Privacy Policy

Last updated 2026-10-31

What data the app handles, and where it lives

Passport Stamps stores the places you add — countries, states, cities, and landmarks — along with any status, dates, notes, custom colors, and photos you attach to them. This data is stored locally on your device using Apple's SwiftData framework, and synced to your private iCloud database so it's available on your other devices. We have no backend server of our own, so there is nowhere for this data to go besides your device and your iCloud account.

We don't collect anything

Passport Stamps contains no analytics SDK, no third-party crash-reporting service, no advertising network, and no third-party dependencies of any kind. There is nothing in the app that reports your activity, your location history, or your device information back to us. The App Store's own "App Privacy" label for this app is answered Data Not Collected — that answer is accurate to how the app is actually built, not just how it's described here.

Location access

The app asks for "When In Use" location permission so it can center the map on where you are and make it easier to drop a pin nearby. Your location is read when you tap the locate button (and when the app opens, if you have already allowed it), only to center the map on your device. The app does not store it, log it, or send it anywhere. (When you tap the map or search for a place, the place you chose, not your own location, is sent to Apple Maps to be named — see Place search.)

Place search

When you search for a place, or tap the map to add one, the app uses Apple's Maps services (MapKit search and geocoding). Your search text or the tapped coordinate is sent to Apple to find matching places, under Apple's privacy policy. We run no search service and never see those requests.

Photos

Attaching a photo to a location uses Apple's system Photos picker, which does not grant the app direct access to your photo library — you choose exactly which photos to share. You can also add a photo from the Files app, or, on iPhone and iPad, take one with the camera ("Take Photo"). The camera is used only when you tap that button and only after you grant permission, and the app does not save the picture to your Photos library. Once attached, a photo is stored the same way as your other location data: on your device and in your own private iCloud account.

Crash and hang diagnostics

The app subscribes to Apple's on-device MetricKit framework, which reports crash and hang diagnostics to the app after a problem. The app writes a short summary to the device's own system log. Nothing is sent to us or to anyone else by the app, and no third-party diagnostics service is involved. Separately, if you turn on "Share With App Developers" in your device's Settings, Apple may provide aggregated, anonymous crash and usage reports to developers under Apple's own policy. That sharing is Apple's, not something the app does.

Backups, purchase, and deleting your data

Backup export and restore: Settings can export all your locations, notes, photos, and trip map names to a single JSON file, and restore from one. You choose where that file is saved or shared; the app does not send it anywhere. Treat the file as you would your photos and notes, since it contains them.

Unlock purchase and free trial: the one-time purchase is handled entirely by Apple's App Store; we never see your payment details. The app keeps your trial start date and whether you have unlocked in Apple's iCloud key-value storage (and a local copy) so they follow you across your devices. Your chosen status colors are kept the same way. No name, email address, or other identifier is stored with them.

Delete All Data: Settings can permanently delete every location and trip map. The deletion syncs to your private iCloud and your other devices. It does not affect your purchase or trial.

Delete All Data and shared maps: for a map you own and have shared, Delete All Data ends the share and deletes the map and its places from your account. The people it was shared with are told the map was removed, and each can keep a copy on their own device or discard it; a copy someone chose to keep is theirs, and we cannot remove it. For a map someone else shared with you, Delete All Data leaves the map and every place on it alone, including places you added, because the map belongs to its owner. To remove yourself from such a map, leave it from Shared Maps.

Sharing a TripMap with other people

If you choose to share a TripMap with family or friends, that data moves through Apple's CloudKit sharing (CKShare) directly between your iCloud account and theirs. It never passes through a public database or a server we operate — only Apple's private and shared CloudKit databases are used. The people you invite can see and edit the locations on that specific shared map; they don't get access to the rest of your Passport Stamps data.

Your rights (GDPR, CCPA and similar laws)

We do not collect, hold, sell, or share personal information. We have no server and no database of users, so there is nothing for us to look up, export, correct, or delete on your behalf. Your data lives on your device and in your own iCloud account, and you control it there:

• Access and portability: Settings can export everything you entered to a JSON file.
• Correction: edit or remove any place, note, or photo in the app.
• Deletion: use Delete All Data in Settings (see above). iCloud copies you want removed outside the app are managed in your device's Settings under your Apple Account, iCloud, Manage Storage.
• Sale or sharing of data: none. We do not sell personal information or share it for advertising, and the app has no advertising or tracking.

Apple handles your purchase, iCloud, and Maps requests under its own privacy policy. If you want to ask us anything about this, write to the address under Contact.

Children's privacy

Passport Stamps is not directed at children and does not knowingly collect information from anyone, of any age — because it does not collect information at all.

Changes to this policy

If this policy ever changes — for example, if a future version of the app adds a feature that changes how data is handled — this page will be updated and the "last updated" date above will change.

Contact

Questions about this policy or the app can go to ehjerpe@hjerpefamily.net.