Privacy Policy - JourneyPic

1. Introduction

JourneyPic ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, display name, profile photo
Photos: Images you upload to create journeys
Journey Data: Titles, descriptions, and other content you create

2.2 Information Collected Automatically

Photo Metadata: EXIF data including GPS coordinates and timestamps from your photos
Location Data: GPS tracking data when you enable background location recording
Device Information: Device type, operating system, app version
Usage Data: App interactions, features used, crash reports
Widget & Live Activity Data: Journey information displayed on your home screen widgets and lock screen Live Activities, derived from your existing journey data

3. Location Data

We collect location data in the following ways:

Photo GPS: We extract GPS coordinates from your photos' EXIF metadata to create journey maps and spots.
Background GPS (Optional): If you enable journey recording, we collect real-time GPS data in the background to track your route.
Reverse Geocoding: We convert coordinates to place names using Apple and third-party services.

You can disable background location tracking at any time. Photo GPS data is only collected from photos you upload.

4. How We Use Your Information

Create and display your travel journeys
Generate maps and routes from your photos and GPS data
Provide location-based features (geocoding, place names)
Generate AI-powered titles and summaries for your journeys
Enable social features (sharing, following, likes)
Send push notifications (with your permission)
Improve our services and user experience
Detect and prevent fraud or abuse

5. AI-Powered Features

JourneyPic uses AI to enhance your experience:

Title Generation: Your photos (resized, up to 6 images) and spot names may be sent to our AI service (OpenRouter, using Google Gemini models) to generate journey titles. Free users receive 1 AI title generation per journey; Pro subscribers have unlimited access.
Itinerary Summary: Your journey metadata (spot names, dates, time periods) may be sent to generate trip summaries. Free users can view a preview of the summary; full summaries are available to Pro subscribers.
Journal Travel Book (Pro): When generating a travel book, your photos (resized thumbnails) and spot metadata are sent to our AI service (Google Gemini via OpenRouter) to generate spot descriptions, diary-style entries, photo layout recommendations, and travel quotes. This feature is available to Pro subscribers only.

We do not use your photos or data to train AI models. AI processing is performed by third-party services subject to their own privacy policies.

5.1 Custom 3D Character Generation & Biometric Data

When you use the Custom 3D Character feature (Pro subscribers only), your uploaded photo — which may contain facial features and body characteristics — is processed by third-party AI services to generate a personalized 3D model. This processing may involve the extraction of facial geometry and body proportions, which may constitute biometric information under certain laws.

What we collect: Your uploaded photo and the AI-generated 3D character model (USDZ file), along with intermediate images generated during the process.
Purpose: Solely to create your personalized 3D walking character for use within JourneyPic route videos. No other use.
Third-party processors: Your photo is sent to Google Gemini (via OpenRouter) for character reference image generation, and to Meshy AI for 3D model creation. These services process your data under their respective privacy policies.
Storage: Your original photo and generated model are stored on Cloudflare R2 servers.
Retention: Data is retained as long as your custom 3D model exists. When you delete a custom model, local files are removed immediately. You may request deletion of server-stored files by contacting us.
No AI training: We do not use your photos or biometric data to train, improve, or develop AI models or any other products.
No sale: We do not sell, lease, trade, or otherwise profit from your biometric data.
Consent: Before your photo is processed, you will be asked to provide explicit consent within the app. You may decline, in which case no data will be sent to third-party services.

For Illinois (BIPA), EU (GDPR), and California (CCPA) residents: The biometric data processed for custom 3D characters is collected only with your explicit prior consent. You have the right to withdraw consent and request deletion of all associated data at any time by contacting us at the email address below.

5.2 Custom 3D Vehicles

You can also generate custom 3D vehicle models from photos of cars, bikes, boats, and other transport. Vehicle generation is processed by the same third-party AI services (Google Gemini and Meshy AI) but does not involve biometric data, so it is treated under standard data processing rules rather than the stricter biometric framework above.

What we collect: Your uploaded vehicle photo and the resulting 3D model (USDZ + GLB).
Purpose: To generate the 3D vehicle for use in JourneyPic. Vehicle Models may also be used by JourneyPic for app demonstrations, marketing, sample galleries, App Store screenshots, and product improvement, as described in our Terms of Service Section 4.2.
No biometric processing: Vehicle photos are not analysed for facial or body characteristics.
No personal identification: We will never use Vehicle Models in ways that identify you personally without your separate consent.
No AI training: We do not use vehicle photos or models to train AI.
No popup consent required: Because vehicle generation does not involve biometric data, we do not require an in-app popup consent. The very act of uploading a photo to the "Create Custom Vehicle" feature constitutes informed consent under standard privacy law, and the full data handling is disclosed here and in our Terms.
Deletion: You can delete Vehicle Models at any time. Local files are removed immediately and cloud storage is purged within 30 days.

6. 3D Models, Video Export & Music

JourneyPic includes the following features that process data locally on your device:

3D Model Rendering: We use USDZ 3D models (transport vehicles such as cars, trains, and planes) rendered locally on your device using SceneKit. Pre-built models are bundled with the app or downloaded on-demand.
Custom 3D Character (Pro): Pro subscribers can create a personalized 3D walking character from a photo. When you use this feature, your photo is sent to our AI service (Google Gemini via OpenRouter) to generate a character reference image, and then to Meshy AI to create a 3D model with walking animation. Your original photo and the generated 3D model file (USDZ/GLB) are stored on Cloudflare R2 to enable cross-device synchronization — when you sign in on a new device, your custom 3D models are automatically downloaded so you don't lose them. Model metadata (name, creation date, cloud URL) is stored in Firebase Firestore. When you delete a custom 3D model, the local files are removed from your device and the cloud-stored model file and metadata are also deleted. You may request deletion of all server-stored files by contacting us.
Video Export: You can export journey videos that include your photos, map routes, and animations. Video rendering is performed entirely on your device using AVFoundation. Free users can export unlimited videos with a JourneyPic outro watermark; Pro subscribers can remove the watermark and export in 4K quality.
Background Music (BGM): Free tier includes 5 bundled music tracks. Pro subscribers can access 16 additional premium music tracks downloaded from Cloudflare R2. All music is licensed for use within JourneyPic video exports only and may not be redistributed separately.
PDF Travel Book Export: Pro subscribers can export journeys as PDF travel books with AI-generated content. PDF rendering is performed on your device; photo analysis for content generation uses our AI service (see Section 5).
Cloud Rendering (Optional): You may use your own Mac computer as a personal rendering server to export journey videos. When enabled, journey data (photo URLs, map routes, export settings) is transmitted between your iPhone and Mac via Firebase Realtime Database. All data remains within your own devices and Firebase infrastructure; no data is sent to additional third parties for this feature.
Cutout People & Avatars: The app can extract people from your photos for use in journey videos. This processing is performed locally on your device using Apple's Vision framework. Free users can create up to 2 cutout/avatar people; Pro subscribers have unlimited access.

Widgets (WidgetKit) and Live Activities (ActivityKit) display journey information on your home screen and lock screen. This data is derived from your existing journeys and stored locally on your device. No additional data is collected or transmitted externally for these features.

7. Data Storage and Security

Your data is stored securely using industry-standard services:

Firebase (Google Cloud): Authentication, database, analytics, and storage
Cloudflare R2: Photo, media, and custom 3D model storage (enables cross-device sync)

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

8. Third-Party Services

We use the following third-party services that may collect data:

Google/Firebase: Authentication, database, analytics, crash reports, performance monitoring, push notifications
Mapbox: Map display, routing, and geocoding
Foursquare: Place information
OpenRouter (Google Gemini): AI-powered features (title generation, summaries, journal travel book content, custom 3D character image generation)
Meshy AI: Custom 3D character model generation (converts images to animated 3D models)
Firebase Realtime Database: Cloud rendering coordination between your devices
Cloudflare R2: Photo, media, and custom 3D model storage (enables cross-device sync)
Open-Meteo: Weather data
Apple Sign In: Authentication
Google Sign-In: Authentication
Apple StoreKit: In-app subscriptions

We encourage you to review their respective privacy policies.

9. Social Data

When you use our social features, we collect:

Follow relationships (who you follow and who follows you)
Likes and saves on journeys
View counts on your public journeys
Share activity

10. Data Sharing

We do not sell your personal data. We may share your information:

Public Journeys: When you set a journey's visibility to "Public", it becomes visible to all users and may appear in Explore
Friends: When you set a journey to "Friends", it is visible to mutual followers
Collaborators: With users you invite to collaborate on a journey. When you enable group activities or device groups, location and journey data may be shared in real-time between you and your explicitly invited collaborators.
Service Providers: With third-party services that help us operate the app
Legal Requirements: When required by law or to protect our rights

11. Analytics

We use Firebase Analytics to understand how users interact with our app. This includes:

App usage patterns and feature engagement
Screen views and navigation flows
Journey creation, viewing, and sharing events
Crash reports and error logs (via Firebase Crashlytics)
Performance metrics (via Firebase Performance Monitoring)

Analytics data is retained for up to 14 months by Firebase. This data is processed by Google and subject to Google's Privacy Policy.

The Mapbox Maps SDK also collects anonymous map interaction telemetry (such as map views and gestures) to improve their mapping service.

12. Push Notifications

If you enable push notifications, we store a device token to send you notifications about new followers, likes on your journeys, journey processing updates, and important announcements. You can disable notifications at any time in your device settings.

13. Data Retention

Active accounts: Data is retained while your account is active.
Deleted journeys: Moved to trash for 3 days, then permanently deleted.
Account deletion: You have 14 days to restore your account by logging back in. After 14 days, all data is permanently deleted.
Analytics data: Retained for up to 14 months by Firebase.

14. International Data Transfer

Your data may be transferred to and processed in countries outside your residence, including:

United States (Firebase, Cloudflare, OpenRouter)
Various locations (Mapbox, Foursquare)

We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.

15. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and data
Export your data
Opt-out of marketing communications
Disable location tracking at any time

For EU/EEA Users (GDPR)

Legal Basis for Processing:

Contractual Necessity: Account data, journey data, and photo processing (required to provide the service)
Legitimate Interest: Analytics, crash reporting, and performance monitoring (to improve the service)
Consent: AI-powered features, push notifications, and optional social features

You have additional rights including data portability, restriction of processing, right to object, right to withdraw consent, and the right to lodge a complaint with a supervisory authority. For data protection inquiries, contact us at haveabigtry@gmail.com. We will respond within 30 days.

For California Users (CCPA)

You have the right to know what personal information we collect and how it's used, request deletion, and opt-out of the sale of personal information. We do not sell or share your personal information for cross-context behavioral advertising.

16. Children's Privacy

JourneyPic is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

18. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: haveabigtry@gmail.com