Data controller
The controller of the personal data processed through the TravelWise application (the “app”) and this website is Our Small World (“we”).
For any privacy question or to exercise your rights, contact us at oswtraveladm@gmail.com.
This policy applies to the TravelWise app for iOS and Android and to the travelwise.pt website.
What data we process and why
We only process the data needed for the features you use. The table summarises each category, its purpose and the legal basis (Article 6 GDPR).
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email, password (held by the authentication provider, never in plain text), or the Apple or Google account identifier when you sign in with those services | Create and authenticate the account; recover access | Performance of a contract |
| Profile: name, photo (optional), language, currency and preferences; date of birth (optional) | Identify you to your travel companions; adapt the app. Date of birth is used to adjust the itinerary to the travellers’ ages (prices, age-restricted entries) | Performance of a contract; date of birth is optional and can be removed at any time |
| Trips and itinerary: destinations, cities, dates, nights, transport modes, points of interest, notes, trip members | Provide the planning and sharing service | Performance of a contract |
| Expenses: amounts, currencies, categories, who paid and how it is split, balances; CSV statement files you choose to import; expense location, if you add it | Record and split trip expenses | Performance of a contract |
| Journal: text and photos | Trip journal | Performance of a contract |
| Approximate or precise location, only when you use it | Attach a place to an expense; find restaurants nearby during the trip | Consent (system permission) |
| Device contacts, only if you grant permission | Find people to invite to a trip | Consent (system permission) |
| AI itinerary requests: the trip data needed for the request and the generated result | Generate the suggestions and itineraries you ask for; charge the corresponding credits | Performance of a contract |
| Purchases and credits: the transaction receipt provided by the store, product, date, balance and credit movements. We do not receive card data | Validate the purchase with Apple or Google; grant and account for credits; meet tax obligations | Performance of a contract; legal obligation |
| Notifications: device identifier for push notifications and your preferences | Send the trip and account alerts you chose to receive | Consent (system permission) |
| Technical and diagnostic data: crash reports, device model and system, app version, usage events (for example, “trip created”) | Fix errors, ensure security and understand which features are used | Legitimate interest |
| Suggestions and support requests you send us | Reply and improve the app | Legitimate interest |
We do not use your data for advertising, we do not sell personal data and we do not make automated decisions with legal effects about you.
Device permissions
The app only asks for each permission when it needs it. You can decline or withdraw it in your system settings. The app keeps working, without the corresponding feature.
| Permission | What it is for | If you decline |
|---|---|---|
| Camera | Scan trip invitation QR codes | You can join a trip by pasting the link or code |
| Contacts | Find friends you can invite to trips | You can invite by link or QR |
| Location (while in use) | Attach the current location to an expense and find restaurants nearby during a trip | You enter the place by hand; the “Restaurants near me” action is unavailable |
| Photos (read) | Attach photos to expenses and the journal | You cannot attach photos from the gallery |
| Photos (write) | Save invitation QR codes to your photos, when you choose to share them | You cannot save those images |
| Notifications | Alerts about trips, invitations and completed AI generations | You do not receive alerts outside the app |
Contacts are read on the device to show suggestions.
Processors and third parties
We use the following providers, which process data on our behalf (processors) or as independent controllers when you use their services:
| Provider | What it does | Data involved |
|---|---|---|
| Supabase Inc. | Database, authentication, file storage and server functions | All account and trip data stored in the cloud |
| Google (Firebase Crashlytics, Firebase Analytics, Firebase Cloud Messaging) | Crash reports, usage statistics, push notifications | Technical data, usage events, notification identifier |
| Google (Gemini API) and OpenAI | Language models used by the AI itinerary feature | The trip data needed for the request (cities, dates, nights, transport modes, points already chosen and, if provided, the travellers’ ages); your location in the case of “Restaurants near me”. We do not send your name or email |
| Apple (Sign in with Apple, App Store) and Google (Google Sign-In, Google Play) | Sign-in and in-app purchases | Account identifier, email (which Apple may hide), purchase receipts |
| Google Maps and Apple Maps | Maps and geocoding on the device | Coordinates and place searches shown on the map |
| Unsplash | Trip cover photos | The search term (for example, the destination) and the request IP address |
| Frankfurter (public exchange-rate API) | Exchange rates to convert expenses | Only the currencies and dates requested; no personal data |
| Google Fonts (this website only) | Website typefaces | IP address and browser technical data |
Members of a shared trip see that trip’s data (itinerary, expenses, journal) according to the role they were given.
International transfers
Some providers (Google, OpenAI, Apple, Unsplash and, depending on the region, Supabase) may process data outside the European Economic Area, notably in the United States. These transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on standard contractual clauses approved by the European Commission.
Retention periods
- Account and trip data: while the account exists. When you delete the account, they are erased (see Delete account and data).
- Shared trips: if you delete your account and a trip of yours has other active members, the trip passes to one of them and is not deleted.
- Purchase records: for the period required by tax law.
- Crash reports and statistics: up to 24 months, then anonymised.
- Support emails: for as long as needed to reply and meet legal obligations.
Delete account and data
You can delete your account and associated data at any time in the app, under Settings → Delete account. You can also request it by email at oswtraveladm@gmail.com, from the email address linked to the account.
- Deletion is permanent and cannot be undone.
- Unused credits are lost and not refunded.
- To avoid being charged again, cancel the Premium subscription in the App Store or Google Play.
- Records we are legally required to keep (for example, tax records) are kept for the legal period.
Your rights
Under the GDPR, you have the right to:
- access the data we hold about you;
- rectification of inaccurate data (most can be corrected in the app itself);
- erasure (you can delete your account in the app or by email);
- portability: receive the data you gave us in a structured format;
- object to processing based on legitimate interest;
- restriction of processing;
- withdraw consent at any time, without affecting processing already carried out (for example, by withdrawing permissions in the system settings).
To exercise any right, write to oswtraveladm@gmail.com from the email linked to the account. We reply within one month at most, extendable under the GDPR.
Children
Date of birth is optional and is used only to adapt the itinerary. We do not collect data for advertising or track users. A legal guardian can request deletion of the account and data at any time (see Delete account and data). A trip may include minor travellers (for example, children’s ages to adapt the itinerary), registered by an adult who is responsible for that data.
Security
- Connections between the app and the servers are encrypted (HTTPS/TLS).
- Access to each trip is controlled in the database by per-user rules, not only in the app.
- Sensitive data, such as date of birth, has column-level restricted access.
No system is infallible. If we detect a data breach that poses a risk to you, we will inform you and the supervisory authority, as required by law.
Complaints
If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or with the authority of your country of residence. We would appreciate it if you contacted us first, so we can try to resolve the issue.
Changes to this policy
We may update this policy when the app or the law changes. The date at the top shows the version in force. If the change is significant, we will tell you in the app before it takes effect.