Last updated: August 20, 2026
This policy covers the Mapogo iOS app and the mapogo.app website ("we", "us"). It explains what information the app and site handle, why, and the choices and rights you have, including rights under United States state privacy laws and Canadian privacy law (PIPEDA and provincial equivalents such as Quebec's Law 25).
Everything you create in Mapogo (trips, journal entries, photos, itineraries, your profile name and bio, and your visited countries, regions, and cities) is stored locally on your device using Apple's on-device database. Mapogo has no backend server, so we never receive, store, or have access to your content.
Mapogo does not currently sync your content between your devices, and it does not upload it to iCloud. Your content is scoped to the Apple account you signed in with, so signing in with a different Apple ID opens a separate, empty journal rather than merging the two. The only copy that leaves the device is the one contained in your own iPhone backup, if you use iCloud Backup or a computer backup; that backup is governed by your Apple account and is not visible to us. Deleting the app removes its local data, so a device backup is what protects your journal.
Photos are only accessed when you pick them, stay on the device where you added them, and travel only within your own device backup.
If you add a Mapogo home screen widget, the app writes a small snapshot for it (your visited country codes, your badge tally, and the map color you picked) into a shared container on the same device, because a widget cannot read the app's database directly. That snapshot never leaves your device either.
Mapogo uses Sign in with Apple to set up your account. When you sign in, Apple gives the app a stable identifier and, only the first time and only if you choose to share them, your name and email address. Mapogo stores these locally on your device (the identifier in the device Keychain) purely to keep you signed in and to show your name in the app. This information is not sent to any server and is not shared with anyone. If you choose "Hide My Email," Mapogo only ever sees Apple's private relay address. You can revoke Mapogo's access at any time in Settings, your name, Sign in with Apple on your device, and logging out of Mapogo removes this identity from the device.
The map is powered by the Mapbox Maps SDK, which streams map tiles over the internet. As part of providing the map, Mapbox collects anonymized usage and diagnostic data, such as a device or session identifier, coarse location, map-interaction events, and performance data, which Mapbox uses to improve its maps and services. This is collected by Mapbox, not by us, is not linked to your identity, and is not used to track you across other apps or websites. You can turn off this telemetry at any time in the app under Profile, Privacy & data ("Map usage analytics") or from the map's attribution menu. For details, see the Mapbox Privacy Policy.
A country guide can show current conditions for a destination city. To do that the app asks Apple's WeatherKit service for the weather at that city's coordinates, which come from data bundled with the app. The request tells Apple only the coordinates of the destination you are reading about. It does not include your location, your identity, or anything you have written, and Mapogo never asks for or receives your device location. Weather data is provided by Apple Weather; see Apple's weather data sources and the Apple Privacy Policy. If the request fails or you are offline, the card simply does not appear; the rest of the guide is bundled with the app and works with no connection.
Country guides include links you can tap to leave the app, such as an official government entry page, a visa application service, a translation app, or a health authority's page. Nothing is sent unless you tap. The visa link is the only one that carries anything about you: it opens the service with the destination country and the passport nationality you chose in the app, so the page can answer the question you are asking it. Once you leave, those sites and apps are governed by their own privacy policies, not this one.
The optional Mapogo Pro subscription is sold through Apple's App Store and billed entirely by Apple. We never receive your payment details, billing address, or Apple account information. Your subscription status is checked on your device against the App Store. You can manage or cancel the subscription in your Apple account settings, and refunds are handled by Apple under its media services terms.
If you invite a friend, the app builds a share link that includes your display name, your invite code, and your visited-country list so your friend's app can show a travel comparison. That link is sent only when you choose to share it, through the apps you pick (such as Messages or Mail), and it goes directly from you to your friend. We never see or store it.
Trip reminders are local notifications scheduled entirely on your device. Nothing about them leaves your device, and you can disable them per trip or in iOS Settings.
mapogo.app is a static site hosted on Cloudflare Pages. It sets no cookies and uses no advertising trackers. To see how many people visit, the site uses Cloudflare Web Analytics, which is cookieless: it counts a page view along with the referring site, country, and browser type, and estimates visitor numbers without storing a persistent identifier, fingerprinting your device, or following you to other sites. We see totals and trends, never individuals. Like any web host, Cloudflare processes technical request data (such as IP addresses) to deliver and secure the site; see the Cloudflare Privacy Policy. Because the site builds no profile of you and does not track you across sites, it does not respond to browser "Do Not Track" signals; there is nothing to turn off. Blocking the analytics script with a content blocker does not affect how the site works.
The website has one form: an optional launch waitlist. If you choose to submit your email address, we store it, together with the approximate country and browser identification (user-agent) that accompany the request, solely to notify you when Mapogo launches and, occasionally, to share launch-related updates. We rely on your consent, given when you submit the form. This data is written to a private database in our own Cloudflare account; we use no third-party email or form service, and we do not sell or share it. We keep it until the launch campaign is complete or you ask us to remove it, whichever comes first. To be removed at any time, email [email protected]. Joining the waitlist is entirely optional and is not required to use the app.
Because your data lives on your device, you already hold the strongest version of the access, correction, deletion, and portability rights granted by US state privacy laws and by Canadian law: you can view, edit, export, or delete any of your content in the app at any time, and deleting the app removes its local data. Any copy of it inside your own device backup is managed through your Apple account. You can opt out of Mapbox telemetry in the app and revoke Sign in with Apple in iOS Settings.
If you contact us by email, we hold your message only as long as needed to respond. You may ask us to access, correct, or delete anything we hold about you (in practice, only such correspondence) by writing to [email protected]. We will respond within the time required by applicable law and will not discriminate against you for exercising any privacy right. Canadian users may also direct concerns to the Office of the Privacy Commissioner of Canada or their provincial privacy regulator.
We hold none of your travel content: it stays on your device until you delete it. On-device data is protected by iOS device encryption and your sign-in identifier is kept in the Keychain. No system is perfectly secure, but the design of Mapogo means a breach of our systems cannot expose your travel data, because we do not have it. The only personal data we store is any email address you submit to the launch waitlist, which is kept as described in section 11 and protected by Cloudflare's security controls.
Apple, Mapbox, and Cloudflare may process the limited technical data described above on servers in the United States or other countries, under their own privacy policies and safeguards.
Mapogo is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information through the app or site, contact us and we will help remove it.
If this policy changes, the updated version will be posted on this page with a new "last updated" date. Material changes will also be noted in the app's release notes.
Questions, requests, or complaints about privacy in Mapogo can be sent to [email protected]. This address reaches the person responsible for Mapogo's privacy practices and personal information handling.
