Privacy Policy

Last updated: 12 February 2026

1. About Us

Itinarii Inc. (“Itinarii”, “we”, “us”) operates the Itinarii mobile application.

Contact: support@itinarii.com

⸻

2. Information We Collect

Account Information

When you create an account, we collect:
	•	Email address
	•	Authentication credentials (email/password, Apple Sign In, or Google Sign In)
	•	Optional profile photo

We do not require or collect full names unless provided through third-party sign-in providers.

Device & Diagnostic Information

We may collect:
	•	Device identifiers
	•	App version
	•	Crash reports
	•	Basic usage analytics

This information helps us improve performance and maintain security.

Location Information

With your permission, we collect precise location only while you are actively using the app.

Location data is used to power map features and is not stored as historical location tracking.

Payments

Payments are processed by:
	•	Apple (for in-app purchases)
	•	Stripe (for web purchases)
	•	RevenueCat (subscription management)

We do not receive or store full payment card details.

User Content

We store:
	•	Saved itineraries
	•	Account preferences
	•	Offline PDF itinerary files

Journal features are deprecated and not actively used.

We do not use AI systems to process user content.

⸻

3. How We Use Information

We use information to:
	•	Provide and operate the app
	•	Authenticate users
	•	Manage subscriptions
	•	Improve reliability and performance
	•	Respond to support requests

We do not sell personal information.

We do not use advertising SDKs.
We do not track users across other apps or services.

⸻

4. Legal Basis for Processing (EEA Users)

For users in the European Economic Area, we process personal data based on:
	•	Performance of a contract (providing app functionality)
	•	Legitimate interests (security, analytics, fraud prevention)
	•	Consent (location access, push notifications)

⸻

5. Data Storage & International Transfers

We use Google Firebase infrastructure to store and process data.

Our Cloud Firestore database is hosted in a United States multi-region environment (nam5).

As a result, your information may be transferred to and processed in the United States and other countries where our service providers operate.

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

⸻

6. Data Retention

We retain personal data only while your account remains active.

When you delete your account, your personal data is permanently deleted without unnecessary delay, except where retention is required by law.

⸻

7. Your Rights

Depending on your jurisdiction, you may have the right to:
	•	Access your personal data
	•	Correct inaccurate data
	•	Request deletion
	•	Restrict processing
	•	Object to processing
	•	Request data portability

To exercise these rights, contact legal@itinarii.com.

Canadian users also have rights under PIPEDA to request access to and correction of their personal information.

⸻

8. Account Deletion

You may delete your account directly within the app.
Deletion removes your personal data from our systems without undue delay.

⸻

9. Children’s Privacy

The app is not directed to children under 13.

We do not knowingly collect personal information from children.
If we become aware that a child has provided personal data, we will delete it.

⸻

10. Security

We use industry-standard technical and organizational safeguards, including encrypted connections and secure cloud infrastructure.

No method of transmission over the internet is completely secure, but we take reasonable measures to protect your information.

⸻

11. Third-Party Service Providers

We use the following service providers:
	•	Google Firebase (authentication, database, analytics, crash reporting)
	•	Apple (in-app purchases and authentication)
	•	RevenueCat (subscription management)
	•	Stripe (web payment processing)
	•	Mapbox (geolocation enrichment services)

Each provider processes data in accordance with its own privacy policies.

⸻

12. Changes to This Policy

We may update this policy periodically.
If material changes are made, we will update the “Last updated” date.