Privacy & Permissions
The Android version is still in development and testing and has not been officially released. The following describes the currently planned features; the actual screens, availability, and details may change, and some features are not yet enabled.
This page explains the permissions and data handling the app uses. For the full legal text, see the Privacy Policy.
App Permissions
The permissions declared by the Android version are very minimal:
| Permission | Purpose |
|---|---|
| Network (INTERNET / network state) | Loading online content such as articles, the forum, AI, and sync |
| Notifications (POST_NOTIFICATIONS) | Push for forum alerts, private messages, trip reminders, etc. |
The app does not request location (no GPS), camera, or storage / media permissions (the photo picker needs no permission).
The Android 13+ notification permission is not yet actively requested in the app. The app creates notification channels, but if the system hasn't granted the notification permission, push may be silently blocked; you can enable it yourself under System Settings → Apps → this app → Notifications. See Notifications & Widgets.
Privacy and Security Controls
- Document vault: unlocked with biometrics (BiometricPrompt), with confidential data encrypted by the Android Keystore. See Travel Records & Documents.
- Photo privacy: uploaded trip photos have their EXIF / GPS removed before being downscaled and stored.
- Clear cache: in settings you can clear the local database and cache directories.
- App permissions shortcut: a one-tap way to open the system's details page for this app to adjust permissions.
- Legal documents: the Terms of Service / Privacy Policy are shown as embedded web pages (with an offline fallback).
Data Storage and Sync
- Travel data (trips, expenses, lists, journals, photo metadata, saved places, etc.): stored on the local device (Room). You can enable trip sync in settings to sync across devices; turning it off keeps it stored only on the device.
- Document vault confidential fields: kept encrypted on this device only, not uploaded and not synced.
- Trip photos: synced via the app's cloud storage (R2), with EXIF / GPS removed first.
- AI conversations: saved in the cloud when "Sync conversations to account" is on and you're signed in; you can turn it off at any time. In cloud mode, your questions are sent to the server and the AI service for processing (on-device mode is fully offline).
Appearance and Language
- Appearance: Automatic / Light / Dark.
- Language: per-app language (8 languages, on Android 13 or later). See Getting Started.