Privacy Policy
My World — travel log and map
Last updated: 2 August 2026
My World is a travel journal. It records the places you have been, what you wrote about them, and what you would like to see next. This policy explains what the app stores, what leaves your device, and what you can do about it.
Who is responsible
Serhan Topuz, Germany, is the controller of the personal data described here — an individual developer, not a company. You can reach me at support@myworldsapp.com.
The App Store lists the developer account as registered in Türkiye. That is where the account for distributing the app is held; decisions about the data described on this page are made by me, in Germany, and that is what determines who is responsible for it.
Using the app without an account
An account is optional and the app does not ask for one. Used this way, every trip, wish, journal entry, goal and photograph is stored only in the app's own storage on your device. None of it is transmitted to us, and we have no way to see it. Deleting the app deletes it.
The one exception is the map itself, described under Map data below.
What we store if you create an account
Account details
| Email address | To identify the account, send sign-in codes, and let you reset a password. |
|---|---|
| Password | Stored only as a cryptographic hash by our authentication provider. We never see it. |
| Username | Your chosen name for the account. |
| First and last name | To address you in the app. |
| Date of birth | Optional. You may leave it blank. |
| Gender | Optional. You may leave it blank or choose not to say. |
Your travel records
Backed up so that signing in on another device shows the same log:
- Places visited and planned — country, city, an optional title, dates, rating, category, and trip grouping.
- Map coordinates for those places, described below.
- Journal entries — their dates and the text you wrote.
- Goals you have set for yourself.
- References to your photographs — a filename and the picture's dimensions. Not the images themselves.
Your photographs
Photographs you attach to a journal entry are stored only on your device. They are not uploaded, not backed up, and not visible to us. A second device signed into the same account will know that an entry has photographs attached and will show a placeholder in their place.
This means that if you lose your device, the places and the writing survive and the photographs do not. The app's own export file behaves the same way.
About coordinates
The app has no access to your device's location and never requests that permission. A place's coordinates come either from a list of world cities bundled inside the app, or from a pin you place on the map deliberately. They describe a place you told us about — not where you are, and not where you have been in real time.
Feedback you send us
Settings → Send feedback writes a message to our database. It holds the subject and the text you type, the app's version number and whether you are on iOS or Android — the app tells you this on the form itself — and, if you are signed in, your account identifier, so that a reply can find you. Sent without an account, it carries nothing that identifies you.
It is stored alongside the rest of the data described above, in Ireland, and is used only to answer you and to fix what you reported. Nobody using the app can read what anybody else has sent, including their own messages.
A message outlives the account that sent it, without the account. If you close your account, the identifier attached to your feedback is removed and the message itself is kept — a bug report is something you told us about the app, not a record we hold about you, and once it is no longer linked to anybody it is no longer personal data. If you would rather a message went too, ask us and it will be deleted.
What we do not do
- No advertising, and no sale or sharing of personal data with advertisers.
- No analytics of our own. We do not measure what you do in the app, and nothing reports your activity back to us. The map component is the one exception, and it is not ours — see Map data below for what Mapbox collects and how to switch it off.
- No behavioural profiling, and no tracking across other apps or websites.
- No access to your device's location, contacts, calendar or microphone.
- No reading of your photo library beyond the individual pictures you choose to attach.
Services we rely on
We use a small number of providers to run the app. They process data on our instructions only.
| Supabase | Database, account authentication and hosting for the backup described above. Your records are stored in Ireland (AWS eu-west-1), inside the European Union. |
|---|---|
| Resend | Delivers sign-in and password-reset emails. Receives your email address and the message. |
| Mapbox | Supplies the map. Receives your IP address and the areas of the map being drawn, as any map provider must in order to send the right tiles. |
| Apple, Google | Only if you choose to sign in with Apple or with Google. They confirm your identity to us and pass on your email address and name. If you use Apple's Hide My Email, the address we receive is Apple's relay address and not your own — we never see the real one. |
Where your data is processed
Your travel records and account details are stored in the European Union, as described above. Some of the providers listed are established in the United States and may process data — an email address in transit, an IP address serving a map tile — outside the European Economic Area. Where that happens, it is covered by the European Commission's Standard Contractual Clauses or another safeguard permitted under Chapter V of the GDPR, as set out in each provider's own terms.
Map data
Drawing the map requires requests to Mapbox, which necessarily reveal your IP address and the part of the world being displayed. This happens whether or not you have an account, because it is how any online map works. Mapbox's own privacy policy is at mapbox.com/legal/privacy.
The Mapbox component also collects its own usage telemetry, separately from us and under its own policy. We do not receive it and do not use it. You can turn it off inside the app: tap the ⓘ beside the Mapbox logo on the map and use the opt-out there.
How long we keep things
Your records are kept for as long as your account exists. When you delete a record, its contents are erased and a marker holding only its identifier and the time of deletion is retained for 90 days, so that a device which has been offline learns of the deletion instead of restoring the record. After that the marker is removed too.
Deleting your account removes your account details and every travel record attached to it. The two things that do not simply disappear with it are described plainly rather than buried: feedback you sent us is kept with its link to you removed, as described above; and if you signed in with Apple, the permission you granted Apple lives on your device rather than on our servers, so only you can withdraw it — see below.
Your rights
Two of these are built into the app and need no request:
- Export — Settings → Export writes your complete records to a file you keep.
- Deletion — Settings → Delete account closes the account and removes the data held for it. Records kept only on your phone are untouched by this; the app says so on the same screen, because deleting an account and deleting your travel log are different things and people reach for the wrong one.
If you signed in with Apple, one step is yours rather than ours. Deleting your account here removes everything we hold, but it cannot take this app off your Apple ID — that permission is held by Apple, on your device, and only you can withdraw it. Open Settings, tap your name, then Sign in with Apple, and find this app in the list. That list is Apple's, so the entry may be named after the app's identifier rather than after the app. Tap it, then Stop Using Apple ID. The app shows you the same instruction at the moment you delete the account.
Depending on where you live, you may also have the right to access, correct, restrict or object to the processing of your data, and to complain to your national data protection authority. Write to support@myworldsapp.com and we will respond within one month.
Children
My World is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
Changes
If this policy changes in a way that affects you, we will update the date at the top of this page. Continuing to use the app after a change means accepting the updated policy.
Questions about any of this: support@myworldsapp.com