Privacy Policy

1. The short version

TravelKit keeps your travel record on your device and does not send it anywhere. There are no analytics, no advertising, no trackers, no crash-reporting service and no location tracking in this app. We do not have a copy of your map, your passport, your trips, your bucketlist or your photos, and we could not look at them if we wanted to. The sections below set that out in full, including what your device holds, what the store knows about a subscription, and what happens when you export or delete. There is exactly one thing the app sends, and section 9 describes it in full: to know whether your PRO subscription is active, it asks a subscription-management service. That service is told nothing about your travels. If any of it changes, this policy changes first.

2. Who is responsible for your data

TravelKit is published by Base 55 Studio LLC, a Wyoming limited liability company, of 30 N Gould St, STE R, Sheridan, WY 82801, USA, and where data-protection law applies to us we are the controller of the personal data described here. You can reach us at admin@base55.studio. This policy covers the TravelKit mobile app for iPhone and Android and nothing else; it does not cover the App Store, Google Play, or any service you choose to send an export to, each of which has its own policy.

3. Where your data is kept

Everything you create in TravelKit is written to the app’s own private storage area on your device, which other apps cannot read. That includes your passport and its stamps, your scratched countries and regions, your trips and their destinations, dates, to-dos and notes, your bucketlist, your pinned cities and places, the photos you attach, the name and photo on your profile, and your app preferences. None of it is uploaded, and the app opens no network connection to us at all. There is exactly one connection it opens to anyone, to the service named in section 9, and it carries none of the list above — not one stamp, country, trip, note or photo. The practical effect is that we hold no copy: if you lose the device or delete the app, the data is gone and we cannot restore it.

4. What the app holds about you

In detail: the countries, regions and cities you mark as been-there, want-to-go or lived-in; your passport stamps with their type, place, date, ink colour, position and any text you wrote on them; the details you type onto your passport data page, which can include a name, date of birth, nationality, place of birth and country of residence, plus a photo if you add one; your trips with their names, destinations, dates, transport, to-dos, addresses and notes; your bucketlist items and any description, country tag, completion date and photo on them; your pins; your Region Settings; your chosen language, map theme and travel buddy; the name and photo you put on your profile; and whether onboarding is finished and a subscription or trial is active. All of it stays on the device.

5. What we do not collect

We do not collect your location. TravelKit has no location permission, does not use GPS, and nothing in it tracks or infers where you are — marking a country on the map is you telling the app something, not the app detecting it. We do not read your photo library, your contacts, your calendar or your files. We do not collect an advertising identifier, and we do not track you across other apps or websites, so we do not ask for permission to do so. There is no analytics SDK, no crash-reporting service, no advertising network and no social-media SDK in the app. The only third-party component that sends anything from the app is the subscription-management service in section 9; it is none of those things, it is not given your travel record, it does not build a profile of you and it does not follow you to other apps or websites. We do not build a profile of you and we have no server logs about you, because the app never contacts a server of ours. One thing we should name rather than imply: if you have turned on sharing diagnostics with developers in your iPhone or Android settings, Apple or Google may make crash and performance reports about the app available to us. Those come from the platform, not from anything we put in the app; they describe how the software failed rather than what you recorded in it; and you can turn them off in your device’s own privacy settings.

6. Photos, your library and the camera

When you add a photo, TravelKit opens your operating system’s own photo picker, which runs outside the app and returns only the single image you chose. That is deliberate: it means the app receives your photo without ever having access to your library, which is why TravelKit does not ask for photo-library permission. If you take a photo instead, the app asks for camera permission at that moment and explains why; if you decline, everything else keeps working. Photos you add are cropped on your device if the slot needs it, and are then stored with the rest of your data on the device. They are not uploaded, analysed, scanned or shared, and we never see them.

7. Friends and sharing

There is none in this version. TravelKit cannot connect one person’s app to another’s, there is no directory of users to be listed in, and no part of your travel record can be seen by anyone else through the app. If connected sharing ships later, we will publish an updated policy describing exactly what would be transmitted, to whom and for how long, and tell you in the app before it is switched on.

8. Exports and the share sheet

An export writes a file — a page image, a spread, a social-media image, a set of passport files or a trip PDF — to temporary storage on your device and passes it to your operating system’s share sheet. You choose the destination there, and the file goes directly from your device to whatever you picked. It does not pass through us and we receive nothing. From that point the file is subject to the privacy policy of wherever you sent it, and to whatever that service or recipient does with it. Please check what an export contains before you send it: passport pages reproduce the personal details you typed onto your data page.

9. Subscriptions and payment

TravelKit PRO is billed by Apple or Google, never by us. Your payment method, card number, billing address and store account details go to Apple or Google and are never sent to or seen by TravelKit — we have no payment processor and no access to your store account. Apple and Google process that data as controllers under their own privacy policies, which we suggest you read. Checking whether your subscription is active is handled for us by RevenueCat, Inc., a subscription-management service based in the United States, acting as our processor and only on our instructions. It receives: an app user identifier, which in this version is an anonymous identifier generated on your device and is not your name or your email address; the purchase receipt or token issued by Apple or Google, which proves what you bought and when it renews or expires; and basic technical details that come with any such request, such as the platform, the app version and the store country. In return the app learns only whether an entitlement is active, which plan it is, when the period ends and whether it will renew — and that answer is stored on your device like every other setting. What it is never given is the thing this policy is mostly about: your passport, your map, your trips, your bucketlist, your notes, your photographs and the details on your data page never leave the device and are never sent to RevenueCat or to anyone else. It never sees your card, your billing address or your store password either; those go to Apple or Google alone. RevenueCat processes this under its own data-processing terms and privacy policy, which we suggest you read, and we do not use it to advertise to you or to profile you.

10. Permissions the app asks for

TravelKit asks for one permission, and only when it is needed: the camera, at the moment you choose to take a photo rather than pick one. It does not request location, photo-library, contacts, calendar, microphone, Bluetooth, background-refresh or tracking permission, and it declares no advertising identifier. If you grant camera access and later change your mind, you can revoke it in your device settings and the app will continue to work with the photo picker alone.

11. Children

TravelKit is a general-audience app that is not directed at children under 13, and we do not knowingly collect personal information from them. Because the app keeps everything on the device and sends nothing but the anonymous subscription check described in section 9, we do not receive information from any user, including a child. If you are a parent or guardian and believe a child has entered personal details into TravelKit on a device you control, you can remove them yourself in Profile → Delete my data, or by deleting the app, and you are welcome to contact us with any question about it.

12. Security

Your data is held in the app’s private storage, which the operating system isolates from other apps, and it is protected by your device’s own security — screen lock, user account separation and, on a modern iPhone or Android device, full-device encryption. Because nothing about your travels is transmitted — the only connection the app makes is the subscription check in section 9, which carries none of it — there is no travel data in transit to intercept and no database of ours to breach. The corollary is that your device’s security is the security of your travel record: use a passcode or biometric lock, keep the operating system updated, and be careful about who has physical access. If a device backup service you use copies app data to a cloud, that copy is governed by that service’s policy, not ours.

13. Keeping and deleting your data

Because the data is on your device, it is kept for exactly as long as you keep it — we operate no retention schedule because we store nothing. You are in control of removal in two ways. Profile → Delete my data erases your profile name and photo, passport, map, region progress, trips, bucketlist and pins from the device after a confirmation step, and keeps your preferences — language, map theme, travel buddy and Region Settings. Deleting the app removes everything, preferences included. Both are permanent and immediate, and neither can be undone by us, so export anything you want to keep first. Deleting your data does not cancel a paid subscription — do that in your Apple or Google account settings.

14. Your privacy rights

Depending on where you live you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. In this version you can exercise all of them yourself without asking us, because the data is in your hands: you can read and edit every field in the app, export your record from Profile → Export, and delete everything from Profile → Delete my data. Where the UK or EU General Data Protection Regulation applies, our processing of the data you enter is carried out on your device to perform the service you asked for; camera access is based on the permission you give and can be withdrawn at any time in device settings. If you believe we have handled your data improperly, please contact us — and you also have the right to complain to your local supervisory authority, such as your national data protection authority in the EU or the Information Commissioner’s Office in the UK.

15. Selling and sharing

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California and other United States privacy laws. We have never done so, including in the preceding twelve months. There is nothing to opt out of, because there is no sale and no share to opt out of. We also do not disclose your information to data brokers, advertisers or analytics providers. The service named in section 9 acts as our processor on our written instructions and may use what it receives only to tell us whether your subscription is active; under those laws that is neither a sale nor a share, and there is still nothing about your travels in it.

16. International transfers

The only personal data that leaves your device at all is the limited subscription data listed in section 9, which is transferred to RevenueCat, Inc. in the United States. Nothing else — not your map, your passport, your trips, your bucketlist, your notes or your photographs — is transferred anywhere; the safeguard for that transfer is the standard contractual clauses in our data-processing agreement with them. If we later introduce accounts and sync, this section will name the countries your data would be stored in and the safeguards used for transfers out of the United Kingdom or European Economic Area, and we will tell you in the app before any of it begins.

17. When this changes

TravelKit is being actively developed, and features that would change this policy — accounts, synchronisation between devices, and connected friend sharing — are planned. Our commitment is that this policy is updated before such a feature is switched on, not after, and that we will tell you in the app when a change affects what happens to your information. The date at the top of this screen shows when it was last revised.

18. Contact and complaints

For any privacy question, to exercise a right described above, or to raise a concern, email admin@base55.studio, and we will reply. This policy is published in English, and the English text is the authoritative version; translations, if we provide any, are for convenience only.

TravelKit is published by Base 55 Studio LLC. Questions: admin@base55.studio