Travel Check — Privacy Policy

Last updated: 2026-04-29

This Privacy Policy describes how Travel Check ("we", "the app") handles your personal data when you use our mobile application.

1. Data Controller

Contact: [email protected]

2. What data we collect

• Account data: email address, name, password (stored as a hash by our authentication provider Keycloak).
• App content: travels you create — names, dates, packing item lists, packed/unpacked status.
• Authentication tokens: stored locally on your device in secure storage (Android Keystore / iOS Keychain).

3. What data we do NOT collect

• Location (GPS)
• Contacts, photos, files, or any other device data
• Browsing history or device identifiers for advertising
• Health, financial, or biometric data

4. How we use your data

Your data is used solely to provide the core functionality of the app: account authentication, syncing your travel lists across devices, and storing your packing items. We do not use your data for advertising, analytics, profiling, or sharing with third parties.

5. Third-party services

• Keycloak (self-hosted on our infrastructure) — handles authentication. https://www.keycloak.org/
• Google Sign-In — optional. If you sign in with Google, we receive only your email and name. See Google's Privacy Policy.

6. Data storage and security

Data is stored on our servers hosted in the European Union (Hetzner, Germany). All communication between the app and our servers is encrypted via HTTPS/TLS. Passwords are never stored in plain text — only password hashes are stored by Keycloak.

7. Data retention

We keep your data for as long as your account is active. Upon account deletion (see below), your data is permanently removed from our systems within 30 days.

8. Your rights (GDPR)

• Right to access your data
• Right to rectify your data
• Right to erase your data ("right to be forgotten")
• Right to data portability
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at [email protected].

9. Account deletion

You can request account and data deletion at any time. Detailed instructions are available at our account deletion page.

10. Children's privacy

Travel Check is intended for users aged 18 and older. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top will reflect any changes. Material changes will be communicated through the app.

12. Contact

Questions? Email [email protected].