Privacy Policy
Last updated: July 6, 2026
TrekMap is a personal travel bucket-list and journal app centered on an interactive world map. This policy explains what we collect, why, and the choices you have. We keep it plain and honest.
Information we collect
- Account details. When you sign up we store your email address, a username, and an optional display name and avatar. Sign-in (including Google sign-in) is handled by Supabase Auth; we never see or store your password.
- Your content. The places you save, journal notes, travel dates, cover images, uploads, reconstructed trips, and the locations (latitude/longitude, city, country, region) you add to your map.
- Posts you choose to share to TrekMap. When you share a social post or paste a link (for example from TikTok, Instagram, Pinterest, or YouTube) into TrekMap to add a place, we fetch and analyze that specific post you shared — its caption, thumbnail, and (where available) a few video frames — to detect the destination it's about, so we can pin it for you. We only ever process the content you deliberately hand to us this way. We do not crawl, harvest, or monitor your social accounts, and we don't collect anything you didn't choose to share.
- Location data. Coordinates for the places you choose to pin. We do not track your device's real-time location in the background.
- Notification preferences & push subscriptions. Your choices about price-drop alerts, and — if you enable browser push — a push endpoint for the devices you turned it on for.
- Basic technical & analytics data. Standard request logs (IP address, timestamps) used to operate the service, prevent abuse, and rate-limit expensive external lookups. With your consent (see Cookies below), we also record which pages are viewed to understand usage. No advertising trackers.
Images and their sources
Cover and destination images may come from openly-licensed libraries such as Wikimedia Commons and Openverse, from a shared post's own thumbnail, or from images you upload yourself. Openly-licensed images are used under their respective licenses (e.g. Creative Commons / public domain) with attribution where required. You are responsible for having the rights to anything you upload.
How we use it
- To provide the core features: your map, journal, saved places, trips, and flight/deal lookups you request.
- To detect the destination in a post you share, so we can add it as a place.
- To authenticate you and keep your account secure.
- To send price-drop alerts you've opted into (email and/or push).
- To protect the service from abuse and control costs (rate limiting), and — with consent — to understand usage.
We do not sell your data
We do not sell, rent, or trade your personal information, and we do not use it for advertising. Your travel data is yours.
Third-party services
We rely on a small set of providers strictly to run the app:
- Supabase — authentication and database/storage.
- Duffel and Travelpayouts / Aviasales — flight offers and prices.
- Image and place lookups (e.g. Wikimedia, Openverse, image search, Google Places/Maps) to fulfill your requests.
- Map tile providers (OpenStreetMap data via CARTO) to render the map.
- Resend — to send price-drop alert emails (only if you opt in).
These providers process data under their own privacy policies, and only as needed to deliver the features you use.
Cookies & similar storage
We use a small amount of essential browser storage to keep you signed in and remember your settings (like your color theme) — this can't be turned off because the app needs it. Separately, optional analytics storage records which pages are used; it only runs if you accept it in the cookie banner. You can decline and still use the whole app. We do not use advertising or cross-site tracking cookies.
Data retention
We keep your account and saved content until you delete them. Temporary and derived data has a limited lifetime: unsorted inbox drafts you never save are cleared after about 90 days, request/analytics logs after about 180 days, and cached fares/images within a month or two. Deleting your account removes your data promptly (see below).
Your rights: access & deletion
- Access / export (GDPR & CCPA). You can download everything we hold for you as a JSON file at any time from Settings → Account & privacy → Download my data.
- Delete your account. From Settings → Account & privacy → Delete my account, you can permanently erase your account and all associated data — saved places, trips, journal, drafts, watches, notification subscriptions, and uploads. This is immediate and irreversible.
- You can also edit or delete individual places, journal entries, and your profile at any time.
Children
TrekMap is not directed to children under 13, and we do not knowingly collect their data.
Changes
We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above.
Contact
Questions or requests? Email football2nick@gmail.com.