This privacy policy describes what personal data TripDex collects, why, how it's protected, and what your rights are. It's meant to be read alongside our Location Policy, which goes into more detail on how we use GPS data specifically.
Data controller. Sven Geslin, trading as NordVoxe (SIREN 944 697 713), 61 rue de Lyon, 75012 Paris, France. Contact: contact@nordvoxe.com.
Data we collect. Account data (email, authentication credentials, via Supabase) is used to create and secure your account, and is kept until you delete your account. Profile data (username, bio, avatar photo) is used to display your profile and power social features, and is kept until account deletion or until you remove it. Scan photos and AI-generated identification/historical text are uploaded to storage only if you save the discovery — otherwise they're never stored (see "Scans you don't save," below). Location (GPS) coordinates captured at the moment of a scan are used to identify and place your discovery on the map, and are only attached to a discovery if you save it. Social content (published discoveries, likes, comments, follows/followers, blocks, reports) powers the feed and social features, and is kept until you delete the content or your account. Progress and invitation data (XP, level, streak, badges, challenge progress, your personal invite code, and — if you use one — who invited you) power gameplay and referral bonuses, and are kept until you delete your account. Subscription status (Premium/Premium Plus tier, renewal date, via RevenueCat/Apple) is used to manage your entitlements and kept until account deletion. Your device's push notification token and time zone are used to send you notifications at the right local time, based on the permission you grant, and kept until you disable notifications or delete your account. Usage analytics (in-app screen/action counters, tied to your account when signed in) help us understand and improve the app, and are kept for 90 days. Crash and error reports (stack traces, your account id, device info, via Sentry) help us diagnose and fix bugs; their retention is governed by Sentry's own plan settings, not directly controlled by us. Most of this processing relies on the performance of our contract with you; analytics, crash reports, and reports/blocks-related processing rely on our legitimate interest in running and securing the service.
Why we use it. This data powers TripDex's core features: identifying scanned places, generating and displaying historical facts, placing your discoveries on your personal world map, powering the feed and social features, personalizing what's shown to you, moderating content, and managing your subscription.
Scans you don't save. Every photo you scan is sent to our AI provider (Google, via Gemini) at the moment of the scan, for content moderation and place identification — this happens before you decide whether to save or discard the result. The GPS coordinates captured at that moment are also sent, both to Google and to OpenStreetMap (a public mapping database we query to help confirm nearby place names). If you don't save the discovery, the photo itself and the GPS coordinates are never stored in our own database or file storage. A short-lived technical cache of the AI's text result (not the photo, not your GPS) may persist for up to 24 hours, and isn't accessible to us through the app. Some technical logs unrelated to the photo itself may be kept for up to 90 days.
What becomes public. If you publish a discovery, the following becomes visible to other users of the app: your username and avatar, the place name, city, and country, the exact GPS coordinates of the place (shown on a closely-zoomed map, not an approximate area), your photo, the caption you wrote, and the AI-generated historical description. The number of likes and comments on your post is also shown publicly; the app does not display the list of people who liked a post, though this isn't a guarantee of absolute confidentiality of that information at a technical level. If your account is private, your published discoveries and follower/following lists are only visible to people you've accepted as followers; your username, avatar, bio, level, and privacy status remain visible to anyone regardless — including your avatar photo, which is stored in a way that makes it reachable by anyone with its direct link while your account is active, even if your account is private or has blocked them.
Storage and security. Your data is hosted with Supabase, in the EU (Ireland). Traffic between your device and our servers is encrypted in transit (TLS). Access to data is restricted through row-level access controls and limited to what's necessary to operate the service.
Sharing and third-party providers. We do not currently sell your personal data to third parties, or share it with advertising partners. We may do so in the future — for example, through in-app advertising or commercial partnerships — in which case we will update this policy in advance and, where required by applicable law, ask for your consent before doing so. In the meantime, we share data with the following providers, strictly to operate the service: Supabase (hosting, database, authentication, file storage — EU-hosted, Ireland); Google (Gemini AI — receives your scan photos and, when available, GPS coordinates, to identify places and moderate content; Google is a US-based company); OpenStreetMap (a public, community-run mapping database — receives GPS coordinates during a scan, to help confirm nearby place names; it does not receive your photo or any account information); Wikimedia / Wikipedia (public encyclopedia — receives the place name and nearby GPS coordinates when a place description is looked up; it does not receive your photo or any account information); Resend (transactional e-mail delivery — receives your e-mail address and the content of account and purchase e-mails, such as verification codes and purchase confirmations); RevenueCat (subscription and entitlement management — receives your account identifier and purchase events, never your payment details); Apple (processes all in-app payments directly; TripDex never receives your card details); a push notification provider (receives your device token); Sentry (crash and error reporting — receives your account identifier, device info, and technical error details, never your content or photos). Some of these providers are located outside the European Economic Area (notably Google, RevenueCat, and Sentry, all US-based). When we transfer personal data outside the EEA, we rely on the safeguards required under the GDPR to ensure it receives an equivalent level of protection. Google's own terms govern how long it retains the photos and location data it receives to identify a place; that retention period is set by Google, not by us.
Data retention. Your data is retained as long as your account is active. Technical logs are automatically deleted after 90 days, except a short-lived AI result cache (24 hours). Stories are automatically deleted approximately 24 hours after posting. Deletion may take a limited amount of time to propagate across our systems and backups. Certain data may be retained where required by law or where necessary for security, fraud prevention, dispute resolution, or technical record-keeping, subject to the retention periods described above.
Account deletion. You can delete your account directly from the app. We delete or anonymize the data we directly control, subject to technical backups, legal obligations, and legitimate security or fraud-prevention requirements. In practice, this covers your profile, your discoveries, your published posts, your comments, your likes, your follow relationships (in both directions), your saved posts, your notifications, your error logs, your trips, your badges, your profile photo (avatar) and the photos stored for your discoveries, the reports you filed, your block relationships, and the likes you left on other people's content — and finally your authentication record. This covers the data we hold ourselves. Records that our payment and crash-reporting providers (RevenueCat, for your purchase history, and Sentry, for error reports already sent before deletion) generated on their own systems follow those providers' own retention rules, not ours — deleting your TripDex account does not reach into their systems directly.
Your rights. Under the GDPR and applicable regulations, you have the right to access, correct, delete ("right to be forgotten"), restrict, object to certain processing of, and port your data, and to withdraw consent where processing is based on consent. You can exercise most of these directly from the app (edit your profile, delete content, delete your account) or by contacting us (see "Contact us"). If you're in the EU/EEA, you also have the right to lodge a complaint with your national data protection authority — in France, the CNIL (www.cnil.fr).
Automated decision-making. TripDex uses AI to identify scanned places, moderate photos, and generate descriptive text — this shapes what you see in the app, but we don't use AI to make any automated decision that produces a legal effect on you or similarly significantly affects you.
Cookies and tracking. The app currently uses only in-house, account-linked usage analytics to understand feature usage and improve the app, not a third-party ad-tracking SDK, and we do not currently use your data for targeted advertising. If we introduce advertising or ad-tracking partners in the future, we will update this policy in advance and, where required by applicable law (including Apple's App Tracking Transparency framework), ask for your consent before doing so.
Children's privacy. TripDex is not intended for children under 16. We rely on a self-declaration at sign-up (see our Terms of Use) and do not independently verify age. We do not knowingly collect data from users under this age; if we learn we have, we will delete the account.
Data breach. In the event of a personal data breach, we will assess and, where required by applicable law, notify the competent supervisory authority and affected users within the legal timeframes.
Changes. This policy may evolve; any material change will be flagged within the app. For any question or to exercise your rights, write to us at contact@nordvoxe.com.