JourneyMemo by Lumatra
Privacy Policy
JourneyMemo is provided by Lumatra and is designed to help users save, sync and share their travel memories under their own account.
Data we collect
- Account data: name, email address, sign-in state and Firebase user ID.
- Subscription data: selected product, entitlement and subscription status, and a hashed store transaction reference used to verify purchases and prevent one purchase from being linked to multiple accounts. JourneyMemo does not receive full card or payment details.
- Travel records: city, country, state or region, wishlist status, trip dates, collection, notes, journal entries, overall rating and memory tags.
- Photos: images selected by the user or taken with the camera, cover photo choice, photo titles and photo comments.
- Voice memories: recordings you explicitly choose to create, together with duration and creation information. The microphone is used only while recording.
- Shared trips: invite, membership and role information, plus notes and photos contributed to the selected shared trip. If a member reports a shared trip, the report includes the selected category, the written reason, the trip identifier and the reporting and owner account identifiers.
- Saved places: restaurant, nature place or similar place name, address, note and user-added rating.
- App settings: language, theme, sharing preferences and sync status.
JourneyMemo does not ask for or collect your date of birth.
How we use data
- Show your travel archive, map, album, lists and statistics.
- Sync and restore your memories across devices signed in to the same account.
- Store photos and voice memories in Firebase Storage and store place, note, rating, trip-date and media-reference data in Cloud Firestore.
- Let invited members collaborate on a shared trip and enforce the access scope selected by the trip owner.
- Help you share memories when you choose to share them.
- Support account security, troubleshooting, customer support and abuse prevention.
Third-party services
- Firebase Authentication is used for account creation and sign-in.
- Cloud Firestore is used for travel records, notes, ratings, dates and account data.
- Firebase Storage is used for photos and user media.
- Apple App Store or Google Play handles purchase, billing, renewal, restoration and management of an optional Premium subscription. JourneyMemo does not receive full card or payment details.
- Google Maps Platform and Places services may be used for place search, addresses and location validation.
- The device share sheet or social apps receive only the content you choose to share.
Private shared trips
- Shared trips are not public. A valid invite code only creates an access request; the requesting account cannot see any shared-trip content until the owner approves it.
- The owner sends a private, one-time invitation link without entering the guest's email address. The guest may sign in or create an account, including with Apple's Hide My Email. The link binds to the first account that requests access; opening it alone never reveals trip content.
- An approved guest receives access only to the selected trip. Every other trip and the owner's overall travel map remain private.
- The owner can approve or reject requests, narrow access, remove or block a member, create a new invite or stop sharing. A removed member keeps an independent private copy of the trip as it existed when access ended. A blocked account cannot use a new invitation to rejoin that shared trip.
- Active invited members can report a shared trip from inside the app. Reports are used only for safety review, abuse prevention and enforcement.
Retention and deletion
Your data is kept while your account is active or until you delete it. You can delete places, notes, photos and voice memories in the app; deleted media is synced for removal from cloud storage. When an owner stops sharing, the shared copy and its media are deleted. If an invited member deletes their account, their contributions to shared trips are removed. Safety reports and blocking records may be retained only as long as reasonably needed for abuse prevention, legal compliance and dispute handling, and are then deleted or de-identified. You can delete local data, sign out, or follow the account and cloud-data deletion process.
Security
We use Firebase security rules, user-specific UID storage paths, short-lived media links and HTTPS transport to protect data. Raw shared-trip invite secrets are not stored; a one-way hash is kept for invite verification. No internet service can be guaranteed to be completely secure.
Abuse prevention and safety controls
- We may use account, request, file path, file type and file size information to help prevent spam accounts, bot uploads, illegal content, unauthorized API use and storage abuse.
- If copyright, adult or sexual, illegal, harmful or rights-infringing content is reported, we may review and remove the content, restrict the account or terminate access.
- To report risky content or accounts, contact support@lumatra.io or use the abuse report option in the app.
Age eligibility and children
JourneyMemo accounts and cloud features are for people aged 16 and over. People under 16 are not permitted to create an account or access the app.
International transfers
Firebase, Google and Apple infrastructure may process data on servers outside your country. By using the app, you consent to this processing.
Sale of data
We do not sell your personal data.
Changes
We may update this policy from time to time. Material changes may be communicated in the app or by another appropriate method.