Privacy Policy
Travel Notes is developed and operated by Lu Wei, an independent developer ("we", "us"). Our principle is simple: your travel data stays on your own phone. The app needs no account, shows no ads, uses no third-party analytics or tracking tools, and never sells or shares your personal information for advertising.
This policy explains what the app handles, why, who receives it, and how you stay in control. A short version is available in the app under Me → Settings → Privacy Notice.
1. Data kept on your phone
The destinations, dates, itineraries, expenses and split counts, visit records, notes, photos, travel routes and guide drafts you enter or choose are stored only on your phone. They are not uploaded to our server, and we keep no cloud copy.
- This data stays until you delete it in the app, clear local data, or uninstall the app.
- Uninstalling or switching phones loses this data. Use Me → Backup & restore to save a backup file wherever you choose.
2. Features that use the internet
The features below go through our server in Japan (api.isleo.top). The server does not store your full itinerary, photos or expenses, and does not write request content, credentials or raw IP addresses to its logs.
City search, attraction suggestions and weather
When you type a destination, the city or region keywords are sent to the server to look up a city directory. Once you pick a city, its name is used to look up well-known attraction names and the city's weather forecast. Weather is fetched by the server from the Norwegian Meteorological Institute (MET Norway) using the city's location — never your own location. These lookups are not sent to AI, and the search text is not stored.
AI itinerary and guide assistance (membership feature)
AI is off by default. Only when you are a member and tap to organize or adjust does the app send what that request needs:
- Itinerary planning and adjustment: destination, dates, number of days, preferences, the plan text you pasted, selected places and times, locked and visited marks, the reason for adjusting and the departure time.
- Guide writing: the guide title, text and topics you confirmed (the text may include expenses and notes you wrote). The content is shown to you before sending.
This content is passed through our server to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd., with servers in China) to generate suggestions. Raw expenses, photo files and other trips are not sent. You preview AI results first; your itinerary changes only after you confirm. Please don't include unrelated personal details such as ID or phone numbers in your plan text. DeepSeek handles the content under its own privacy policy.
Membership check and daily limit
To confirm your membership and limit daily usage, the server asks RevenueCat about your membership status using your anonymous member ID (see section 3; it contains no name or email) and stores today's usage count. The count is stored only against a hash of that ID and resets every day. To prevent abuse, the server briefly holds network addresses in memory and discards them after about a minute; they are not logged.
3. Membership and payments
- Payments are handled by Apple (App Store) or Google (Google Play). We never receive your card details, Apple ID or Google account information.
- Membership status is managed by RevenueCat (RevenueCat, Inc., USA). It creates an anonymous ID for your device and stores the subscription record linked to it (product, purchase and expiry dates, country or region, store transaction IDs) to activate, renew and restore your membership. RevenueCat handles this data under its own privacy policy.
- The app creates no account and never sends your itineraries, photos or expenses to RevenueCat.
4. Location, photos and other permissions
- Current location: requested only when you choose "current location", and stopped as soon as one position is obtained. You can always type a place instead.
- Travel route: off by default. When you turn it on for a trip, the app uses precise location in the background during that trip, recording a point roughly every two minutes or few hundred meters (Android shows an ongoing notification). The route stays on your phone, is never uploaded or sent to AI, can be paused, turned off or deleted at any time, and stops automatically when the trip ends. It is written to a file only when you export a GPX, guide image or backup.
- Photos: only the photos you pick are used, and they stay on your phone.
- Navigation: the place name is handed to the map app you choose; that app's own rules apply from there.
- Clipboard: written only when you copy something; never read automatically.
You can turn off any of these permissions in your phone's settings at any time.
5. Who receives data
| Recipient | Purpose | Location |
|---|---|---|
| Our server | City search, attractions, weather, relaying AI requests, membership check | Japan |
| DeepSeek | AI assistance you choose to use | China |
| RevenueCat | Subscription status | USA |
| Apple / Google | App download and subscription payments | Per their own policies |
| MET Norway | Weather forecasts (queried by city; no personal data) | Norway |
When you use AI and other online features, data is processed outside your country or region. We send only the minimum needed for that feature, and only when you use it. Apart from the recipients above, we do not share your data unless required by law.
6. Your rights and choices
- In Me → Settings you can reread the privacy notice, withdraw consent, clear local data, or delete individual trips and places. Withdrawing consent does not delete existing trips; deleting on the phone does not recall files you already exported.
- To cancel a subscription, use your phone's subscription settings. Uninstalling the app does not cancel it.
- You may contact us at any time to ask about, correct or delete data related to you (such as the subscription record linked to your anonymous member ID), or to object to how we handle it. Depending on where you live (for example under the EU GDPR or California privacy laws), you may have further rights, and you may complain to your local data protection authority.
- Because we don't store your itineraries or photos, please manage that data directly on your phone.
7. Security
All traffic between the app and our server is encrypted with HTTPS. The server keeps only the minimum data needed to operate, with restricted access. Data on your phone is protected by your phone's system — please use a screen lock.
8. Children
The app is not directed at children under 13 (or the age set by local law, such as in the EU), and we do not knowingly collect children's personal information. If you believe a child has provided us personal information, please contact us and we will delete it.
9. Changes
When this policy changes, we will update this page and the effective date. For significant changes, the app will ask you to review and confirm again.
10. Contact
Lu Wei
Email: 656775105@qq.com