Privacy Policy.

Travler is operated by Haste ("Haste", "we", "us"), the controller of your personal data. This Privacy Policy explains how we process personal data in the Travler mobile app, in compliance with the EU General Data Protection Regulation (GDPR). It does not cover third-party websites you may reach through links in the app, which have their own policies.

Content created by users may contain links to third-party websites or services; we are not responsible for the privacy practices of those third parties.

• Haste, established in the Netherlands.
• Contact: hello@travlerapp.net

We are established in the EU and are not required to appoint an Article 27 representative or a Data Protection Officer.

Travler uses pseudonymous sign-in: we do not ask for your name, email, or phone number to create an account. We process:

• Account data: a pseudonymous user ID, session tokens, and a randomly generated application-specific device identifier (used for security and abuse prevention). Although we do not require your name, email, or phone number, these identifiers can single you out and therefore count as personal data under the GDPR.
• Profile (optional): display name, profile picture, avatar colour, language.
• Your content: Boards, Adventures (titles, descriptions, destination text, links, prices, images), votes, comments, and reactions.
• Chat: messages are end-to-end encrypted. Your private keys are generated and stored only on your device and never leave it; our servers hold only public keys and an encrypted form of the shared Board key that we cannot decrypt. As a result, we cannot read your messages. We process only technical metadata needed to deliver them (Board ID, sender ID, timestamps, public keys).
• Notifications: push token, device platform/name, and your notification preferences.
• Purchases: subscription tier/status and purchase records (no card details; handled by Apple, Google, and RevenueCat).
• Advertising: on the free tier we show ads via Google AdMob. Your device's advertising identifier is used for personalised ads only with your consent (iOS App Tracking Transparency and Google UMP). Without consent, ads are non-personalised.
• Security data: hashed IP addresses and rate-limit counters for abuse prevention.

We do not collect location/GPS data or contacts, and we use no third-party behavioural analytics.

Camera, photo library, calendar, and notifications are requested only when you use the related feature and can be denied. Denying a permission disables only that feature.

• Contract (Art. 6(1)(b)): operating your account and providing the Service, including delivering notifications and processing purchases.
• Legitimate interests (Art. 6(1)(f)): security, abuse prevention, and displaying non-personalised ads necessary to support the free version of the Service.
• Consent (Art. 6(1)(a)): personalised advertising and use of your advertising identifier, and device permissions. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): tax/accounting for purchases and responding to lawful requests.

We share data with carefully selected service providers that assist with hosting, authentication, cloud storage, content delivery, subscriptions and payments, push notifications, advertising, and image search. These providers process data on our behalf under contractual safeguards, or as independent controllers for payments and advertising. We may engage different service providers from time to time; information about the categories of providers we use is set out in this policy, and additional information may be provided on request. We do not sell your personal data.

Some providers process data outside the EEA. Where they do, transfers are protected by the EU Standard Contractual Clauses or an adequacy decision.

• Content and account data: until you delete it or your account.
• Encrypted chat relay (server): deleted on delivery, and within 30 days.
• In-app notifications: 90 days.
• Rate-limit/security records: short rolling windows (seconds to 24 hours).
• Purchase records: as required by law.

When you delete your account, your profile, push tokens, votes, comments, reactions, encryption keys, and account record are deleted; Boards you solely own are deleted, shared Boards are transferred to another member, and your Adventures are anonymised.

Chat is end-to-end encrypted; all traffic uses TLS; keys and chat are stored encrypted on your device; and database access is restricted per user with Row-Level Security.

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. You can delete your account and data directly in the app (Settings). For other requests, contact hello@travlerapp.net. We may ask for information needed to verify your request. Because accounts are anonymous, we may be unable to act on a request if we cannot link it to your account (Art. 11). You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, https://autoriteitpersoonsgegevens.nl), or to the supervisory authority in the EU member state where you live or work.

Travler is not intended for children under 16. We do not knowingly collect their data.

We may update this policy; material changes will be noted by updating the date above and notice in the app.

hello@travlerapp.net · https://travlerapp.net