Last updated: August 28, 2026

Short version: the guide works without an account, and your saves, trip plans, and notes live on your device. If you sign in, we store your account details. If you use the sharing features, the photos, captions, and comments you post are stored on our servers and shown only to friends you approve — nothing you share is ever public. We run no analytics and no ads, and we sell nothing about you.

What stays on your device

Saved places and events, custom places you add, your trip plans and day arrangements, meal choices, notes, interests, and app preferences are stored in local storage on your device. Deleting the app deletes them. Settings → "Clear local data" removes them manually.

Accounts (optional)

You can use the guide and planner without an account. If you create one — by email, Apple, or Google — we store your email address (or the identifier your sign-in provider shares), a securely hashed password for email accounts (never the password itself), your display name if you set one, and a small profile picture if you add one. Accounts exist to identify you to friends and to let you delete your data. You can delete your account any time in Settings → Delete account — this permanently removes your account and all your shared content (photos, comments, friendships) from our servers.

Sharing — photos, friends, and comments

Sharing is friends-only. There is no public content, no follower system, and no user search — people connect only by exchanging friend codes in person or by invitation.

• Visibility: photos, captions, and comments you post are visible only to you and friends you have accepted. Removing or blocking a friend immediately hides your content from them (and theirs from you).
• Photo metadata is stripped: we remove EXIF data — including embedded GPS — from every uploaded image.
• Location on photos is explicit and optional: if a photo is pinned to a place, that location is a separate field you can see, edit, or remove before and after posting. The app asks permission before using your device's location, and uses it only to suggest a pin.
• Moderation: any photo or comment can be reported. Reported content is automatically hidden after multiple reports and reviewed within 24 hours. Photo owners can delete any comment on their own photos.

Feedback

If you send feedback, the message you write (plus the app version, and your account email if you're signed in) is stored on our server and forwarded to our inbox so we can reply.

Purchases

The lifetime unlock is processed entirely by Apple through the App Store. We never see your payment details. Your unlock is tied to your Apple ID and restores on any device.

Location (optional)

Location is used only while you're using the app — to sort the map and events by distance, and to help pin your photos — never in the background, and never attached to anything without showing you first. Saying no leaves everything else working.

Third-party services

Maps load tiles from OpenStreetMap and CARTO; tile servers see standard web requests but no user identifiers or saved data. When you search for a place to tag a photo, the search text is sent to OpenStreetMap's Nominatim geocoding service. Live event listings are fetched from Ticketmaster. Weather uses a forecast service with fixed New York coordinates — never your location. Our servers run on Vercel, with account and sharing data stored in a managed Postgres database (Neon). External links (tickets, reservations, venue sites) open in your browser, where those sites' own policies apply.