Privacy Policy
Effective date: 21 August 2026
Last updated: 28 August 2026
This Privacy Policy explains how Filip Jantos ("we", "us", "our") collects, uses, and protects your information when you use Slowmap (the "App"). We are the data controller responsible for your personal data.
Contact: support@slowmap.app
Address: ul. Puławska 424 skr. 69, 02-800 Warszawa, Poland
If you are in the European Union / European Economic Area, this Policy is intended to meet the requirements of the General Data Protection Regulation (GDPR).
1. Summary
- You need an account to use the App. We collect the email or Apple ID you sign in with.
- When you plan a trip, the details you enter (destination, dates, preferences, accommodation names, notes) are sent to our AI provider to generate your itinerary.
- We store your saved trips so you can access them across devices, and on your device so they open instantly, so your reminders keep working without a connection, and — on Pro — so you can read them with no connection at all.
- We count how many plans you generate, because that is what the free allowance and our own cost controls are based on. We do not use analytics or crash-reporting tools.
- We do not sell your personal data.
- You have rights over your data, including access and deletion — see Section 9.
2. Information we collect
Account information. When you create an account we collect an identifier from your chosen sign-in method: your Apple ID (via Sign in with Apple), your Google account (via Google sign-in), or your email address (via a magic link / one-time code). We assign you an internal user ID. You can use the same account on our app and, in the future, on our website.
If you sign in with Google, Google also passes us your name and the link to your profile picture, which our authentication provider stores alongside your account. The App does not display either, and we do not use them. Signing in with Apple or with an email address does not give us a name.
Trip content you provide. To generate a plan, you enter: destination, number of days, dates, transport mode, pace, interests, food preferences, the must-see/hidden-gems setting, per-night accommodation names or areas, and any free-text notes. We also store the plans generated for you and the modification requests you make.
Purchase information. If you subscribe, our subscription provider and the App Store process the transaction and tell us your subscription status (active/expired). We do not receive or store your full payment card details — the App Store handles payment.
Generation counts. We record when a plan is generated, modified, or translated, and what it cost us to produce, against your internal user ID. This is how the free allowance is counted, how abuse is spotted, and how we keep our own AI spending inside a daily limit. It is not used to profile you and it is not shared with advertisers.
We do not use analytics or crash-reporting tools. The App contains no analytics SDK and no crash-reporting SDK, and we do not collect your device model, operating system version, or crash reports. If that ever changes, this Policy changes first.
Abuse prevention. To stop the free allowance being used repeatedly through new accounts, we use Apple's DeviceCheck service, which lets us record a minimal flag against your device (managed by Apple) indicating that the free trip has been used. It does not identify you and is not used for advertising or analytics.
Advertising data (free tier only). If you use the free version, we show ads through Google AdMob. AdMob may access your device's advertising identifier and limited device/usage data to serve and measure ads. With your consent, ads may be personalized; if you decline tracking, you will see non-personalized ads instead. We also record on your account how many full-screen ads you have been shown today and when the last one appeared, so that we can limit how often they are shown to you; this is used for that limit and nothing else. Paid (Pro) users see no ads and the ad system is not activated for them. See Section 4a for consent.
Trips you choose to share. The App can create a link to one of your trips. Anyone who has that link can read the itinerary — the days, places, times, tips and the estimated budget — without an account and without our knowing who they are. Your own additions are never included: flights, accommodation, reservations, the places you sleep, your private notes on a stop, and anything you typed while planning stay out of the shared copy. Shared pages are marked so that search engines do not list them, but a link can be forwarded by whoever receives it, so treat sharing as making that itinerary public. You can turn a link off at any time in the App, and sharing again afterwards creates a new link while the old one stops working permanently. Links also stop working on their own if your subscription ends, so nothing you shared stays readable once you stop paying.
Destination suggestions. As you type a destination, the App shows suggestions. Most come from a list built into the App itself, which needs no connection and tells us nothing. Beyond that list, what you have typed so far is sent to Apple's map search so it can suggest places we do not carry — the same search that powers Maps on your device. It is sent to Apple, not to us; we do not receive, store or log what you type there, and it happens only while you are typing in that field.
We do not collect your precise device location. The App shows your itinerary on a map using coordinates in the plan; it does not track your GPS location in this version. If we add an optional location-based feature in the future, we will ask for your permission and update this Policy first.
Notifications. With your permission, the App sends reminders about your trips (for example, an upcoming trip, a flight or reservation you entered, or the start of your day's plan). You choose which notification types you receive in the App, and you can turn them off in the App or in your device settings at any time. Most reminders are scheduled on your device from your trip details.
3. How we use your information and our legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Create and manage your account, authenticate you | Performance of a contract |
| Generate, store, and let you modify trip plans | Performance of a contract |
| Sync your saved trips across your devices | Performance of a contract |
| Process and manage your subscription | Performance of a contract |
| Count your free allowance and enforce our own spending limits | Performance of a contract, and legitimate interests |
| Maintain security and prevent abuse of the free tier | Legitimate interests |
| Comply with legal obligations (e.g. tax, responding to lawful requests) | Legal obligation |
Where we rely on your consent (for example, personalised advertising on the free tier), you can withdraw it at any time.
4. AI processing of your trip details
To create your itinerary, the trip details you enter and your modification requests are sent to our AI provider, Anthropic (the Claude API), which generates the plan on our behalf. Anthropic acts as our service provider (processor) for this purpose. We send only what is needed to produce your plan — the preferences and inputs described in Section 2 — associated with a request, not with your name.
Plans are generated by AI and may contain inaccuracies (for example, incorrect opening hours, prices, or occasionally places that are out of date). Itineraries are a starting point to verify, not a guarantee — please confirm details before relying on them. For how Anthropic handles data submitted through its API, see Anthropic's terms and privacy documentation.
4a. Advertising and your consent (free tier)
The free version shows ads via Google AdMob. Before serving personalized ads, we ask for your consent using Google's consent prompt and, on iOS, Apple's App Tracking Transparency prompt. You can decline — you will then see non-personalized ads, and you can change your choice later in your device settings. Subscribing to Pro removes all ads. For how Google handles ad data, see Google's privacy policy.
5. Who we share information with
We share data only with service providers that help us run the App, each acting on our instructions:
- Apple — Sign in with Apple, and App Store subscription and payment processing.
- Google — Google sign-in, and (free tier) advertising via AdMob.
- Supabase — cloud hosting, database, and authentication (stores your account and saved trips).
- Anthropic — AI generation of itineraries (see Section 4).
- RevenueCat — subscription management.
- Google AdMob — advertising on the free tier (not used for Pro users). (Google is also listed above for sign-in.)
We may also disclose information if required by law, to protect our rights, or in connection with a business transfer. We do not sell your personal data, and we do not share it with advertisers to target you.
6. International data transfers
Some of our service providers are located outside your country, including in the United States. Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request more information using the contact details above.
7. Data retention
- Account and saved trips: kept until you delete a trip, delete your account, or ask us to erase your data.
- Generation counts: kept as long as the account exists, and afterwards without your user ID, so the totals still add up but no longer point at anyone.
- Purchase records: kept as required for accounting and legal purposes.
When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet a legal obligation.
8. Security
We use technical and organizational measures to protect your data, including encryption in transit, access controls, and storing our AI provider credentials only on our server (never in the App). No method of transmission or storage is completely secure, but we work to protect your information.
9. Your rights
Depending on where you live, you have the right to: access your data; correct inaccurate data; delete your data; restrict or object to certain processing; data portability; and withdraw consent where processing is based on consent. You will not be treated differently for exercising these rights.
To exercise any of these, contact us at support@slowmap.app. You can also delete saved trips and your account within the App.
If you are in the EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).
10. Children
The App is not directed to children under 16. We do not knowingly collect personal data from children under that age. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy as the App changes or as required by law. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the App. Please review it periodically.
12. Contact
Questions about this Policy or your data:
Filip Jantos
support@slowmap.app
ul. Puławska 424 skr. 69, 02-800 Warszawa, Poland