JourneyDoc is a travel itinerary app (the website at journeydoc.com and the iOS app). This policy says what information we collect, what we do with it, who else sees it, how long we keep it, and how you can see or delete it. It applies to both.

What we collect

• Account details — your email address and, if you sign in with Apple or Google, the name they share. Used to sign you in and to show who made a change on a shared trip.
• Your trips — trip names and dates, events (titles, times, places, notes, booking details you enter or paste), saved places, ideas, packing lists, comments, and the day labels. This is the product.
• Photos and documents you add to a trip (cover photos, event photos, e-tickets, confirmations). Stored privately; only you and people you share the trip with can open them.
• Bookings you send us — text you paste, screenshots you photograph, documents you file, and emails you forward to your trip's address. We extract the booking into the itinerary. Screenshots and the raw text are processed and not kept; forwarded emails are kept only as the events they became.
• Location — only if you turn on “show me on the map”, and only while the map is open. It is shown on your device and never sent to us or stored.
• Travel preferences you set (pace, food, budget level, mornings), used to shape suggestions.
• Diagnostics — when the app hits an error we record what went wrong, which screen, and your account id, so we can fix it. No screen recordings, no keystrokes.
• Notification tokens — if you turn on reminders, the device token needed to deliver them.

We do not collect contacts, health data, financial account numbers, or advertising identifiers, and we do not track you across other apps or websites.

The AI guide

The app asks your permission before the first time it does this, and you can withdraw it under Settings. When you ask the guide something, we send it the question and the relevant parts of your itinerary (event titles, times, places, notes, your saved places, your preferences, the weather forecast for the trip) to a third-party language model, currently DeepSeek, to generate the answer. We send what the answer needs and nothing else: never your email, your photos, or your documents' files. Booking text you paste or photograph is sent so it can be turned into an event. The provider processes that text to produce the answer under its own API terms; we send the minimum and keep none of it beyond the answer. Nothing the guide proposes changes your trip until you approve it.

We keep a record of what you did with each suggestion — applied, dismissed or undone — with the question that produced it, to shape later suggestions for you and to find the kinds of question the guide answers badly. You can see what it has concluded, and erase the lot, under Settings › What the guide has learned.

Services we use

Each one gets only what its job needs:

• Supabase — hosts the database, sign-in, and file storage for photos and documents.
• Vercel — hosts the website and the app's API.
• DeepSeek — the language model behind the guide (see above).
• Google Places and Routes — to confirm that a suggested place exists, its hours and rating, and how long it takes to get between places. Sent: place names and coordinates.
• Photon / OpenStreetMap and Apple Maps — to search places and draw the map.
• Open-Meteo — the forecast for your trip's dates, from the coordinates of your first pinned event.
• Unsplash — trip cover photos you choose.
• Apple and Google — sign-in, if you use them; Apple also delivers reminders and calendar entries you ask for.
• Resend — sends the emails we send you (invitations, digests); Cloudflare — receives booking emails you forward and stores encrypted backups.
• Tesseract (on our server) — reads text out of screenshots and images; the image is not kept.

We do not sell your information, and we do not share it with anyone for advertising.

Sharing a trip

If you share a trip, the people you share it with see everything in it — events, photos, documents, comments — and, on edits and comments, your name. A public link lets anyone with the link view the trip. You can revoke either at any time from the trip's Share screen.

How long we keep it

For as long as your account exists. Encrypted backups are kept for 30 days and then deleted. Sign-in sessions expire; the app keeps a local copy of your trips on your device so it works offline, cleared when you sign out.

Your choices

• Delete your account in the app under Settings, or on the website under Settings. It removes your trips, photos, documents, comments, and login within minutes; backups age out within 30 days.
• Export your data from the same place — a JSON file with everything you've entered.
• Permissions — camera, photos, location, calendar, microphone and speech recognition are each asked for only when you use the feature, and can be changed in iOS Settings at any time.
• Reminders and emails can be turned off in Settings.

Children

JourneyDoc is not directed at children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes in a way that matters, we'll say so in the app or by email before it takes effect. The date at the top is the last change.

Contact

Questions, access requests, or deletion requests: support@journeydoc.com.