Whereto Privacy

Last updated: 2 June 2026

Whereto is designed so the people using it own their data. This policy describes what that means in practice.

What Whereto stores

Whereto stores the trips, lists, pins, addresses, photos, notes and categories you create. Everything lives in your private iCloud account on Apple's servers, accessible only to you and the people you have explicitly shared a trip with.

The app also stores three small preferences on your device only:

• The display name you set in Settings (used to attribute pins you add when sharing trips with others)
• Your appearance preference (light, dark, or system)
• The last version of Whereto you ran (used to decide when to show the "What's new" sheet)

What Whereto does not do

• Whereto does not run any servers that receive your data.
• Whereto does not have a user-account system. There is no signup, no password, no email collection.
• Whereto does not track your usage, your location history, or your behaviour inside the app.
• Whereto does not run analytics, advertising, attribution or crash-reporting SDKs.
• Whereto does not sell, rent, or share your data with anyone.

Third-party services

Google Maps and Google Places

When you search for a place, tag a pin, or view a place's photos and hours, Whereto sends Google the place name, identifier, or coordinate so that Google can return the result. Google receives a server-to-server request keyed to a developer API key — not to your Apple ID or any other identifier tied to you.

Google's privacy policy applies to those requests: policies.google.com/privacy

Apple iCloud (CloudKit)

Your trip data syncs to iCloud, and is shared with collaborators through Apple's CloudKit service. Apple's privacy policy applies: apple.com/legal/privacy

When you share a trip as a tap-to-open link, the trip snapshot is stored in a public CloudKit database with a random identifier (the link). Anyone with the link can open the snapshot. Snapshots expire after 90 days.

Location data

Whereto asks for location permission so it can show your current location on the map and calculate distances from you to pins. Your location is used only inside the app, in the current session. It is never transmitted to Whereto's servers (because there are none), and never sent to any third party other than Google when you actively use a Google-Places-backed feature.

If you decline the location permission, the rest of the app continues to work — you just don't see the "current location" marker or distance read-outs.

Children

Whereto does not knowingly collect data from children under 13. There is no signup flow that could collect such data in the first place.

Deleting your data

1. Delete the app from your device — this clears the on-device store.
2. Sign in to icloud.com, open Settings → Manage Storage → Whereto → Delete documents and data. This removes the iCloud copy.

Contact

Questions about this policy or about how your data is handled:

Mark Catanzariti
mark.catanzariti@me.com