Privacy Policy

Last updated 25 September 2026

The short version. Borneo has no accounts, no analytics, no advertising, and no tracking of any kind. It contains no third-party SDKs. Your trips, packing lists and plans are stored on your iPhone and are never sent to me. A trip you choose to share with friends is kept in iCloud so they can see it — Apple stores it, not me. I cannot see your data, because I never receive it.

What stays on your device

Everything you create in Borneo is stored locally on your iPhone:

Your trips, destinations and travel dates
Your packing lists and the items you tick off
The places you selected and your generated day-by-day plans
Cached place descriptions and photos, so saved trips open offline
Your chosen app language

Unless you share a trip (see below), none of this is transmitted anywhere. Deleting the app deletes all of it permanently.

Sharing a trip with friends

Sharing is optional and happens only when you invite someone to a trip. The shared trip is then kept in step through Apple's iCloud (CloudKit):

The trip is stored in your own iCloud account, and the people you invite see it through theirs. It is not stored on any server of mine, and I have no access to it.
What is shared is the trip itself: destination and dates, packing list and who brings what, the places and day plans, votes on places, and expenses — who paid what, and for what.
The name you set in Settings is shown to the people on a shared trip, so they can see who voted and who paid. Friends you add to the expenses by name, who do not use the app, are stored with the trip under the name you give them.
You can stop sharing at any time. Apple's handling of iCloud data is governed by Apple's privacy policy.

When you share a plan as a picture or a PDF instead, it is created on your iPhone and handed to the iOS share sheet; it goes only where you send it.

Changing a plan with AI

The "change your plan with AI" feature runs on your iPhone using Apple Intelligence. What you type and your plan are processed on the device and are not sent to me or to any AI provider.

What leaves your device

To find destinations and places, Borneo queries a small number of public, volunteer-run services directly from your iPhone. There is no server of mine in between. When your device contacts these services it necessarily reveals your IP address and what you searched for, along with a User-Agent string identifying the app (Borneo/1.0) and a contact address for me, which their usage policies require.

Nominatim (OpenStreetMap) — receives the destination name you type, in order to turn it into map coordinates. Privacy policy
Overpass API (OpenStreetMap) — receives the coordinates of your chosen destination and the categories of place you ticked, in order to return places nearby. Privacy policy
Wikidata and Wikipedia — receive the identifiers of the places shown to you, in order to return their descriptions and photos. Privacy policy

These are independent organisations, not partners of mine, and their own privacy policies govern what they do with the requests they receive. I receive no copy of these requests and no report about them.

Location

Borneo requests location access for two purposes:

Prefilling your current city when you create a trip. The accuracy requested is deliberately coarse — roughly one kilometre, enough to name a city. That coordinate is sent to Nominatim to look up the city name, and is then discarded.
The Today screen during a trip, to show how far the next stop is and to re-plan the rest of the day from where you are. This uses an accuracy of about a hundred metres and never leaves your iPhone.

Permission is when in use only. The app never accesses your location in the background.
Your location is not stored, not logged, not shared with friends on a shared trip, and never sent to me.
If you decline location access, the app works normally; you type the destination yourself, and the Today screen simply leaves out distances from you.

Opening maps

When you tap to view a place on a map or to route to it, Borneo hands off to Apple Maps or Google Maps by opening a link containing the coordinates of that place. From that point on you are in the other app, and Apple's or Google's privacy policy applies.

What Borneo does not do

No user accounts, sign-in, or profiles of my own (shared trips use your Apple iCloud account)
No analytics, crash reporting, or usage measurement
No advertising and no advertising identifiers
No tracking, and no sharing of data with data brokers
No third-party SDKs or frameworks of any kind
No selling of data — there is no data to sell

Children

Borneo is not directed at children and collects no personal information from anyone, children included.

Your rights

Data protection law gives you rights to access, correct, and delete personal data held about you. In Borneo's case these are satisfied directly: all your data is already in your possession on your own device or in your own iCloud account. Deleting the app erases what is on the device; a shared trip can be removed by stopping sharing, or from your iCloud storage settings. I hold no copy, so there is nothing for you to request from me.

Changes to this policy

If the app changes in a way that affects privacy, this page will be updated and the date at the top will change. If a future version ever introduces accounts or collects data, that will be described here before it ships.

Contact

Questions about this policy: olekthunder@t-online.de