Effective Date: July 19, 2025 | Last Updated: July 19, 2025
Introduction
Itinr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our travel itinerary management app ("App") on iOS devices.
How We Use Your Information
We use your information to:
- Provide and maintain our itinerary management service
- Create, store, and sync your travel itineraries across devices
- Authenticate your account and ensure security
- Provide location-based features and recommendations
- Improve app functionality and user experience
- Send important service notifications (with your consent for marketing communications)
- Provide customer support
Data Storage and Processing
- Cloud Storage: Your data is securely stored using Supabase cloud infrastructure
- Local Storage: Some data is cached locally on your device for offline access
- Data Centers: Your data may be processed in data centers located in the United States and other countries
- Encryption: All data is encrypted in transit and at rest using industry-standard security measures
Information Sharing
We do not sell your personal information. We may share information only in these limited circumstances:
Service Providers
- Supabase: For backend services, authentication, and data storage
- Google Services: For Google Sign-In authentication
- Apple Services: For Apple Sign In authentication
- Analytics Providers: For app performance and usage analytics (anonymized data)
Legal Requirements
We may disclose information if required by law, court order, or to protect our rights and safety.
Business Transfers
If our company is acquired or merged, your information may be transferred as part of that transaction.
Your Privacy Rights
iOS-Specific Rights
- Location Services: You can disable location access in iOS Settings > Privacy & Security > Location Services > Itinr
- Sign In with Apple: You can manage your Apple ID authentication in iOS Settings > Sign-In & Security
- App Permissions: You can review and modify app permissions in iOS Settings > Itinr
General Rights
Access
Request a copy of your personal data
Correction
Update or correct your information
Deletion
Request deletion of your account and data
Data Portability
Export your itinerary data
Opt-Out
Unsubscribe from marketing communications
To exercise these rights, contact us at privacy@itinr.com
Data Retention
- Account Data: Retained while your account is active
- Itinerary Data: Retained until you delete specific itineraries or your account
- Analytics Data: Anonymized usage data may be retained for up to 2 years
- Deleted Data: Permanently deleted within 30 days of deletion request (except where required by law)
Children's Privacy
Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.
Security Measures
We protect your information using:
- End-to-end encryption for data transmission
- Secure cloud storage with access controls
- Regular security audits and updates
- Industry-standard authentication protocols
- Secure coding practices and vulnerability testing
Location Data Specifics
When you grant location permission:
- "While Using App" Permission: We access location only when the app is active
- Purpose: To provide nearby place suggestions and location-based itinerary features
- Storage: Location data is not permanently stored; only used for immediate feature functionality
- Control: You can revoke location access anytime in iOS Settings
Cookies and Tracking
Our App uses minimal tracking technologies:
- Authentication Tokens: To keep you signed in securely
- App Preferences: To remember your settings
- Error Logging: To diagnose and fix technical issues
We do not use advertising cookies or cross-app tracking.
International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including the United States, where our service providers operate. We ensure appropriate safeguards are in place for international transfers.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (note: we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
European Privacy Rights (GDPR)
If you are an EU resident, we process your data based on:
- Contract: To provide our service
- Legitimate Interest: To improve and secure our service
- Consent: For optional features like marketing communications
Changes to This Policy
We may update this Privacy Policy periodically. We will:
- Notify you of material changes via email or in-app notification
- Post the updated policy with a new effective date
- Maintain the previous version for 30 days for your reference
Apple App Store Compliance
This Privacy Policy complies with Apple's App Store Review Guidelines and addresses:
- Data collection transparency
- User consent and control
- Third-party service disclosure
- Children's privacy protection
- Security and data protection measures