Privacy Policy

1. Information We Collect

2. How We Use Information

• create and manage your account
• provide JourneyStamp features, including journeys, memories, stamps, collections, profile, sharing, notifications, and account settings
• store and display photos and travel records you choose to upload
• authenticate users and protect account security
• process subscriptions, restore purchases, and manage entitlements
• with your authorization, send product-related push notifications, such as when a Journey is ready, when a Memory needs a location, or when we have a support or operations message for you
• with your separate consent, analyze selected photos and related Memory information to generate travel-content candidates and structured results
• provide customer support and respond to requests
• detect abuse, troubleshoot errors, maintain service reliability, and improve the app
• comply with legal obligations and enforce our terms

3. Legal Bases Where Required

Where applicable, we process personal information based on one or more legal bases, including your consent, performance of our services, legitimate interests in operating and securing JourneyStamp, compliance with legal obligations, and protection of rights and safety.

4. How We Share Information

We do not sell your personal information.

We work with trusted third-party service providers that help us operate JourneyStamp, including: • AI service providers for photo analysis. • Authentication providers for account sign-in. • Subscription management providers. • Secure cloud storage providers. • Email delivery providers. • Push notification delivery providers. • Crash reporting and performance monitoring providers. These providers only process information necessary to perform services on our behalf and are contractually required to protect your information.

We may also disclose information if required by law, to protect the rights and safety of users or JourneyStamp, or in connection with a business transfer such as a merger, acquisition, or asset sale.

5. Third-Party Services

JourneyStamp works with trusted third-party service providers that help us operate the Service, including AI service providers for photo analysis, authentication providers for account sign-in, subscription management providers, secure cloud storage providers, email delivery providers, push notification delivery providers such as Apple Push Notification service and Expo, and crash reporting and performance monitoring providers. These providers only process information necessary to perform services on our behalf and are contractually required to protect your information. Your use of those services may also be governed by their own privacy policies.

6. Data Retention

We retain account information and user content for as long as your account remains active or as needed to provide the service. Photo metadata, including embedded location information when available, is retained as part of the related Memory for as long as needed to provide the service. Technical logs and security records may be retained for a limited period for reliability, fraud prevention, debugging, and legal compliance.

Push device tokens are retained while notifications remain authorized for that device. If you turn off notification permission, unregister the related device token, or delete your account, we stop using that token to send push notifications and remove the related registration from our active systems through our deletion process.

When you delete a Memory, the associated photos and photo metadata are removed from active systems through our deletion process. When you delete your account, we delete your account records, authentication records, journeys, memories, uploaded user photos, photo metadata, stamps associated with your account, notification-related registrations, and related app data from our active systems, subject to limited backup, security, fraud prevention, billing, audit, and legal retention requirements.

AI-generated results, analysis status, and analysis records associated with a Memory are handled as related app data. After you delete the Memory or your account, we remove the related content from active systems through our deletion process. Third-party providers may retain limited technical or security records where permitted or required by their terms or law.

7. Account Deletion

You can permanently delete your JourneyStamp account directly within the app by navigating to Profile Settings → Delete Account. Once confirmed, your account and associated user content will be removed from JourneyStamp's active systems. Certain limited records may be retained where required by law or for payment processing, security, fraud prevention, dispute resolution, or backup obligations.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict the use of your personal information. You may also withdraw consent where processing is based on consent.

You can manage or turn off JourneyStamp notification permission in your device system settings. After you disable notifications, we cannot send push notifications to that device.

You can update certain profile information in the app. To request access, correction, deletion, or other privacy assistance, contact us at support@journeystamp.app.

9. Photos and Permissions

JourneyStamp requests photo library access only when you choose to upload photos or save or share images. JourneyStamp may request camera access only when you choose to take a photo in the app. Uploaded photos may contain metadata such as capture time, image size, file type, camera information, and GPS coordinates. With your separate consent, available photo metadata and location signals, including GPS when present, may be securely shared with Google Gemini solely for AI-powered location recognition, landmark detection, stamp unlocking, and journey generation. JourneyStamp does not request iOS device location permission and does not collect or track your real-time device location. AI analysis requires separate consent. You may decline consent or contact us to request that future AI analysis stop.

10. Notifications and Push Permissions

JourneyStamp requests notification permission only with your authorization, so we can send product-related push notifications such as when a Journey is ready, when a Memory needs a location, or when we have a support or operations message for you. If you authorize notifications, we may collect and store a push device token and deliver notifications through channels such as Apple Push Notification service and Expo. You can turn notifications off at any time in your device system settings. After you disable permission, we stop sending push notifications to that device and unregister the related push token.

11. Children's Privacy

JourneyStamp is not directed to children under 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will take appropriate action.

12. Security

We use reasonable technical and organizational measures to protect personal information, including encrypted transport, access controls, and secure authentication practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. International Processing

Your information may be processed in countries or regions other than where you live. When required, we use appropriate safeguards for international transfers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and provide notice where required.

15. Contact Us

If you have questions or requests about this Privacy Policy, contact us at support@journeystamp.app.