Your trips stay on your iPhone.

1. Summary: what stays on your device

AllWays is a travel planning app for iPhone. The plans you build in the app live on your phone, not on our servers. Specifically, your trips, itineraries, expenses and travel documents are stored only on your device. We do not upload your trip content, and we have no servers that hold it.

AllWays does not offer cross-device sync, so your trip content is not copied between devices through us.

2. Information we collect

You can use much of AllWays without an account, in guest mode, which collects no personal account information. If you choose to create an account or buy a subscription, we collect the following.

Account information

When you sign in, we store the details needed to identify your account. Depending on how you sign in, this may include your email address (for email one-time code sign-in) and, with Sign in with Apple or Sign in with Google, the name, email address and avatar that provider shares with us, along with which provider you used. If you sign in with Apple, we also store an Apple refresh token so we can keep you signed in and, if you ask us to delete your account, revoke that grant on Apple's side.

Subscription information

If you subscribe to Travel+, Apple handles the purchase and billing. We store only a pseudonymous record of your entitlement, namely an entitlement identifier and the Apple original transaction identifier for the purchase, so we can confirm your Travel+ status. We never receive or store your card number or other payment details. Those stay with Apple.

Device integrity

To protect our service from abuse, the app uses Apple's App Attest. This involves storing device-specific App Attest keys. App Attest is used only to verify that requests come from a genuine, unmodified copy of the app. It is not used to track you or to identify you across apps.

Location

With your permission, the app reads your device's approximate location (only while you are using the app) to show your current city on the Overview screen and personalize local content such as weather. Sharing your location is optional, and you can revoke access at any time in iOS Settings. When a feature needs it, coordinates are sent to the weather and geocoding services described in section 5 only to answer that request; we do not keep a history of your location.

Technical information

When the app contacts our backend, your device's IP address is visible to our servers, as it is for any internet service. We may pass your IP address to a geolocation provider to estimate your city, so we can show relevant local content. This estimate is held briefly in memory and is not stored in our database.

Usage analytics

To understand how AllWays is used and where it can be better, the app records product analytics events with PostHog. This covers which screens you view, which features you use (for example creating a trip or adding a place), and subscription funnel events such as seeing the paywall, starting a trial or completing a purchase. Events carry counts and categories rather than your content. Alongside each event, the analytics SDK sends basic technical details about the app session, such as device model, iOS version, app version and language or region.

Analytics events are tied to your account identifier when you are signed in, and otherwise to a pseudonymous identifier generated on your device, the same one used to recognize a guest subscription. That identifier is not your advertising identifier and is not shared with other apps.

Your trip content is not sent to analytics. We do not upload your itineraries, notes, expense details, documents or photos. The exceptions are the destinations you search for and select, and the suggested destinations you tap during onboarding, which we record so we know which places people are planning for.

The app does not record your screen. There is no screen recording and no screenshot capture anywhere in AllWays, including during onboarding. Analytics tells us that a screen was viewed or a feature was used, never what it looked like.

Analytics data is sent only to PostHog's European cloud, where it is processed and stored in the EU. It is not used for advertising, is not shared with data brokers, and is not combined with data from other apps.

3. How we use this information

We use the limited information above only to:

• create and maintain your account and keep you signed in;
• confirm and apply your Travel+ subscription status;
• protect the service from abuse and fraud;
• localize content and show relevant local weather and destination information;
• understand how the app is used so we can fix problems and improve it;
• respond to your support requests.

We do not use your information to build advertising or marketing profiles.

4. What we do not do

We want to be clear about what AllWays does not do. AllWays contains no advertising, no ad SDKs, and no cross-app tracking. We do not use advertising identifiers, we do not follow you across other apps or websites, we do not sell or rent your personal information, and we do not share it with data brokers. Because of this, the app never asks for App Tracking Transparency permission, and its privacy manifest declares that it does not track you in the sense Apple defines.

The app does use a product analytics SDK to measure how features are used, as described in Usage analytics in section 2. That data stays with us and our analytics provider in the EU, and is never used for advertising or sold on.

5. Features that send data to power them

Some features need information from the internet to work. When you use them, the app (often through our backend) sends only the specific query needed for that feature, not your identity or your trip content. For example:

• Weather uses location coordinates and dates to fetch a forecast.
• Image search sends your search term to find trip cover photos.
• Places, geocoding and routes send place text or coordinates to look up locations and build routes.
• Destination and suggested places send a place name or coordinates to return relevant suggestions.
• Flight status sends a flight number to retrieve flight details.
• Shared link import sends a link you choose to share (for example an Instagram, TikTok or Google Maps link) so we can resolve the place it points to and add it to your trip.

These lookups carry only the parameters needed to answer them. They are not tied to advertising and are not used to profile you.

6. Third-party services and sub-processors

We rely on a small set of service providers to operate AllWays. They process information only as needed to provide their service to us:

• Apple: Sign in with Apple, App Store billing and subscriptions.
• Google: Sign in with Google.
• Supabase: authentication and database hosting for account and subscription records.
• Superwall: subscription management and the in-app purchase experience.
• PostHog (PostHog EU): product analytics events described in section 2. No screen recording. Data is processed and stored in the European Union.
• Cloudflare: content delivery and network protection.
• Content and utility providers: Open-Meteo (weather), Pixabay and Unsplash (images), Geoapify, OpenStreetMap and Nominatim, and Valhalla (maps, geocoding and routing), a flight-status provider used when you look up a flight, Wikipedia and Wikidata (place information), and geolocation providers used to estimate your city.

All Travel+ billing is handled by Apple. We do not process payments ourselves.

7. Where your data is processed

Our backend runs on servers in the European Union, and our account and subscription database is hosted on Supabase's managed Postgres. Product analytics is sent to PostHog's EU cloud and stays in the European Union. Traffic is delivered and protected through Cloudflare's global network. Some third-party providers listed above may process requests in other regions as part of delivering their service.

8. Data retention and deletion

We keep your account and subscription records for as long as you have an account, and only as long as needed to provide the service.

You can delete your account at any time from inside the app. Go to Settings, then Delete Account. This permanently deletes your account and the associated records on our servers. It revokes the Apple sign-in grant, deletes your user record in Supabase, and removes the related rows (your profile, stored tokens and subscription links). The app also wipes your local data from the device. Because your trips, itineraries, expenses and documents live on your device, removing the app also removes that content from your phone.

9. Children's privacy

AllWays is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies by local law. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We take reasonable steps to protect your information. Sensitive tokens are stored in the iOS Keychain on your device. Network traffic is encrypted in transit using TLS. App Attest helps ensure requests come from a genuine copy of the app. No method of storage or transmission is perfectly secure, but we work to protect the limited information we hold.

11. Your rights

Depending on where you live, you may have rights to access, correct or delete the personal information we hold about you, and to object to or restrict certain processing. You can delete your account and its server records directly in the app, as described above. For any other request, email us at [email protected] and we will respond.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Significant changes will be reflected here, so please check back periodically.

13. Contact

AllWays is published by despawn. If you have any questions about this Privacy Policy or how we handle your data, email us at [email protected].