Last updated: 8 October 2026
Your trip plans, saved locations and photos belong to you. This page explains what Photinerary does with your data, what leaves your device, and why.
Your saved locations, trips, shot plans, journal entries and photos are stored on your device. They sync between your own devices through your personal iCloud account, using Apple's private CloudKit database. We can't see this data, and our server doesn't store it.
The camera is used, with your permission, for the AR sky views and the Exposure tool's light meter. It reads the live view on your device; nothing from it is saved or sent anywhere. Camera bodies you add in the Exposure tool, and its settings, stay on that device.
Trip and shot drafts are written by Apple's on-device language model. Your prompt, and the places and plans used to write a draft, aren't sent to us or to any other AI service. Places in a draft are looked up in map data before you see them, and nothing is saved until you review it.
To find places, routes and conditions, the app sends a location or search term to these services. It doesn't send your name or account.
Map tiles show which area is being looked at, not who is looking. Downloaded elevation and building tiles are kept on your device so the same area isn't fetched again.
We don't use analytics or advertising, and we don't sell or share your data with data brokers.
Leave-by reminders and wake-up alarms are scheduled on your device. If you add a trip or shot to your calendar, Photinerary asks only for permission to add events. It can't read your calendar.
You don't need an account to plan trips, save locations or use the tools. Signing in is needed to browse, favorite and suggest Community places, to collaborate on a trip or shot with friends, and to let the trip planner use Community places.
Sign in with Apple is the only way to sign in. Apple gives us an identifier for your account in this app and an email address, which is a private relay address if you chose to hide yours. We get your name only if you let Apple share it, and only the first time you sign in. We never see your Apple ID password.
Our server keeps:
When you browse Community places near you, the app sends the map position you're browsing so the server can list the nearest ones. It isn't saved to your account.
Your own trips, locations, shot plans, journal entries, goals and photos aren't part of your account and aren't uploaded to us, except for the trips and shots you collaborate on and what you choose to share to Activity.
Places you suggest are reviewed before they appear in Community. Once approved, the place's details are visible to other people using Photinerary. If you have a Community profile, the place shows "Added by" your handle, your profile lists it, and your friends see it in Activity, unless you turn off "List my catalog places" in Community Privacy. Your name from Apple is never shown with it.
A Community profile is optional. Other Photinerary Pro members can find it by your handle and see your handle, your profile photo if you add one, the home area you entered, how many friends you have, and the places you got into the catalog. Your name from Apple is shown only if you choose to show it.
Someone becomes your friend only when one of you sends a friend request and the other accepts it. Removing a friend, or blocking someone, ends the friendship and any pending invitation between you, and they aren't told. Blocking also hides each of you from the other. If you report someone, moderators see your handle with the report; the person you reported doesn't.
You can invite friends to collaborate on a trip or shot plan. When you do, we keep a copy of the trip or shot (its name, dates, stops or shot details, and notes) so everyone on it sees the same plan. The people on it see each other's handle, profile photo, and name if they chose to show it. Photos and journal entries aren't included. Stopping collaborating, or deleting the trip or shot, deletes our copy.
Nothing is posted from your library by itself. When you use Share to Activity on a shot plan, trip, journal visit or goal, we keep a copy of what you chose to share: its title, caption, place name, dates, and for a goal its target and progress. The notes and photos in your library aren't included.
Exact coordinates are included only if you turn on Show Exact Spot for that post. With it off, they're removed before the post is saved, not just hidden. Posts are visible to your friends, and you can change a post to Just Me or delete it at any time. Your friends can see who liked a post. A profile photo is resized on your device, and its location and camera details are removed before it's uploaded.
Photinerary Pro is bought and managed through the App Store. We don't see your payment details. The App Store tells our server whether your subscription is active so Pro works on every device you sign in on.
You can delete your account in the app at any time without contacting us: Settings › Account › Delete Account.
This removes your account, your profile and photo, your posts and likes, your friends, blocks and reports, your favorites, your suggestions and the trips and shots you started collaborating on. Your collaborators lose access to those. Places of yours that were already approved stay in Community, with no link to you. We also ask Apple to revoke Sign in with Apple, so Photinerary no longer appears under your Apple ID.
It doesn't touch the trips, locations and photos on your device. To remove those too, delete the app, and manage anything synced to your iCloud account in iCloud settings.
Photinerary isn't directed at children and doesn't knowingly collect data from them.
If a new feature changes what data we collect, we'll update this page before it ships.
Questions about this policy: support@photinerary.com
Photinerary