MyOdyssey Privacy Policy

Last updated: 03.07.2026

1. Data Controller

The data controller responsible for personal data processed in connection with the MyOdyssey app is:

Wiktor Wieczorek
Contact email: wiktor_wieczorek@onet.pl

2. What Data We Process and Why

MyOdyssey is a private travel diary that lets you record visited countries, places, photos, and notes, and optionally compare progress with friends. We process data in three layers, depending on whether it's meant only for you or is shared with others.

2.1 Data Stored Locally on Your Device

This includes:

• your profile name, selected flag/nationality, and continent,
• app preferences (light/dark theme, map style, "UN members only" setting),
• your history of visited countries and places (names, dates, notes, and the coordinates of the locations you pin),
• photos added to your trip entries and your profile picture,
• your friends list and their profile visibility status.

This data is stored exclusively on your device (using mechanisms such as UserDefaults and files in the app's documents directory) and is not visible or accessible to us unless you choose to sync it to the cloud.

Purpose: providing the app's core functionality (saving and displaying your trips).
Legal basis: necessity for the performance of a contract (providing the service) — Art. 6(1)(b) GDPR.

2.2 Data Synced and Shared via CloudKit (Apple)

If you use the app's social features (adding friends, comparing progress), certain data — such as your profile name, flag, number of visited countries, list of visited countries, and profile picture — is synced through Apple CloudKit, linked to your Apple ID.

This allows:

• your data to be available across all your devices signed in with the same Apple ID,
• friends you add to see the information you've chosen to share (e.g., in progress comparisons),
• you to receive notifications when friends add a new country (if you enable this feature).

Data in CloudKit is stored on Apple's servers and is subject to Apple's own iCloud privacy practices. We do not have access to this data beyond what is necessary for the app's features to work — we do not operate our own server or database.

Purpose: cross-device sync and social features (sharing progress with friends).
Legal basis: consent — Art. 6(1)(a) GDPR. Social features are optional and require your active decision (adding a friend / enabling sync).

2.3 Push Notifications

If you have the PRO version and enable "Real-Time Travel Updates," the app will ask for your permission to send system notifications (via Apple Push Notification service) about your friends' activity. You can withdraw this permission at any time in iOS Settings.

2.4 In-App Purchases (MyOdyssey PRO)

Payments for PRO features are handled entirely by Apple (StoreKit / App Store). We do not process or store your payment card details — this information stays entirely with Apple, under their own privacy policy.

3. Data Recipients

Your data may be processed by:

• Apple Inc. — for CloudKit, iCloud, push notifications, and payment processing (App Store),
• friends you add within the app — only to the extent of data you knowingly choose to share with them (name, flag, number/list of visited countries, profile picture).

We do not sell or share your data with third parties for marketing purposes. The app contains no ads and no third-party analytics or tracking tools.

4. Data Retention

• Locally stored data remains on your device until you delete it or uninstall the app.
• Data in CloudKit remains until you delete it (e.g., by deleting your profile, signing out of your Apple ID, or withdrawing consent to sync).

5. Your Rights

Under GDPR, you have the right to:

• access your data,
• have it corrected,
• have it deleted ("right to be forgotten") — available in-app via the "Manage Your Data" section,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
• lodge a complaint with a data protection supervisory authority (e.g. Poland's UODO, or your local authority) if you believe processing violates the law.

To exercise these rights, contact us at the email above, or use the options available directly in the app (Settings → Manage Your Data).

6. Data Security

Data synced to the cloud is protected by Apple CloudKit's security mechanisms, tied to your Apple ID (including two-factor authentication, if enabled). Locally stored data is protected by iOS's app sandboxing.

7. Changes to This Policy

We may update this privacy policy from time to time, e.g. due to changes in app functionality or legal requirements. We will notify you of material changes within the app or by updating the date at the top of this document.

8. Contact

If you have questions about this privacy policy or how your data is processed, contact us:
Email: wiktor_wieczorek@onet.pl