Privacy policy

Last updated: June 4, 2026.

Bonvoyage is built by Epoch Technologies as a small side project. We collect the minimum data needed to make the app work, we never sell or trade your data, and we don't track you across apps or websites.

What we collect

Account data (Firebase Authentication)

• If you sign in with Apple: your Apple ID, the email Apple supplies (real or relay), and a display name if you chose to share one. Stored in Firebase Authentication.
• If you use the app without signing in: an anonymous user id is generated on-device by Firebase Authentication. No name, email, or personal info is collected.

Trip data (Cloud Firestore)

• The trips you create or join: name, destination, currency, group names, days, activities, expenses, and the FX rate you've set.
• Stored in our Firebase project, region asia-east2.
• Visible only to the trip's members — enforced by Firestore Security Rules that check membership on every read and write.

Location (MapKit)

• Only when you use a map-related feature — searching for a place, picking a location, or centring the map on your current position.
• Apple processes location queries. Bonvoyage never stores your location.

Photos (PhotosUI, only if used)

• Photos you pick as a custom background are downscaled and saved to the app's Documents directory on your device — never uploaded to a server.

Calendar (EventKit, only if used)

• If you use Trips → "Scan my calendar", we read calendar events in a ±30/365 day window with your permission. Every event is filtered locally for flight/hotel patterns and passed through on-device Apple Intelligence for classification. Nothing is uploaded.
• Only the trips you tap "Create" on are saved — to your own account, visible only to you and people you invite.

Tips (Stripe Payment Links)

• If you tip the developer, the payment is processed entirely on Stripe's hosted payment page in Safari — Bonvoyage never sees your card details or Apple Pay token.
• Stripe receives the data needed to process the payment. Their privacy policy: stripe.com/privacy.

What we don't collect

• No third-party analytics. No Firebase Analytics, no Mixpanel, no ad SDKs.
• No tracking across apps or websites. App Tracking Transparency isn't requested because we don't track.
• No browsing history, contacts list, photo library scan, or device fingerprinting.

Apple Intelligence (on-device AI)

The "Generate with AI" feature uses Apple's on-device Foundation Models framework. Your prompts and the generated content never leave the device — Apple handles everything locally on your iPhone's neural engine.

Data sharing

• Trip data is visible only to the trip members you invite.
• Aggregated usage data is not shared with anyone.
• We disclose data only to comply with valid legal process or to protect rights and safety.

Data retention

• Trips persist until you (or the trip owner) delete them.
• When you delete a trip, the parent document is removed; its sub-collections (days, activities, expenses) become orphans until our next manual cleanup pass.
• Tip records (held by Stripe) are retained per Stripe's data retention policy.

Deleting your account

Open Settings → Danger zone → Delete account inside the app and type DELETE to confirm. The app then, in one flow:

• transfers any shared trips you own to the next member (so your travel companions don't lose their data),
• deletes any trips you own alone,
• removes you from shared trips you joined but don't own,
• deletes your tip history,
• deletes your /users/{uid} profile document, and
• deletes your Firebase Authentication account.

Deletion is immediate and permanent. Signing in with Apple again starts a brand-new account; the previous account cannot be restored. For accounts linked to Sign in with Apple, the app may ask you to reauthenticate with Apple immediately before deletion — this is Apple's own security check that confirms it really is you tapping the destructive button.

If you'd prefer to ask us to delete the account for you instead, email bonvoyage@epochtech.ai with your user id and we'll do it manually.

Children

Bonvoyage isn't directed to children under 13. We don't knowingly collect personal data from children.

Security

• All Firestore reads and writes are authenticated and authorised by per-trip membership rules.
• All connections to Firebase use TLS.
• No third-party trackers are bundled.

Changes to this policy

We bump the "Last updated" date when the policy changes. Material changes will be highlighted in the app's release notes.

Contact

bonvoyage@epochtech.ai

Bonvoyage is built by Epoch Technologies and is not affiliated with Apple, Google, Stripe, or any other company referenced here.
← Back home