Privacy and data retention

• Account: email and, if you set one, a display name.
• Collections: title, description, saved places, sections and, if you created the map with AI, the text you wrote to generate it.
• Optional preferences: mobility, interests, usual company — set by you, never inferred without your confirmation.
• Optional post-moment feedback: rating, tags and a note, only if you choose to leave it.
• Technical and aggregate usage metrics (for example performance, route family and errors), without prompts, emails or exact location.

Your exact browser location is used only for the search that requested it (to find places near you) and is never stored as a column in any table; on your own device it's cached for up to 24 hours so the permission prompt doesn't repeat, and that lives only in your browser.

• An AI map's original prompt lives in a separate table, visible only to you (not even someone viewing your public collection sees it); it's deleted if you delete that collection.
• Collections, places, sections, saved events and feedback are kept while your account exists, or until you delete them.
• We keep an internal search log (what was searched, when, with what result) to measure cost and abuse. If you delete your account, that log is anonymized (unlinked from your identity) rather than deleted, so cost and fraud auditing can continue.
• Passport (your personal moment history) doesn't exist in the app yet. When it ships, it will follow the same rule: private by default, exportable and deletable by you.

From your Profile you can export a copy of your data as a file, or delete your account entirely — both are always one click away, no need to request them another way.

For questions about your data or help with the product, use our private contact form.