Privacy information for internal testers

Updated 30 September 2026.

Your on-device passport

Your name, profile details, memories, chosen photos and videos, check-ins and visibility choices are saved in the app's private storage. New memories and check-ins start private. This data is excluded from Android cloud backup in this version. Uninstalling the app can erase it.

Cloud accounts and sharing

Creating an account sends your email address, display name and password to the TravelSolo HTTPS service. Passwords are stored as salted hashes. Signing in does not automatically upload your journal. When you choose to upload a memory, its content, media and selected audience are stored on the service. Private cloud memories are available to your authenticated account; public memories may be viewed by eligible travelers and connections. Public does not mean search-engine publishing or a public community feed.

Location

Location is requested when you choose to check in or enable nearby discovery. Check-ins retain an approximate area. Discovery is opt-in and time-limited. Public discovery results show a place label, not precise live coordinates. Manually naming a place is not proof of a visit. Adventure points are not a safety or identity rating.

Conversations

Cloud text messages are encrypted on the sending device. The service stores encrypted message envelopes, participant identifiers and timestamps. Encryption keys belong to a device; this testing version does not provide multi-device key recovery or forward secrecy. Compare safety codes with your connection. Local demonstration conversations are not sent to another person.

Photo checks

The Android profile editor checks face presence locally. It does not verify identity or liveness. A separate server photo-check endpoint can send a selected photo to OpenAI when configured and invoked; no OpenAI secret is included in the app. A face check must not be treated as a guarantee that someone is safe to meet.

Other services

Choosing a Google Maps link opens Google Maps or your browser and sends your chosen place query to Google. Sample traveler images may load from Unsplash. These services have their own privacy terms. The app includes no advertising or analytics SDK added by this release.

Controls and deletion

You can change individual memories between public and private, turn off discovery, block a connection, delete a memory, and delete your cloud account from Account & connections. A cloud privacy change requires a connection to the service; it is not confirmed if the service cannot be reached. Deleting the cloud account removes its active records and uploaded media. It does not erase another person's screenshots, downloaded copies, or your separate on-device passport.

Operational hosting logs may contain IP addresses and request metadata. Message contents and raw traveler data are not intentionally written to application logs. For questions or an external deletion request during internal testing, contact the developer through the Google Play listing's App support contact or the person who invited you. A public production launch will require finalized operator/contact information and reviewed retention policies.

Account deletion instructions