Privacy Policy
My World — travel log and map
Last updated: 28 July 2026
My World is a travel journal. It records the places you have been, what you wrote about them, and what you would like to see next. This policy explains what the app stores, what leaves your device, and what you can do about it.
Who is responsible
Serhan Topuz, Germany, is the controller of the personal data described here — an individual developer, not a company. You can reach me at support@myworldsapp.com.
Using the app without an account
An account is optional and the app does not ask for one. Used this way, every trip, wish, journal entry, goal and photograph is stored only in the app's own storage on your device. None of it is transmitted to us, and we have no way to see it. Deleting the app deletes it.
The one exception is the map itself, described under Map data below.
What we store if you create an account
Account details
| Email address | To identify the account, send sign-in codes, and let you reset a password. |
|---|---|
| Password | Stored only as a cryptographic hash by our authentication provider. We never see it. |
| Username | Your chosen name for the account. |
| First and last name | To address you in the app. |
| Date of birth | Optional. You may leave it blank. |
| Gender | Optional. You may leave it blank or choose not to say. |
Your travel records
Backed up so that signing in on another device shows the same log:
- Places visited and planned — country, city, an optional title, dates, rating, category, and trip grouping.
- Map coordinates for those places, described below.
- Journal entries — their dates and the text you wrote.
- Goals you have set for yourself.
- References to your photographs — a filename and the picture's dimensions. Not the images themselves.
Your photographs
Photographs you attach to a journal entry are stored only on your device. They are not uploaded, not backed up, and not visible to us. A second device signed into the same account will know that an entry has photographs attached and will show a placeholder in their place.
This means that if you lose your device, the places and the writing survive and the photographs do not. The app's own export file behaves the same way.
About coordinates
The app has no access to your device's location and never requests that permission. A place's coordinates come either from a list of world cities bundled inside the app, or from a pin you place on the map deliberately. They describe a place you told us about — not where you are, and not where you have been in real time.
What we do not do
- No advertising, and no sale or sharing of personal data with advertisers.
- No analytics, usage tracking, behavioural profiling or cross-app tracking.
- No access to your device's location, contacts, calendar or microphone.
- No reading of your photo library beyond the individual pictures you choose to attach.
Services we rely on
We use a small number of providers to run the app. They process data on our instructions only.
| Supabase | Database, account authentication and hosting for the backup described above. Your records are stored in Ireland (AWS eu-west-1), inside the European Union. |
|---|---|
| Resend | Delivers sign-in and password-reset emails. Receives your email address and the message. |
| Mapbox | Supplies the map. Receives your IP address and the areas of the map being drawn, as any map provider must in order to send the right tiles. |
| Apple, Google | Only if you choose to sign in with Apple or with Google. They confirm your identity to us and pass on your email address and name. |
Where your data is processed
Your travel records and account details are stored in the European Union, as described above. Some of the providers listed are established in the United States and may process data — an email address in transit, an IP address serving a map tile — outside the European Economic Area. Where that happens, it is covered by the European Commission's Standard Contractual Clauses or another safeguard permitted under Chapter V of the GDPR, as set out in each provider's own terms.
Map data
Drawing the map requires requests to Mapbox, which necessarily reveal your IP address and the part of the world being displayed. This happens whether or not you have an account, because it is how any online map works. Mapbox's own privacy policy is at mapbox.com/legal/privacy.
How long we keep things
Your records are kept for as long as your account exists. When you delete a record, its contents are erased and a marker holding only its identifier and the time of deletion is retained for 90 days, so that a device which has been offline learns of the deletion instead of restoring the record. After that the marker is removed too.
Deleting your account removes your account details and every record attached to it.
Your rights
Two of these are built into the app and need no request:
- Export — Settings → Export writes your complete records to a file you keep.
- Deletion — Settings → Delete account closes the account and removes the data held for it.
Depending on where you live, you may also have the right to access, correct, restrict or object to the processing of your data, and to complain to your national data protection authority. Write to support@myworldsapp.com and we will respond within one month.
Children
My World is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
Changes
If this policy changes in a way that affects you, we will update the date at the top and note the change in the app. Continuing to use the app after a change means accepting the updated policy.
Questions about any of this: support@myworldsapp.com