Privacy Policy

Contents

1. Who we are
2. Information we collect
3. What we don't collect
4. How we use information
5. Who can see your information
6. Sharing and service providers
7. Sponsored content
8. Where data is stored
9. How long we keep data
10. Security
11. Your rights and choices
12. Deleting your account
13. Children
14. Changes to this policy
15. Contact us

1. Who we are

This Privacy Policy explains how the BeenTo iOS app and this website (together, the "Service") handle your personal information. "BeenTo", "we", "us" and "our" refer to the developer and operator of BeenTo, who is responsible for your information.

BeenTo is a travel map: you mark countries as Visited, Want to Go or Lived. Signing in and the friends "challenge" are optional.

2. Information we collect

If you use BeenTo without signing in

Your map (the countries you mark and their status) and your chosen passport are stored only on your device. We do not receive them. When the app connects to our servers (for example, to check for a sponsored message), our servers receive the basic technical information described under "Server logs" below.

Account information (only if you sign in)

You can sign in with Apple or with Google. Depending on the method, we receive:

• Sign in with Apple: a unique, app-specific user identifier from Apple and, only if you choose to share them, your name and email address. If you choose "Hide My Email", we receive an Apple relay address instead of your real email.
• Google Sign-In: your Google account identifier, email address and, if provided by Google, your name. We do not receive your Google password.

Profile information

• The username and display name you choose.
• An optional profile photo that you upload.

Your travel map

• The countries you mark and their status (Visited, Want to Go or Lived), and when you changed them.
• The passport country you pick, which tints the app and selects the sample visa information shown to you.

Challenge (friends) features — optional

• Crew relationships: friend requests you send, receive, accept or decline, and the list of friends in your challenge (up to 15).
• Next travel plans that you choose to share with your crew.
• Proof photos: photos you choose to upload for a country, and the country they belong to. You pick each photo using the iOS photo picker; BeenTo does not get access to the rest of your photo library.

Reports, blocks and support

• If you report or block another user, we record who reported or blocked whom, the reason you give and the content concerned, so we can review it and enforce our Terms of Use.
• If you contact us, we receive your email address and the content of your message.

Server logs

Like most online services, our servers automatically record basic technical information when the app or website talks to them: IP address, date and time, the request made, response status, app version, and device or browser type. We use logs only to operate, secure and debug the Service.

3. What we don't collect

• We do not collect your precise or background location. Countries are marked by you, not detected.
• We do not access your contacts. Friends are invited by username.
• We do not use the advertising identifier (IDFA) and we do not track you across apps or websites owned by other companies.
• We do not include third-party advertising, analytics or tracking SDKs in the app.

4. How we use information

We do not use your information for profiling, automated decisions with legal effects, or targeted advertising.

5. Who can see your information

• Other BeenTo users can see your username, display name and profile photo when they search for your username, or when you send them a friend request.
• Your map, country counts, next travel plans and proof photos are visible only to friends whose request you have accepted (or who accepted yours). Nobody can see them before that.
• You can remove a friend or block a user at any time. After that, they no longer see your map, plans or photos.
• If you don't sign in, nobody but you sees your map.

6. Sharing and service providers

We do not sell your personal information, and we do not share it with third parties for advertising or cross-context behavioral advertising. We do not work with data brokers.

We share information only in these cases:

• Hosting providers that process data on our behalf under contract: Railway (our application servers, database and file storage, United States region) and Vercel (this static website).
• Sign-in providers. When you choose Sign in with Apple or Google, you interact with Apple or Google directly, and their own privacy policies apply to that interaction.
• Other users, as described in section 5, according to your choices.
• Legal reasons: if required by law, or when we believe in good faith it is necessary to protect the safety, rights or property of our users, the public or BeenTo.
• Business transfers: if BeenTo is involved in a merger, acquisition or sale of assets, your information may be transferred, and this policy will continue to protect it. We will notify you of any change in ownership.

7. Sponsored content

BeenTo may occasionally show a popup clearly labeled "Sponsored". These messages come from BeenTo's own campaigns and are served from our own servers. No third-party ad network or ad SDK is involved, the messages are not personalized, and showing them does not involve sharing any information about you. If you tap a sponsored message, it may open an external website, whose own privacy policy applies.

8. Where data is stored

Account, profile, map, challenge and photo data are stored on servers hosted by Railway in the United States. This website is hosted on Vercel. Data without an account remains on your device.

If you live outside the United States, your information will be transferred to and processed in the United States. Where required (for example, for users in the EEA, UK or Switzerland), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

9. How long we keep data

• Account, profile, map, crew and photo data: for as long as your account exists. You can edit or remove individual items (for example, a proof photo or a friend) at any time.
• When you delete your account: your data is removed from the Service immediately and permanently erased from our active systems. Residual copies in encrypted backups are overwritten within 30 days.
• Server logs: kept for up to 30 days, unless needed longer to investigate a specific security incident.
• Reports: kept as long as needed to review them and enforce our Terms (normally no longer than 12 months). If you delete your account, reports you filed are kept only without your identity.
• Support emails: kept as long as needed to resolve your request, and no longer than 24 months.

We may keep limited information longer only if the law requires it.

10. Security

We protect your information with encryption in transit (HTTPS/TLS), access controls that limit who can reach production data, hashed credentials, and hosting providers with strong security practices. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.

11. Your rights and choices

Wherever you live, you can:

• Access your information and get a copy of it.
• Correct it — most fields can be edited directly in the app.
• Delete it — delete individual items, or your whole account (see section 12).
• Withdraw from optional features — leave the challenge, remove friends or photos, or sign out and use BeenTo on your device only.

Depending on where you live (for example, the EU/EEA, UK, Switzerland, California and other US states, Brazil, Saudi Arabia, the UAE or other GCC countries), you may also have the right to data portability, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.

To make a request, email us at . We will respond within 30 days and may ask you to confirm that the account is yours before acting on the request.

12. Deleting your account

You can delete your account at any time from the app:

1. Open BeenTo and go to the Passport tab.
2. Tap Settings.
3. Tap Delete account and confirm.

This permanently deletes your account and all associated data — your profile, username, profile photo, travel map, crew relationships, plans and proof photos. Your friends will no longer see you. This cannot be undone.

If you no longer have the app, see how to request deletion by email. If you used Sign in with Apple, you can also stop using your Apple ID with BeenTo in your iPhone's Settings → [your name] → Sign-In & Security → Sign in with Apple.

13. Children

BeenTo is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under the minimum age required in your country, such as 16 in some EU countries). If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as BeenTo changes. We will post the new version on this page and update the "Last updated" date. If changes are significant, we will also notify you in the app before they take effect.

15. Contact us

Questions or requests about privacy: