Privacy Policy

What data we collect

• Account information — your email address and name.
• Trip data — trips, accommodations, transportations, activities, expenses, and lists you create.
• Session information — IP address and user agent, stored for security and authentication purposes.

Why we collect it

• Account management — to authenticate you and manage your account.
• App functionality — to provide the trip planning features you use.
• Security — to protect your account and detect unauthorized access.

How data is stored

Your data is stored in a SQLite database on Fly.io infrastructure in Amsterdam, Netherlands (EU). Backups are encrypted and stored on Tigris (S3-compatible object storage).

Cookies

Apolodoro only uses strictly necessary cookies to operate the app. We do not set analytics, advertising, or tracking cookies, so no cookie consent banner is required.

• Session cookie (session_id) — keeps you signed in. Signed, HTTP-only, expires after 24 hours of inactivity or 30 days from sign-in, whichever comes first.

You can clear these cookies at any time from your browser settings; clearing them will sign you out.

Third-party services

We use the Unsplash API to provide cover images for trips. When you search for a cover image, the search query is sent to Unsplash. No personal data (email, name, or trip details) is shared with Unsplash.

Data retention

• Your account and trip data are kept until you delete your account.
• Sessions expire automatically after 24 hours of inactivity or 30 days from sign-in, whichever comes first.

Your rights

You have the right to:

• Access — request a copy of the data we hold about you.
• Deletion — delete your account and all associated data from your account settings.
• Portability — request your data in a portable format.

Contact

For any questions about your data or this privacy policy, contact us at privacy@apolodoro.app.