Privacy policy

AvioStory is the data controller for the personal data described here. You can reach us at support@aviostory.com for any privacy question, request or complaint. We answer data requests within 30 days.

Account data: email address, handle, home country, avatar and, if you add one, a bio. Used to create your account, sign you in and show your profile. Linked to your identity.

Passport data: visited countries, cities, regions, airports, trips, wishlists, dates, notes and photos you add. Used to build your passport, map, statistics and achievements. Linked to your identity.

Photo metadata: when you choose to verify a visit, we read location data embedded in the photo you upload to confirm the place. Used only for verification of that visit.

Purchase data: whether you bought AvioStory Pro and the reference from our payment provider. Used to unlock Pro and support receipts. We never receive your card number.

Diagnostics: anonymous crash and performance data, only if you allow it in your privacy choices. Not linked to your identity.

We do not collect precise background location, contacts, health data, advertising identifiers or browsing activity in other apps.

We process account, passport and purchase data to perform our contract with you. We rely on your consent for diagnostics, personalised suggestions, product emails and any public sharing of your profile. We rely on legitimate interests for keeping the service secure and preventing abuse, and on legal obligation for tax and accounting records.

We do not sell your personal data and we do not share it for advertising. We use a small set of processors that act on our instructions: our cloud hosting and database provider (accounts, passport data, photos), our email provider (sign-in and service emails), our payment provider (Pro purchases) and public map and flag imagery services used to render the map. Where data leaves your region, transfers rely on standard contractual clauses.

Your passport is private unless you choose a public or friends-only profile. When your profile is public, your handle, avatar, bio, visited counts and anything you posted to the gallery can be seen by others and can appear on leaderboards. You can switch back to private at any time under You.

We keep account and passport data for as long as your account exists. If you delete your account, your profile, passport, photos and posts are removed from our systems within 30 days, except records we must keep for accounting, which are kept for the legally required period.

You can delete your account and all associated data from inside the app: open You, scroll to the bottom and choose to erase your passport or delete your account. You can also email support@aviostory.com from your account address and we will delete it for you. No part of deletion requires you to contact the app store.

You have the right to access, correct, delete, restrict and object to processing, and to data portability. You can export your entire passport as a CSV file at any time from the You page. If you are in the EEA or the UK, you may also lodge a complaint with your local data protection authority.

If you are in California, you have the right to know, delete and correct personal information and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.

AvioStory is not directed at children. You must be at least 13 years old, or 16 where your country requires it, to create an account. If we learn that a child created an account, we delete it.

Data is encrypted in transit and at rest with our hosting provider. Access to production data is limited to the people who need it, and row-level rules in our database keep one traveller from reading another traveller's private passport.

The mobile apps ask only for what a feature needs, when you use it: photo library access to add travel photos, camera access if you take one in the app, and notifications if you enable trip countdown reminders. You can decline any of these and keep using the app, and you can change them later in your device settings.

If we make material changes, we update the date at the top of this page and, where required, ask for your consent again inside the app.