PlanetPassport privacy policy
Last updated: 15 October 2026
PlanetPassport is an app for recording the countries, regions and trips you have travelled. It is made by Fenix Art Lab Corp. ("we"), 200-1220 Old Innes Road, Ottawa, Ontario K1B 3V3, Canada. We are responsible for the personal information described here. This policy explains what we keep, where, why, and what you can do about it.
The short version: your travel record lives on your phone and you do not need an account. If you choose to sign in, we keep your email address and a private copy of your record so you can back it up and use it on more than one phone. The app has no ads and sends no analytics or tracking data. We do not sell your personal information or use it for advertising; we use the service providers listed below to run the service. This website counts visits without cookies.
Without an account
Everything you enter in the app (countries, regions, trips, dates, notes, companions, the places you tick on lists, your profile and settings) is stored on your phone. Without an account we do not receive any of it.
- Photo location import. If you use it, the app reads the location and date of photos on your phone to suggest visits. Photos are processed on your phone and are not uploaded. Only the country, region and dates of visits you confirm are saved, as part of your travel record, so they are included in cloud backup and sync if you turn those on.
- Exports and backup files. Files you export or save go only where you choose to save or share them.
- Shared map links. If you use Share a link, your map (the countries and regions you counted, and your name only if you choose to show it) is written into the link itself, after the # sign. Browsers do not send that part of a link to our website, so we never receive it. Anyone who has the link can see that map, and a link cannot be withdrawn once you have shared it.
- Your phone's own backup. iCloud or Google backup may include the app's data, following your phone settings. That is handled by Apple or Google, not by us.
The waitlist
Before launch, you can join the waitlist on planetpassport.app. We keep:
| What | Why |
|---|---|
| Your email address | To email you when PlanetPassport launches and when the founding member offer opens |
| Which phone you use (iPhone, Android or both) | To point you to the right store |
| The time you signed up and the exact consent wording shown to you | Evidence of your consent to these emails |
| The campaign name in the page address, if there was one (for example ?ref=newsletter) | To know which links bring people to the waitlist. It never contains personal information |
We send only those launch and founding offer emails. Each one says who sent it and has an unsubscribe link. Unsubscribe requests are acted on straight away, and always within 10 business days.
This website
planetpassport.app sets no cookies. To see how many people visit and which pages and links bring them here, the website uses Vercel Web Analytics. It records page views with the page address, the referring site, the country, and the type of device, browser and operating system. Vercel's documentation says it does not store IP addresses for analytics and tells visits apart with a code that changes every 24 hours. We only see totals. Vercel, which hosts the website, also processes IP addresses in its ordinary server and security logs. This applies to the website only; the app has no analytics.
With an account (optional)
You can sign in with your email address. We send you a 6-digit code; there is no password. Cloud backup is the reason the account exists, so it starts automatically when you sign in; the sign-in screen says so and what it includes. To stop backups, sign out. To remove them, delete your account.
When you are signed in, we keep:
| What | Why |
|---|---|
| Your email address and a user ID | To sign you in and keep your data in your account |
| Cloud backup copies of your travel record, profile and settings (the last 2) | So you can restore your record, for example on a new phone |
| Your travel record, profile and settings, if sync is on (PlanetPassport+) | So the same record appears on every phone you sign in to |
| Sign-in and security records kept by our providers (times, IP address, device) | To keep accounts secure |
Your profile can include a first name, and your record can include the names of people you travelled with and notes. Add only what you are comfortable keeping. Your light or dark theme setting is not sent.
Why we use your information (EU and UK)
If EU or UK data protection law applies to you, these are our legal bases:
| Use | Legal basis |
|---|---|
| Your account, cloud backup and sync | Performance of our contract with you: you asked for these features |
| Waitlist emails | Your consent, which you can withdraw at any time by unsubscribing |
| Website visit counting | Our legitimate interest in knowing how many people visit, using counting that does not identify you |
| Security records, consent evidence, unsubscribe records, answering your requests | Our legitimate interests and our legal obligations |
Accepting this policy is not consent to anything else.
Who helps us and where your data is
We use a small number of service providers. They process data on our behalf, under their data processing terms, to provide their service to us. We remain responsible for your information when they handle it.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Stores accounts, cloud backups, synced data and the waitlist | Primary storage in Canada (Central); the company and some of its support and operations are in the United States |
| Resend | Sends the sign-in code emails and, at launch, the waitlist emails (sees your email address) | United States |
| GitHub | Keeps an encrypted nightly copy of our database for disaster recovery, deleted after 7 days | United States |
| ImprovMX (Reflectiv SAS) | Forwards email sent to support@planetpassport.app | France (EU) |
| Gmail (Google) | Our support mailbox, where forwarded emails are read and answered | United States and other countries |
| Vercel | Hosts this website and counts visits | United States and other countries |
Information processed outside your country may be accessed by courts, law enforcement and national security authorities of those countries under their laws. Where we transfer personal data of people in the EU or UK to a country without an adequacy decision, we rely on the safeguards in our providers' data processing terms, such as standard contractual clauses. You can ask us for details.
Security
Data is encrypted while it travels between the app and our servers. Access controls in the database are designed so that each account can read and change only its own records. We limit administrator access, keep a record of any security breach, and tell you and the regulator when the law requires it.
What we do not do
- No advertising, on any plan.
- No analytics, tracking or advertising identifiers in the app.
- We do not sell your personal information.
- We do not use your data to train AI models or to build profiles of you.
Purchases
PlanetPassport+ is not on sale yet. When it is, it will be sold through the App Store and Google Play, which handle payment; we will never see your card details. We will update this policy, before sales start, to explain the purchase information we receive to unlock PlanetPassport+ on your devices.
How long we keep data
| Data | Kept |
|---|---|
| Your account, synced record and cloud backups | Until you delete your account |
| Cloud backup copies | The last 2. A new copy is made 10 minutes after changes and once a day while you use the app, so something you delete leaves the older copy after two more backups |
| Records you delete while sync is on | The content is removed from our server at once; a marker without any travel details stays for up to 90 days so your other phones also delete it |
| Encrypted disaster-recovery copies | 7 days |
| Waitlist | Until 6 months after launch, or 31 December 2027 if the app has not launched by then, whichever comes first. Your entry is removed sooner if you ask |
| Unsubscribe records and consent evidence | Your email address and the date you unsubscribed or consented, for 3 years, so we never email you again by mistake and can show what you agreed to |
| Support emails | 2 years after the conversation ends |
| Records of security breaches | 2 years, as Canadian law requires |
Deleting your data
- Delete your account in the app: Account, Delete account. Your account, cloud backups and synced record are removed from our active systems. Encrypted disaster-recovery copies expire within 7 days. You choose whether the travel record on that phone stays or is deleted too.
- Without the app: email support@planetpassport.app and we will delete your account within 30 days and confirm. We may ask you to confirm the request with a code sent to your sign-in address. If you no longer have that mailbox, tell us and we will find another way to confirm it is you. See planetpassport.app/delete-account.
- Only this phone: Account, About, privacy and credits, Delete all my data removes everything from that phone and turns sync off there, without touching your account.
Deleting your account does not delete files you exported or copies on phones that are no longer signed in, and does not cancel a store subscription.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict how it is used, and to withdraw consent. Withdrawing consent does not affect what we did before; withdrawing consent to waitlist emails means we stop sending them.
Much of this you can do in the app: everything in your record is visible in the app, exportable in Account, Your data, and deletable as described above. That does not cover everything we hold (for example security records or support emails), so for any request, email support@planetpassport.app. We answer within 30 days (within one month where EU or UK law applies, which can be extended in some cases, and we will tell you if so).
You can complain to us first, but you do not have to. You can also complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada; in Quebec, the Commission d'accès à l'information; in the EU, the data protection authority where you live; in the UK, the Information Commissioner's Office.
Age
PlanetPassport accounts and the waitlist are for people 16 and over, and the app is not directed at children. We ask for no proof of age. If we learn that an account or waitlist entry belongs to someone under 16, we delete it.
Changes
If we change this policy, we update the date above and, for significant changes, tell you in the app. Where a change needs your consent, we ask for it first.
Contact
Fenix Art Lab Corp. 200-1220 Old Innes Road, Ottawa, Ontario K1B 3V3, Canada Privacy officer: support@planetpassport.app (subject "Privacy")