and uploaded photos are removed from Travelled’s active systems.
• Backups — copies may remain in routine backups until those backups expire or are replaced. Backups exist only to recover from faults; we don’t use them to keep using a deleted account’s information.
• Support and privacy emails — normally kept for up to 24 months after your enquiry or request is closed, unless we reasonably need them for longer because of an ongoing dispute, a legal obligation, or to establish, exercise or defend legal claims.
• Technical and security logs — kept only as long as reasonably needed for security, reliability, preventing misuse and fixing problems, subject to our providers’ retention periods.
• Purchase records — may be kept where needed for accounting and legal obligations, transaction history, fraud prevention and managing what you have unlocked. Apple and RevenueCat may also keep records under their own obligations and practices.

We may also keep limited information where the law requires it, or where it’s needed to resolve a dispute or prevent misuse.

We use reasonable technical and organisational safeguards to protect your information. Your data is only available to your own account, connections to our servers are encrypted, and access to our systems is restricted.

No online service can guarantee absolute security, so please use a strong, unique password and tell us straight away if you think your account has been accessed without your permission.

Depending on where you live and the circumstances, you have rights over your personal information, including the right to:

• Access — ask for a copy of the information we hold about you.
• Correction — have inaccurate information corrected. You can edit most details yourself in the app.
• Deletion — ask us to delete your information.
• Restriction and objection — ask us to limit or stop certain uses, including those based on legitimate interests.
• Portability — receive information you gave us in a commonly used, machine-readable format.
• Withdraw consent — where we rely on consent.

You can also download a copy of your Travelled account data yourself at any time: Open the You tab and select Export My Data. The export is a JSON file, a standard machine-readable format.

The in-app export doesn’t replace your rights — to use any of them, email privacy@thetravelled.app from the address linked to your account. We may need to confirm your identity. We’ll respond within one month, as data protection law requires; some rights have exceptions, and we’ll explain if one applies.

You can delete your Travelled account yourself at any time in the app: Open the You tab, scroll to Danger Zone and select Delete account. Deletion is permanent and can’t be undone. Deleting the app from your device doesn’t delete your account.

If you’ve already deleted the app, can’t sign in or can’t use the in-app option, email privacy@thetravelled.app from the address linked to your account and we’ll delete it for you. See how to delete your account for what deletion removes, and how long we keep information for backups and records we may need to keep.

Travelled is for people aged 16 and over. If you’re under 16, please don’t use Travelled or give us any personal information.

When you set up your account, the app asks for your date of birth and only lets you continue if you meet the minimum age. Your date of birth is used for that check and isn’t kept; we keep only a record that the requirement was met and when. This relies on the date of birth you enter — we don’t verify your identity or ask for ID.

People under 18 can use Travelled if they are 16 or over. Under UK data protection law they are still children, so we keep Travelled simple and protective for everyone: no live location tracking, no advertising, no selling of information and no marketing emails without consent. Under-18s who use Travelled can use the privacy rights in this policy themselves.

If you believe someone under 16 is using Travelled, contact us at privacy@thetravelled.app and we’ll delete their account and information.

This website doesn’t use cookies, analytics, advertising or other tracking technologies. It doesn’t need a cookie banner because it doesn’t set non-essential cookies.

The Travelled app doesn’t use advertising identifiers or third-party analytics. If we ever plan to introduce analytics, crash reporting or advertising, we will update this policy first and ask for your consent where the law requires it.

We’ll update this policy when Travelled or the law changes. The date at the top shows when it last changed, and if a change significantly affects how we use your information we’ll tell you in the app or by email before it takes effect.

Questions or concerns about your privacy: email privacy@thetravelled.app. We’d like the chance to help first.

If you’re in the UK and unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk. If you’re in the EEA, you can contact your local data protection authority.