1. Information we collect

We only collect what we need to run the app.

Information you provide us directly:

• Your email address. Required for our passwordless magic-link system: when you enter your email, we email you a one-time link and 6-digit code so you can sign in. We store your email so we know it's you when you come back.

• Your name. You enter this to personalise the home screen greeting and to label your trip. You can change it any time in your profile.

• Your trip planning data. Everything you create in the app: trips, dates, places of interest, day-by-day plans, transit choices, notes, your to-do list, your saved items. This is yours.

• Custom destinations and places. If you add a place we don't have in the app, we store what you type. It's visible only to you.

Technical information we collect:

• Notification preferences. If you allow push notifications, the device's operating system records that choice. You can switch this off any time in your phone settings.

• Diagnostic information. When something goes wrong, we may collect basic technical details about the app crash (device model, OS version, app version, the error). We do not link this to your identity in a way we can reverse.

• Information about places you add to your trip. When you add a real-world place, we look it up through Google Maps to fetch its address, opening hours, phone number, and other public details.

• Subscription status. If you buy a subscription, our payments provider (RevenueCat) records that you have an active subscription, which product you bought, and when it renews or expires. We use this to unlock paid features for your account

  
  

2. How we use information

We use the information above only for the following purposes:

• To operate the app — letting you sign in, save your plans, build your itinerary

• To send you the emails you need — sign-in links and optional booking reminders

• To personalise content — the home screen greeting and recommendations

• To manage your subscription — checking your account has an active entitlement to unlock paid features

• To fix problems and improve the app — using crash reports and aggregated usage patterns

• To respond to lawful requests where we are legally required to

We do not sell your personal data. We do not use it for advertising. We do not share it with marketing partners.

3. Sharing of your information
We will not rent or sell your information to third parties. We use a small number of service providers to run the app on our behalf. Each has access to only what they need:

• Supabase (United States, EU). Stores your account, your trips, and everything you build in the app. GDPR-compliant.

• Resend (United States). Delivers the magic-link and code emails to your inbox.

• Sanity (Norway / United States). Hosts editorial content (descriptions of destinations and places). Receives no data about you.

• Google Maps Platform (Google, United States). Powers the map view and place lookups.

• RevenueCat (United States). Manages your subscription entitlement — records which product you bought and whether it's active. Receives an anonymous user ID from us, not your email or name.

• Apple (United States, Ireland). Distributes the app, processes subscription payments, and delivers push notifications. Your card and Apple ID details stay with Apple; we never see them.

We may be required to disclose your information without your prior consent where the law requires it — for example, to comply with a legal process, or to prevent fraud or serious harm.

4. How we store your information
Where it lives. Your account and trip data is stored with Supabase, currently in London, United Kingdom (eu-west-2). Some service providers may transfer data to the United States. Where this happens we rely on appropriate safeguards such as Standard Contractual Clauses.

How it's protected. We take reasonable steps to protect your data:

• All data in transit is encrypted (HTTPS/TLS)

• All data at rest in Supabase is encrypted

• Row Level Security ensures you can only ever access your own data

• Sign-in tokens are stored in your phone's secure keychain

• We don't store passwords (the magic-link system removes that risk entirely)

How long we keep it. We keep your account and trip data for as long as your account is active. If you delete your account inside the app (Profile → Delete account), we permanently delete your account record, trips, stays, plans, actions, and preferences within minutes. Email delivery logs are kept for up to 30 days. Anonymous crash reports for up to 90 days.

5. Children's policy
ichi nichi ippo does not knowingly collect or solicit any information from anyone under the age of 13 (or under 16 in the UK and EU), and the app and its content are not directed at children in those age groups. If we learn that we have collected personal information from a child without parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child, please contact us.

6. Payments
All subscription payments are processed by Apple through the App Store. Apple handles the transaction and your payment details — card numbers, billing address, Apple ID — never reach us. Our subscription provider, RevenueCat, receives only an anonymous user ID and your entitlement status. You can find Apple's privacy policy at apple.com/legal/privacy.

7. Other websites & services
The app and our website may link to third-party websites and services — for example, an official website or Google Maps listing for a place you're researching. Our Privacy Policy does not apply to those third-party websites or services, and we are not responsible for their practices. Your browsing and interaction on any third-party website is subject to that third party's own rules and policies.

8. Your data protection rights under UK and EU GDPR
You have the right to:

• Access the data we hold about you

• Correct anything that's wrong

• Delete your account and all associated data (Profile → Delete account, or by emailing us)

• Export your data in a portable format

• Object to or restrict how we use your data

• Withdraw consent for anything you've opted into

• Complain to the Information Commissioner's Office (ICO) at ico.org.uk, or your local data protection authority if you're in the EU

To exercise any of these rights, email us at daisy@ichi-nichi-ippo.com. We'll respond within 30 days.

9. Contact
If you have any questions about this Privacy Policy or the app, email us at daisy@ichi-nichi-ippo.com.

10. Changes to our privacy policy
We may modify or update this Privacy Policy from time to time. If we make changes that meaningfully affect how we handle your data, we'll let you know — either by email or by an in-app notice before the change takes effect.