1. Information we collect

We only collect what we need to run the app.

Information you provide us directly:

• Your email address. Required for our passwordless magic-link system: when you enter your email, we email you a one-time link and 6-digit code so you can sign in. We store your email so we know it's you when you come back.

• Your name. You enter this to personalise the home screen greeting and to label your trip. You can change it any time in your profile.

• Your trip planning data. Everything you create in the app: trips, dates, places of interest, day-by-day plans, transit choices, notes, your to-do list, your saved items. This is yours.

• Custom destinations and places. If you add a place we don't have in the app, we store what you type. It's visible only to you.

Technical information we collect:

• Booking notification settings. If you enable booking reminders, iOS records your notification permission and the app stores the reminder schedule with the relevant booking action. Booking reminders are scheduled locally on your device. We do not register your device for remote push notifications.

• Purchase and access status. If you buy a Monthly or Quarterly subscription, or the one-off Lifetime purchase, our payments provider (RevenueCat) records which product you bought and whether the corresponding access entitlement is active. For a subscription this also includes its renewal or expiry state. We use this to unlock paid features for your account.

• Google Maps SDK telemetry. The Google Maps SDK sends Google technical information needed to serve maps and may collect an anonymous device identifier, map interactions, and crash or performance diagnostics for service functionality and analytics. We do not send your Supabase account ID, email, name, or trip records to Google Maps. Google declares that the SDK does not use this data for tracking.

  
  

2. How we use information

We use the information above only for the following purposes:

• To operate the app — letting you sign in, save your plans, build your itinerary

• To send you the authentication emails you need — sign-in links and six-digit codes

• To schedule booking reminders locally on your device when you enable notifications

• To personalise content — the home screen greeting and recommendations

• To manage your paid access — checking your account has an active subscription or Lifetime entitlement

• To respond to lawful requests where we are legally required to

We do not sell your personal data. We do not use it for advertising. We do not share it with marketing partners. The app does not use a first-party product-analytics, session-replay, or standalone crash-reporting service. The embedded Google Maps SDK does send Google the limited service telemetry described above.

3. Sharing of your information
We will not rent or sell your information to third parties. We use a small number of service providers to run the app on our behalf. Each has access to only what they need:

• Supabase Provides passwordless authentication and stores your account, trips and everything you build in the app.

• Resend Delivers Supabase's sign-in link and six-digit code emails to your inbox.

• Sanity Hosts public editorial content such as descriptions of destinations and places. We do not attach your Supabase account or trip records to those content requests.

• Google Maps (Google). Provides in-app maps and location search. When you search for a location, your search text and an approximate trip-area bias, where available, are sent through our authenticated Supabase service to Google Places. We save a Google Place ID only after you select a result; the app retrieves its map position when needed rather than retaining Google's coordinates indefinitely. If you place a pin yourself, we save the coordinates you selected. If you grant location permission, the app can show your current position on the map; we do not save that current position in your account. The Google Maps SDK also processes the limited technical telemetry described above. You can choose to open Google Maps for a place or directions outside the app. Google's handling of data is described in the [Google Privacy Policy](https://policies.google.com/privacy).

• RevenueCat (United States). Manages your paid-access entitlement — records which product you bought and whether it's active. Receives an app-specific account ID from us, not your email or name.

• Apple (Distributes the app, processes subscription and one-off Lifetime payments, and provides the iOS notification permission and display system. Booking reminders are scheduled locally rather than delivered through a remote push-notification service. Your card and Apple ID details stay with Apple; we never see them.

  
  

We may be required to disclose your information without your prior consent where the law requires it — for example, to comply with a legal process, or to prevent fraud or serious harm.

4. How we store your information
Where it lives. Your account and trip data is stored with Supabase, currently in Stockholm, Sweden (eu-north-1).

We take reasonable steps to protect your data:

How it's protected. We take reasonable steps to protect your data:

• All data in transit is encrypted (HTTPS/TLS)

• All data at rest in Supabase is encrypted

• Row Level Security ensures you can only ever access your own data

• Sign-in tokens are stored in your phone's secure keychain

• Regular customer sign-in uses one-time links and codes. We never receive a readable password.

  
  

How long we keep it. We keep your account and trip data for as long as your account is active. If you delete your account inside the app (Profile → Delete account), we delete your Supabase account and its associated app data. Records held independently by Apple, RevenueCat and our authentication-email providers follow their own retention requirements.

5. Children's policy
ichi nichi ippo does not knowingly collect or solicit any information from anyone under the age of 13 (or under 16 in the UK and EU), and the app and its content are not directed at children in those age groups. If we learn that we have collected personal information from a child without parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child, please contact us.

6. Payments
All subscription and one-off Lifetime payments are processed by Apple through the App Store. Apple handles the transaction and your payment details — card numbers, billing address, Apple ID — never reach us. Our access provider, RevenueCat, receives an app-specific account ID, the purchased product, and entitlement status, but not your email or name. You can find Apple's privacy policy at apple.com/legal/privacy.

7. Other websites & services
The app and our website may link to third-party websites and services — for example, an official website or Google Maps listing for a place you're researching. Our Privacy Policy does not apply to those third-party websites or services, and we are not responsible for their practices. Your browsing and interaction on any third-party website is subject to that third party's own rules and policies.

8. Your data protection rights under UK and EU GDPR
You have the right to:

• Access the data we hold about you

• Correct anything that's wrong

• Delete your account and all associated data (Profile → Delete account, or by emailing us)

• Export your data in a portable format

• Object to or restrict how we use your data

• Withdraw consent for anything you've opted into

• Complain to the Information Commissioner's Office (ICO) at ico.org.uk, or your local data protection authority if you're in the EU

To exercise any of these rights, email us at daisy@ichi-nichi-ippo.com. We'll respond within 30 days.

9. Contact
If you have any questions about this Privacy Policy or the app, email us at daisy@ichi-nichi-ippo.com.

10. Changes to our privacy policy
We may modify or update this Privacy Policy from time to time. If we make changes that meaningfully affect how we handle your data, we'll let you know — either by email or by an in-app notice before the change takes effect.