Privacy Policy

You do not create an account. The app signs in anonymously, which means it is given a randomly generated identifier. That identifier is not linked to your name, email address, phone number, or Apple ID, and we have no way to work backwards from it to you.

Reinstalling the app produces a new identifier. Restoring your purchases moves your unlocked courses onto the new one.

Payments are handled entirely by Apple. We never see or receive your payment details.

When a purchase completes, we record: the anonymous identifier above, which course was unlocked, the product identifier, which store it came from, and the time of purchase. We keep this so that your courses stay unlocked across devices and reinstalls.

Purchases are verified through RevenueCat, which receives the same anonymous identifier along with the receipt information Apple provides.

We do not collect your location — see "What stays on your device" below for how the course map can use it. We do not collect your photos either: the travel card the app can make from one is put together on your phone, and it goes only where you send it.

There is no advertising and no cross-app tracking. The app never reads your device's advertising identifier, and we do not build an advertising profile of you or sell or share data for advertising.

The app does record anonymous usage events — for example that a course map was opened or a purchase was made — tied only to the random identifier above. This tells us how the app is used overall, never who you are. If the app crashes, a technical report (what went wrong, device model, OS version) is sent so we can fix it; it contains no name, email, or location.

Your progress through the app stays on your phone: whether you have finished the introduction, which courses are unlocked, which map introductions have played, and which messages you have already read. The anonymous sign-in described above is kept there too, along with a cached copy of the course text and photos so the app works without a connection.

Deleting the app removes all of it.

If you tap the locate button on a course map and allow location access, the map shows where you are as a dot and can center on you. The app does not save your position and does not send it to our servers, Supabase, PostHog, Sentry or RevenueCat. The dot itself is drawn by Google Maps, which handles location under its own privacy policy (see below). You can turn location access off at any time in iOS Settings, and the maps still work without it.

On a course you have unlocked, you can make a travel card from a photo you take or pick from your library. The card is composed on your phone; the photo and the card are never uploaded to our servers or to Supabase, PostHog, Sentry or RevenueCat. The card is written to your photo library only when you choose Save, or Instagram (which opens the saved card), or when you pick a save option in the share sheet yourself. Sharing hands the card to the app you pick, which handles it under its own privacy policy. The only record we keep is an anonymous usage event saying a card was made or shared and to which kind of destination — never the photo itself. Camera and photo access can be turned off at any time in iOS Settings; the rest of the app works without them.

Course content and purchase records are hosted on Supabase. Maps are displayed using Google Maps, which operates under its own terms and privacy policy. Purchases are processed by Apple and verified through RevenueCat. The anonymous usage events described above are processed by PostHog, and crash reports by Sentry — each receives only the anonymous identifier and technical data, never your identity.

Because there is no account, deleting the app removes everything held on your device. To have the purchase records tied to your anonymous identifier deleted from our side as well, contact us at support@tomodatti.com. Note that deleting them means the app can no longer restore those purchases for you.

Tomodatti is not directed at children, and we do not knowingly collect information from them. Since the app collects no personal information from anyone, there is nothing collected from a child either.

If this policy changes, the effective date above changes with it. Questions about privacy can be sent to support@tomodatti.com.