Privacy Policy - Staylog

Staylog ("the Service") takes your privacy seriously and handles personal data in accordance with applicable laws. This policy explains what information we collect, how we use it, how long we retain it, and the rights you have.

1. Information We Collect

We collect the following information:

Account information: email, name/nickname, profile image (collected through Clerk at sign-up)
Travel records: the stays, itineraries, expenses and amounts (multi-currency), places you visit or save, flight and lodging details, notes, journal posts and the photos you upload
Companion sharing information: the account identifier, name and profile image of companions who join the same trip through an invite link
Automatically collected: IP address, browser/device information, access time, page usage, cookies

2. How We Use Information

Collected information is used only for the following purposes:

Account authentication and management
Providing service features such as travel expense and itinerary tracking, map-based place management, automatic currency conversion, and companion sharing
Sending service notices, customer support replies, and policy updates
Preventing abuse and maintaining service stability
Improving the service and analyzing usage statistics

3. Sub-processors and Third Parties

We rely on the following providers to operate the Service. Each processes personal data only within the scope of their assigned task:

Clerk — authentication and account management
Convex — database and backend
Vercel — hosting and access analytics
Sentry — error monitoring

Map, weather and exchange-rate features load data from outside providers to draw the screen: map tiles (OpenStreetMap), weather and city coordinates (Open-Meteo), exchange rates (Frankfurter), and place details for Google Maps links you paste (Google). Only the city, coordinates, currency or link being looked up is sent - never your account information. If you create a read-only share link, anyone who has that link can view the itinerary and route (and journal posts, if you choose) without signing in; expenses and settlement are never public. Except as required by law, we do not share your personal data with other third parties without your consent.

4. Retention Period

We delete collected personal data without undue delay upon account deletion. Where applicable laws (e.g., e-commerce, communications secrecy) require retention for a specified period, we retain only the required data for that period and then delete it.

5. Your Rights

You may exercise the following rights at any time:

Request access, correction, deletion, or restriction of processing
Close your account (see Section 6 for the procedure)
Withdraw consent

You can exercise these rights through the in-app settings page or by contacting us at the address below. We will respond without undue delay.

6. Account and Data Deletion

You may request deletion of your account and associated data at any time. The procedure is as follows:

Delete from settings: you can delete your account from Settings > Data in the app.
Email request: send an email to dev@indieway.xyz from the address you signed up with, with the subject "Account deletion request". After identity verification, your account and data are deleted within 30 days.
Scope of deletion: account profile (email/name/profile image), all travel records you have created (stays, expenses, places, itineraries, flights, lodgings, journal posts, photos), companion invites and memberships you created, and logs.
In a shared trip, records you authored are deleted, while records authored by other companions remain attributed to those users.

Information that we are legally required to retain (e.g., access logs) is kept only for the required period and then deleted. We notify you by email once deletion is complete.

7. Security Measures

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, and separation of administrator accounts.

8. Cookies and Analytics

We use cookies to keep you signed in and to analyze service usage. You can disable cookies in your browser settings, but some features may become unavailable. Access analytics is powered by Vercel Analytics.

9. Changes to This Policy

We will notify you in advance through the Service or by email if we make material changes to this policy. Changes take effect from the effective date stated in the notice.

10. Contact

For privacy inquiries or to exercise your rights, please contact us:

dev@indieway.xyz

1. Information We Collect

We collect the following information:

Account information: email, name/nickname, profile image (collected through Clerk at sign-up)

Travel records: the stays, itineraries, expenses and amounts (multi-currency), places you visit or save, flight and lodging details, notes, journal posts and the photos you upload

Companion sharing information: the account identifier, name and profile image of companions who join the same trip through an invite link

Automatically collected: IP address, browser/device information, access time, page usage, cookies

2. How We Use Information

Collected information is used only for the following purposes:

Account authentication and management

Providing service features such as travel expense and itinerary tracking, map-based place management, automatic currency conversion, and companion sharing

Sending service notices, customer support replies, and policy updates

Preventing abuse and maintaining service stability

Improving the service and analyzing usage statistics

3. Sub-processors and Third Parties

We rely on the following providers to operate the Service. Each processes personal data only within the scope of their assigned task:

Clerk — authentication and account management

Convex — database and backend

Vercel — hosting and access analytics

Sentry — error monitoring

5. Your Rights

You may exercise the following rights at any time:

Request access, correction, deletion, or restriction of processing

Close your account (see Section 6 for the procedure)

Withdraw consent

You can exercise these rights through the in-app settings page or by contacting us at the address below. We will respond without undue delay.

6. Account and Data Deletion

You may request deletion of your account and associated data at any time. The procedure is as follows:

Delete from settings: you can delete your account from Settings > Data in the app.

Email request: send an email to dev@indieway.xyz from the address you signed up with, with the subject "Account deletion request". After identity verification, your account and data are deleted within 30 days.

Scope of deletion: account profile (email/name/profile image), all travel records you have created (stays, expenses, places, itineraries, flights, lodgings, journal posts, photos), companion invites and memberships you created, and logs.

In a shared trip, records you authored are deleted, while records authored by other companions remain attributed to those users.

Information that we are legally required to retain (e.g., access logs) is kept only for the required period and then deleted. We notify you by email once deletion is complete.