Privacy policy
JacoposTravels is a private travel service, available on the web, as a Mac app and as an iPhone app, used by invitation. This policy explains, in plain language, what personal data it handles, why, who can see it, how long it is kept and what you can do about it.
The short version: we use your data only to run the service for you and the people you choose to travel with. There are no ads, no analytics or tracking tools, and we never sell your data. Your precise location is recorded only if you turn tracking on, and shown only to the people you choose.
1. Who is responsible for your data
The data controller is Infoservice s.r.l., Via Casilina 3/T, 00182 Roma, Italy, VAT no. 04563051004 (“we”, “us”).
For any privacy question or request, write to jacopostravels@gmail.com. You can also use Settings › About › Help & feedback in the app.
2. What we collect and why
We only process what you or the people you travel with put into the service, plus the technical data needed to run it.
| Data | What it includes | Why |
|---|---|---|
| Account | Email address, name, sign-in method (password or passkey, or Sign in with Apple / Google if you use them), username and display name, profile photo if you add one, your app settings. | To give you an account, sign you in, show your name to the people you travel with and let friends find you (only if you allow it). |
| Your profile (“Me”) | Optional details you choose to enter: full name, date of birth, nationality, passport and ID document numbers and expiry dates, contact details, emergency contact, loyalty programs, seat and meal preferences, card labels with the last 4 digits only (never full card numbers), payment handles (e.g. PayPal, Revolut, Venmo) for settling shared expenses. | To keep your travel details in one place and, only if a trip owner allows it, share selected parts with people on that trip (for example for bookings). |
| Trips and plans | Trips, itinerary items (flights, stays, activities, restaurants, transport, notes), booking references, prices, addresses and places, polls, votes, ideas (including links you paste), checklists and RSVPs. | To plan and organise trips with the people you invite. |
| Documents and files | Files you upload to a trip or to your personal documents (for example tickets, booking confirmations, passport scans). | To store them for you and the people you share them with. |
| Photos, videos and journal | Journal entries, photos and videos you add to a trip’s journal or shared album, captions, likes, and the date a photo was taken. | To build the trip’s journal and shared album. |
| Expenses | Trip expenses, budgets, shared expense groups (who paid, who owes whom, settlements, comments, receipts), names of guests you add to a group. | To track spending and split costs. We only record payments; we never move money. |
| Location | Precise location history and live location from your iPhone, only if you turn tracking on; your position when you choose to send it or add it to a journal entry; location of a photo only if you choose to keep it. See section 3. | To keep a log of your travels and show your position to the people you choose. |
| Friends and sharing | Friend requests, friends, blocks, reports, location shares (with whom and until when), invitations, share links and calendar feeds you create. | To connect you with people and control what they see. |
| Notifications | Push notification tokens of your devices and your notification preferences; Live Activity tokens for flights. | To send you the notifications you turned on (for example flight changes, check-in and departure reminders, passports about to expire, replies to your feedback). |
| Help & feedback | Messages and attachments you send, and diagnostics only if you tick “Include diagnostics” (app version, operating system, screen size, last screen, last few error messages with emails, tokens, coordinates and links removed). | To answer you and fix problems. |
| Technical logs | Server logs of requests and errors (for example time, endpoint, your account identifier, error details), and on the Mac a log file stored only on your computer. | To keep the service secure and working, and investigate abuse. |
Some of this data may be about other people (for example a travel companion’s name on a booking). Please only add it if you are allowed to.
On your iPhone, Face ID (or your passcode) can protect your profile. Face ID is handled entirely by Apple on your device; we never receive any biometric data.
3. Location
- Off until you turn it on. The iPhone app records your location only after you switch on Settings › Tracking and allow location access in iOS. You can turn it off at any time there, or in the iOS Settings app.
- Precise and in the background. When tracking is on, the app records your exact GPS position (with accuracy, altitude, speed, heading and battery level) every few minutes, also when the app is closed, so your travel log and live position stay complete. By default continuous GPS runs only around your trips (from 12 hours before to 12 hours after) and while you share your location; the rest of the time a position is recorded only when you move about 250 m. You can change this in the same settings.
- Who sees it. Recording your location does not share it. Others see your position only if you share it: with a friend or a trip for a time you pick (for a few hours, until the end of the day, for the trip, or until you stop, which still ends after 30 days), or, if you own a trip, with the trip members you give live location access to. You can pause sharing at any time; nobody sees positions recorded while paused.
- On the web and Mac. Your position is used only when you ask for it, for example to add where you are to a journal entry, to send your current position once, or to show how far things are. Your browser or macOS asks for permission first.
- Deleting your location history. Like a browser history, you can delete it for any time range in Settings › Tracking › Delete location history (iPhone, web or Mac): the last hour, 24 hours, 7 days, 4 weeks, all time, or a custom range. The deleted points are removed from your account at once and no longer appear in trails, trip maps, day recaps, Year in review or anything shown to people you share your location with; points still waiting to upload on that iPhone are removed too. This cannot be undone. Database backups keep deleted data for up to 35 days, only to recover from a failure.
- Photos. The app removes location data from photos before uploading them. A photo keeps its location only if you turn on “Keep location” for it, and you can remove it later.
- Search and maps. When you search for a place, the text you type and your approximate position (about 1 km) may be sent to the place search provider (see section 6).
4. Legal bases (GDPR art. 6)
- Contract: to provide the service you asked for: your account, trips, files, sharing, expenses, notifications, flight status.
- Consent: background location tracking and location sharing, keeping location on photos, optional profile details such as passport data, push notifications, diagnostics in feedback. You can withdraw consent at any time in the app; this does not affect what happened before.
- Legitimate interests: keeping the service secure, preventing abuse and spam, handling reports of offensive content, and fixing bugs. You can object (see section 10).
- Legal obligations: where the law requires us to keep or disclose data.
5. Who can see your data
- People on a trip. A trip owner decides, person by person, what each member sees: role (viewer or editor), which kinds of items, dates, flight numbers, booking references, prices, notes, addresses, journal, files, live location and recent trail, and which parts of the owner’s profile (identity, documents, contacts, loyalty, preferences). By default booking references, prices, notes, files not marked as shared and all profile details are hidden. Your card notes and free-text notes are never shared.
- What you add to someone else’s trip (journal entries, album photos, ideas, votes, expenses) is visible to that trip’s members according to the trip’s settings.
- Friends see your username, display name and profile photo. People can find you by username only if you turn on “Let people find me by username”. Being friends shares no location by itself.
- Expense groups: members (and guests the group invites with a link) see the group’s expenses and balances, and your payment handles if you added them.
- Links you create: a trip owner can create password-protected share links and private calendar feeds for people without an account; they show only what the owner chose and can be revoked at any time.
- Claude. If you choose to connect your own Claude account (by Anthropic) to JacoposTravels, or use “Recap with Claude”, Claude reads the trip data you ask about under your own agreement with Anthropic. We never send your data to an AI service on our own.
- Us. Our administrator can access data when needed to run the service, answer your requests, review reports or comply with the law.
- Authorities, only when the law requires it.
6. Service providers
We use these providers to run the service. Where they act on our behalf they are bound by data processing terms.
| Provider | What it receives | Where |
|---|---|---|
| Amazon Web Services | All service data: hosting, database, file storage, server logs. | United States (Ohio region) |
| Auth0 by Okta | Email, name, sign-in credentials and sign-in events (IP address, device); sends account emails such as password setup and reset. | United States |
| Apple | Push notification tokens and the text of notifications and flight Live Activities; on iPhone, map views and place searches (Apple Maps); Sign in with Apple if you use it. | United States and worldwide |
| Place search text and an approximate position (about 1 km), sent from our servers without your identity; Sign in with Google if you use it. | United States and worldwide | |
| AeroDataBox (via RapidAPI or API.market) | Flight numbers and dates, to get live flight status. No personal details. | United States (RapidAPI) or the provider’s own servers |
| OpenRouteService (HeiGIT) | Coordinates of itinerary places, to estimate travel times. No personal details. | Germany |
| Open-Meteo | Coordinates of a place, to get the weather. No personal details. | — |
| ExchangeRate-API, Frankfurter | Currency codes only, for exchange rates. | — |
| OpenFreeMap | On the web and Mac, your browser loads map images directly from it (your IP address and the map area you view). | — |
| Esri | On the web and Mac, place searches on the map are sent directly from your browser (search text and IP address). | United States |
| Websites you link | When you paste a link into an idea, our server fetches that page once to show a preview. | Where the website is |
We do not use any analytics, advertising, attribution or crash-reporting service.
7. International transfers
Our servers are in the United States, and some providers above are outside the European Economic Area. When personal data is transferred outside the EEA, we rely on the safeguards the GDPR provides: an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for providers certified under it) or the Standard Contractual Clauses approved by the European Commission, included in the providers’ data processing terms. You can ask us for more information about these safeguards.
8. How long we keep data
| Data | Kept |
|---|---|
| Account, profile, trips, files, photos, journal, expenses, location history | Until you delete them or delete your account. |
| Location shares | Each share ends at the time you chose (at most 30 days for “until I stop”); the record is removed automatically about a week later. |
| Invitations | Until accepted or expired, then removed automatically within 30 days. |
| Help & feedback messages | 24 months. |
| Entry checklist progress | 2 years from the last change. |
| Flight status history, Live Activity tokens | Up to 30 days. |
| Push notification tokens | Until you sign out, turn notifications off or Apple reports the token as no longer valid. |
| Server logs | 30 days (90 days for the Claude connector). |
| Backups | Database backups are kept for up to 35 days; earlier versions of deleted or replaced files for up to 90 days. After that, deleted data is gone from them too. |
| Copies on your devices | The apps keep an offline copy of your trips on your device; it is erased when you sign out. |
We may keep data longer only if the law requires it or to defend legal claims.
9. Deleting your account
You can delete your account at any time in Settings › Account › Delete account, on iPhone, on the web or in the Mac app. You can also ask us by email at jacopostravels@gmail.com.
- Before you confirm, the app shows you what will be removed.
- We delete your account and sign-in, your profile and travel documents, your location history and location shares, your files, photos, videos and journal entries, the posts and photos you added to other people’s trips, your friends, devices and settings, and your trips and everything in them if you own trips.
- Expenses in shared expense groups stay, so that the other members’ balances remain correct, but your name is replaced with “Deleted user”.
- Deletion from the live service happens straight away. Remaining copies in backups disappear on their own within 35 days (database) and 90 days (file versions); server logs expire within 30 to 90 days.
- Deletion usually finishes at once and always within 10 minutes; the app confirms it. If you can’t sign in, write to us and we will delete your account.
10. Your rights
Under the GDPR you have the right to:
- access your data and get a copy (you can download your trips, items, file details and profile as a file in Settings › Account › Download my data on the web or in the Mac app);
- rectify inaccurate data (most of it you can edit directly in the app);
- erasure (see section 9);
- restrict processing;
- data portability, in a structured, machine-readable format;
- object to processing based on legitimate interests;
- withdraw consent at any time, for example by turning tracking or sharing off.
Write to jacopostravels@gmail.com. We answer within one month. We may ask you to confirm your identity first.
You also have the right to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali, or the authority of the EU country where you live or work.
11. Security
- All connections use encryption in transit (HTTPS/TLS), and the website enforces it (HSTS).
- Data is encrypted at rest: the database with AWS-managed encryption keys, files with server-side encryption in private storage that is never publicly readable. Files are opened through links that expire after a few minutes.
- Passwords are handled by Auth0; we never see them.
- Access to every piece of data is checked on the server against the trip owner’s sharing choices.
- On iPhone, sign-in tokens are kept in the iOS Keychain, and your profile can be protected with Face ID.
No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
12. No ads, no tracking, no selling
JacoposTravels shows no advertising, contains no analytics or tracking tools, does not track you across other apps or websites and does not sell or rent your personal data to anyone. We do not use your data for automated decision-making or profiling with legal or similarly significant effects.
13. Children
JacoposTravels is not directed at children under 16, and accounts are created only by invitation. If you believe a child under 16 has given us personal data without a parent’s consent, write to us and we will delete it.
14. Changes to this policy
We may update this policy when the service or the law changes. We will change the date at the top and, for important changes, tell you in the app before they take effect.