Legal

Privacy Policy

Last updated: May 4, 2026

What this covers

This Privacy Policy describes how Journiz ("we," "us") collects, uses, and shares information when you use the Journiz mobile app, web app, and related services (the "Service").

Information you provide

  • Account: name, email, and password. Passwords are stored hashed by our authentication provider — we never see your plaintext password.
  • Trip content: trips, days, segments (places, hotels, activities, hikes), waypoints, notes, ratings, packing items, expenses, and comments you create.
  • Profile photo: an optional avatar image you upload.
  • Segment photos: photos you attach to a place, activity, or hotel inside a trip.
  • Companion invitations: email addresses you enter to invite others to your trips.

Information collected automatically

  • Location data. While you're planning, we use your approximate location to position the map. During an active hike recording, precise GPS coordinates are recorded continuously — including in the background — and saved as part of that hike. You can stop recording at any time. Journiz does not track your location outside of these uses.
  • Motion and barometric data. While recording a hike, we read the device's motion sensors and barometric pressure to compute elevation gain.
  • Audio. If you use a voice-note feature inside a hike, audio is recorded only when you explicitly start recording.
  • Device and app diagnostics. Limited crash and error logs via the operating system's standard diagnostics reporting.

Information from third parties

When you search for or add a place, activity, or trail to a trip, your query is sent to one of the search or mapping providers we integrate with (for example, Tavily, Serper, Brave Search, OpenStreetMap, OpenHikingMap). The results returned are stored as part of your trip.

How we use your information

  • To deliver the Service: render maps, save trips, sync between web and mobile, deliver Live Activities and reminders.
  • To enable collaboration: a companion you invite can see the shared trip's data, your name, and your avatar.
  • To operate and improve Journiz: aggregate, anonymized usage helps us identify bugs and prioritize features.
  • To send service-related communications such as password reset emails or important changes to the Service.

How we share information

  • With companions you invite. By design, anyone you add to a trip can see that trip's data, your name, and your avatar.
  • With service providers we use to operate Journiz: Supabase (database, authentication, uploaded media), Vercel (web hosting), Apple Push Notification service (Live Activity updates), search providers (Tavily, Serper, Brave Search) for the queries you initiate, and map tile providers (OpenStreetMap, OpenHikingMap).
  • For legal reasons. If required by law, court order, or to protect rights and safety.

We do not sell your personal information. Journiz does not show ads.

Storage and security

  • Trip data and uploaded media are stored on Supabase (Postgres + Object Storage).
  • Row-level security restricts each row to its owner and the companions explicitly invited.
  • Password reset uses standard email-based recovery.
  • Despite reasonable safeguards, no online service is 100% secure.

Your choices

  • Edit or delete your trips, segments, comments, and photos at any time inside the app.
  • Remove a companion from a trip to revoke their access.
  • Delete your account by emailing privacy@journiz.app. We will delete your trips, photos, and account data within 30 days of a verified request.

Data subjects in the EEA, UK, and similar jurisdictions

You have the right to access, correct, delete, port, restrict the processing of, or object to the processing of your personal data. Contact us at privacy@journiz.app to exercise these rights. You also have the right to lodge a complaint with your local data protection authority.

International transfers

Journiz is operated from [YOUR_JURISDICTION] and processes data on infrastructure that may be located outside your country of residence. Where applicable, transfers of personal data are made under standard contractual safeguards.

Children

Journiz is not directed to children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal data from children. If you believe we have, please contact us at privacy@journiz.app and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will note material changes by updating the "Last updated" date and, where appropriate, by notifying you in the app or by email.

Contact

Tsiki Naftaly

privacy@journiz.app