Privacy Policy

Last updated: 29 September 2026

Summary

Vespira is a travel discovery app. We designed it to need as little of your data as possible. We do not require an account, and we do not sell personal data.

What we store on your device

• Your saved places, visited marks, plans, chosen language, destination, preferences and reminder settings are kept on your device.
• When you sign in and use trip sync, your trip data is also uploaded to your account. Shared trips and Memory Album uploads are stored on our server when you use those features.
• Clearing site data removes browser storage. It does not delete your account, synced trips or shared uploads.

What our server processes

• Places, maps and live information: Vespira uses its own place pool derived from Overture Maps, editorial content, OpenStreetMap, Wikimedia and, where available, Google Places. Search terms, the destination, language or coordinates may be sent to the services needed to answer your request. Your device also requests map tiles and media from their providers. Google's handling is governed by the Google Privacy Policy.
• Location: location access is optional. Coordinates help find a destination, sort nearby places and provide relevant travel information. Vespira does not request background location permission.
• Accounts and trip sync: if you create an account, your sign-in information, name, email address and synced trip data are processed by the account service. Vespira supports Supabase authentication and trip storage, including enabled Apple or Google sign-in providers. A legacy account service is also supported by Vespira's server.
• AI guide and photo questions: after you agree to AI processing, your request, recent conversation, selected destination and language, relevant place and saved-trip context, and any photo you choose to submit are sent through our server to Anthropic. The guide can also use web search. You can continue browsing places without using the AI guide.
• Memory Album: creating an album and uploading photos require an account. We store the album name, photos, uploader and owner identity, timestamps, moderation state and a daily derived IP value for upload limits. Anyone with the album code can view visible photos; treat the code as a shared link. Reporting a photo hides it for review. The owner can remove photos and block uploaders.
• Shared trips: a shared trip's saved places and plan are stored on our server so people with its code can access it. Share the code only with people you intend to include.
• Feedback and support: feedback can include your text, rating, account email, destination, language and current screen.
• Reservation requests: where an active partner is available, a request you submit contains your name, contact details, party size, date, time and notes. It is stored for processing and may be sent to that partner. A request is not a confirmed booking.
• Purchases and Premium: Premium subscriptions are sold only through the App Store and Google Play. Apple or Google processes your payment; Vespira never receives your card or bank details. We use RevenueCat to manage subscription status: your Vespira account identifier, the purchased product, the store, transaction dates and renewal or expiry dates are processed by RevenueCat and sent to our server, which stores your Premium status (expiry date, product and store environment) linked to your account identifier. RevenueCat's handling is governed by the RevenueCat Privacy Policy. Daily limits (guide questions, new city scans, postcards) are counted per account for signed-in Premium members and per IP address otherwise; the counters are kept for the current day only.
• Analytics: we count product events and screen usage to improve the app. The event counters do not use an account identifier.
• Session patterns: to understand how travellers browse (e.g. “opened the See tab, then viewed two places”), the app groups the events of a single visit under a random session number. This number exists only in your browser's memory, is never stored on your device, is not linked to any account, IP address or device in the event record. These session records are deleted from our server after 90 days.
• On-device flags: the app saves a few small values in your browser's local storage — the date of your first visit, which explorer quests you have completed, and whether you dismissed a prompt. These stay on your device and are not uploaded as a device identifier. They let the app count aggregate events such as “a returning visitor opened the app” or “a device opened the app for the first time”. Clearing your browser data removes them.
• Error reports and request processing: to diagnose failures, the app sends error messages, stack traces, app version, screen, browser or device information and the page path. Our server processes IP addresses to handle requests and apply rate limits. Error text and URLs can contain information entered while using the app.

Permissions

Location is optional and only requested when you tap the location button. Photo or camera access is used when you choose an image feature. Optional local notifications remind you about a trip or an active route; you can cancel a route reminder in the app or turn notifications off in device settings.

Retention and deletion

Memory Albums expire 14 days after creation and are removed by the server's cleanup task. Owners can delete an album earlier; uploaders can delete their own photos. Shared trips expire after 90 days without an update. Session journey records are retained for up to 90 days. Aggregate counters are maintained separately.

Use Profile → Account settings → Delete account to remove your account and the data linked to it: synced trips, the Memory Albums you created (including every photo in them), photos you uploaded to other albums, feedback sent from your account or email, reservation requests made from your account or with your email as contact, and your Premium status record. Shared trips created with a legacy email/password account are removed too; other shared trips are not linked to any account and expire after 90 days. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account settings. Premium status is otherwise kept while your account exists. The account deletion page also provides help if you no longer have the app. For data access, correction or deletion requests, contact the address below.

Children

Vespira is not directed to children under 13 (or the age of digital consent in your country) and does not knowingly collect their data.

Your rights (GDPR/CCPA)

You can manage local data on your device and request access, correction or deletion of information we process about you. Contact us below. Rights and response requirements depend on the law applicable to your request.

Image credits

Place photos may come from Google Places or openly licensed sources, including Wikimedia Commons (CC BY-SA, CC BY, CC0 and public-domain works). Source, author and license information is displayed with an image when provided by its source. Representative illustrations are labeled and do not document a specific venue. If you are a rights holder and believe an image is used incorrectly, contact us below and we will review it promptly.

Contact

Email: info@vespira.app

Vespira · Kuşadası, Aydın, Türkiye