Privacy Policy

About this policy

Stampit is a travel planner and journal provided by Elviont Technologies. This policy covers the app, its account and AI services, these pages, and support correspondence. Elviont Technologies is responsible for the processing described here. Contact stampit@elviont.nl with privacy questions.

Stampit does not sell personal data or include advertising tracking. You can read these pages without an account.

Minimum age. Stampit is for travelers aged 13 and older. New profiles for travelers under 18 start private, with gender hidden, until they choose otherwise. If you believe a child under 13 has created an account, contact us and we will delete it.

Information we handle

Account and profile. Your display name, username, email, date of birth, gender, country, optional profile photo and privacy settings. Sign in with Apple supplies an app-specific identifier and the name or email Apple shares. Email accounts use a password stored as a salted cryptographic hash. We do not receive your Apple Account password.

Your collection. Destinations, coordinates, trip dates, plans, stays, costs, notes, companions, selected photos and stamps are saved to provide your travel collection. Friends, invitations, shared destination content, reports, blocks and aggregate exploration statistics support social features.

Service and purchase information. Our services receive connection information such as IP addresses and request headers, account sessions, notification tokens and settings, error information, AI usage counts, and Apple subscription and transaction identifiers. Apple handles payments; we do not receive your card number. Support receives your email and anything you choose to send.

iCloud, storage and sharing

Your collection is stored on your device. In the current app, new private trip backups and recovery copies use your private iCloud database. The app keeps the latest five recovery copies. New photos are encrypted before being stored in iCloud; shared photos use encrypted records with access references delivered through Stampit’s authenticated service. Account, social and shared-trip metadata remains on Stampit’s server.

Older app versions may have saved backups or photos on our server. Those existing copies can remain available for recovery and migration to iCloud. iCloud synchronization depends on your Apple Account, available storage and connection; signing in to Stampit alone does not confirm a successful backup.

Your profile and aggregate statistics can be visible to other travelers according to your visibility settings. You control whether gender and age appear on your leaderboard profile; your exact birthday is not included in public profile responses. Detailed destinations are shared with accepted collaborators when you invite them. Recipients may retain copies of content you have shared.

AI, maps and photo services

Toki and stamp creation ask for your permission before anything is sent. With it, Toki sends your question and recent conversation through Stampit’s service to OpenAI to generate a response, and stamp creation sends your selected photo and destination to OpenAI to design your stamp. Avoid sharing sensitive information and only submit photos you have permission to use. Turn either permission off in Account → Security & Privacy → AI Features; the app asks again before the next request.

Toki conversation history is stored on your device. Stamp generation results are held temporarily by the service for delivery; artwork you save becomes part of your collection. OpenAI processes requests under its API data policies. Disabling response storage does not mean that all provider security or abuse-monitoring records are immediately erased.

Place search, maps and map snapshots use Apple MapKit. Destination cover photography comes from Unsplash or Pexels using destination search terms. Loading external imagery or opening a map or website shares the request and normal connection information with that provider. Older releases may use Google Places for place search and imagery.

Why we process information

We process information to provide your account and collection, synchronize and recover data, deliver features you request, verify Plus access, send enabled notifications, handle reports and support, and protect the service. Where the GDPR applies, necessary service processing is based on our contract with you; the optional AI features, Toki and stamp creation, use your consent; security, abuse prevention and service administration serve our legitimate interests. Legal obligations may also require processing.

Stampit’s account and application services use Vultr hosting in the Netherlands. Apple provides iCloud, sign-in, MapKit, purchases and push delivery under Apple’s Privacy Policy. OpenAI, photo providers, hosting and email providers process the information required for their services, potentially outside your country. Contact us for information about applicable international-transfer arrangements. We may disclose information when required by law or to protect legal rights.

Retention and deletion

Saved information remains while needed for your collection or account, or until you delete it. Recovery copies can contain an earlier version of a deleted trip. Operational backups, security records, reports, purchase records and support messages may remain where needed for recovery, abuse investigation, legal obligations or resolving a request. There is no single automatic deletion period for every record type.

Use Account → Delete Account to delete your Stampit account and associated live server data. The app also clears the signed-in collection on that device. This does not automatically erase every iCloud record, operational backup or copy held by a collaborator. Manage Stampit’s iCloud data in your Apple settings or contact us for help with a deletion request. Deleting the app or account does not cancel an Apple subscription.

Your choices and rights

You can edit your profile, change visibility, block or report travelers, turn off Toki or stamp creation in AI Features, and control photo, location and notification permissions in iOS Settings. Withdrawal of consent applies to future processing and does not undo processing already completed.

Depending on applicable law, you may request access, correction, deletion or portability of your personal data, restrict processing or object to processing based on legitimate interests. Email stampit@elviont.nl. We may verify your identity and will respond within the applicable legal period. Never send passwords or verification codes. You may complain to your local data-protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

This website and updates

These information pages use no cookies, analytics or external font services. Hosting receives ordinary connection information when serving a page. External links and email services have their own policies. We update this policy when our processing changes; the date above identifies this version. Material changes will be communicated where required.