Privacy Policy

1. Who we are

MapTogether is a group-travel planning app (itinerary, expense splitting, live map, photo diary) published by the MapTogether team. This policy covers both the app and this website. Contact:tomkejanufo@gmail.com or the support form.

2. Data we collect

Account data

You can sign up with Sign in with Apple, Google Sign-In, or email/password. Depending on the method, we receive your email address and, if you share it, your name. Account data is tied to a unique account ID used across the features below.

Trip content

• Itinerary items, stops, dates, and notes you or your trip's members add.
• Expenses, amounts, currencies, and receipt scans you add for splitting costs.
• Shared lists, polls, documents, and tasks attached to a trip.
• Diary/scrapbook entries, including any photos, drawings, or voice notes you add.

Trip content is visible to everyone you invite to that trip, and to no one else.

Photos

Photos you add to a trip's gallery or diary are uploaded to Cloudinary (our image hosting provider) and linked to the trip. They're visible to trip members only, unless you explicitly export or share a photo/reel outside the app.

Location — two separate, both opt-in features

• Live location sharing. Off by default. When you turn it on for a trip, your position updates roughly every 20 seconds while the app is open and is visible to that trip's members only — never public, never sold. You choose exact or approximate (~500m) precision, and can set it to auto-expire. Turning it off (or logging out) stops sharing immediately.
• GPS walk tracking. Off by default, started explicitly per walk. Records your route (and, if you grant background permission, continues briefly if you switch apps) so the walk's map and distance can be shown to your trip. The route is visible to that trip's members.
• We also request your location once, on demand, for specific actions you take — tagging a photo, adding a stop, or the emergency-info screen — without continuous tracking.

Health data (steps and walking distance)

If you turn on the optional activity leaderboard, MapTogether reads your step count and walking/running distance from Apple Health for the trip's date range — read-only, nothing is written back to Health. The resulting totals are visible to your trip's members as a leaderboard. This is off unless you explicitly enable it in your profile.

Contacts

If you use "add participant by contact," the app searches your device's contacts locally to help you find someone — contacts aren't uploaded in bulk. Only the specific contact you choose to add is used, to prefill their name.

Calendar

If you grant calendar access, the AI trip planner can read your device calendar's existing events (so it doesn't suggest plans that conflict with your schedule) and can add trip events or reminders to your device calendar when you ask it to. Separately, you can optionally connect a Google Calendar account (OAuth) for the same purpose — if you do, an access token is stored securely on our servers to keep that connection working.

Usage analytics

We use PostHog (hosted in the EU) to understand how the app is used — e.g. which features get opened, whether onboarding completes, crash-adjacent events. Once you're signed in, these events are associated with your account ID and, where available, your email/name. This is product analytics, not advertising — MapTogether shows no ads and doesn't use an advertising SDK.

Subscription/payment data

MapTogether Plus purchases are handled entirely by Apple's App Store and RevenueCat (our subscription management provider) — we never see or store your card details. RevenueCat receives your account ID and purchase status to keep entitlements in sync.

3. Who we share data with

The services below process data on our behalf, only for the purposes described above:

• Firebase (Google Cloud) — account auth and all trip/app data storage.
• Cloudinary — photo and image storage.
• PostHog (EU-hosted) — product usage analytics.
• RevenueCat — subscription/entitlement management.
• Apple and Google — sign-in, and (Apple) subscription billing.
• Google Calendar API — only if you explicitly connect your Google Calendar.

We don't sell your data, and we don't share it with anyone for their own marketing purposes.

4. Data retention and deletion

We keep your account and trip data for as long as your account is active. There is currently no self-service "delete account" button in the app — to request deletion of your account and associated data, email tomkejanufo@gmail.com or use thesupport form. We'll confirm and process the request manually. Note that data shared into a trip (e.g. an expense you added) may remain visible to other trip members as part of that trip's shared record unless removed individually, even after your account is deleted.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, contact us the same way as for deletion requests above.

6. Children

MapTogether isn't directed at children under 16, and we don't knowingly collect data from them.

7. Security

Data is stored with our infrastructure providers (Firebase/Google Cloud, Cloudinary) using their standard encryption in transit and at rest. No online service can be guaranteed 100% secure, but we don't do anything unusual with your data beyond what's described here.

8. This website's cookies

This marketing site does not use tracking cookies and has no analytics of its own. The only thing it stores locally is your light/dark theme preference (in your browser's local storage, not a cookie) — it never leaves your device. The app's own analytics (PostHog, described above) is separate from this website.

9. Changes to this policy

If we materially change what we collect or how we use it, we'll update this page and, for significant changes, notify you in the app.

10. Contact

Questions, data requests, or anything else: tomkejanufo@gmail.com or the support form.