Privacy Policy

Last Updated: November 25, 2025

Citizen of the Sky ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, username, profile picture
• User Content: Travel itineraries, photos, descriptions, and other content you create
• Profile Information: Bio, travel preferences, and other optional profile details

1.2 Information Collected Automatically

• Usage Data: How you interact with the app, features used, time spent
• Device Information: Device type, operating system, unique device identifiers
• Log Data: IP address, app crashes, system activity

1.3 Third-Party Authentication

When you sign in using third-party services, we receive:

• Google Sign-In: Name, email address, profile picture
• Facebook Login: Name, email address, profile picture
• Apple Sign-In: Name (if provided), email or private relay email

2. How We Use Your Information

• Provide, maintain, and improve our services
• Create and manage your account
• Enable you to create and share travel itineraries
• Facilitate social features (following, saving itineraries)
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect and prevent fraud and abuse

3. Information Sharing and Disclosure

3.1 Public Information

The following information is publicly visible to other users:

• Your username, name, and profile picture
• Your bio and profile information
• Itineraries you create and share
• Your followers and following lists

3.2 Service Providers

We share information with third-party service providers:

• Firebase (Google): Authentication, database, storage, analytics
• Cloud Storage: For storing photos and media

3.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

4. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security assessments
• Access controls and monitoring

5. Your Rights and Choices

5.1 Access and Update

You can access and update your information through your account settings.

5.2 Delete Your Account

You can delete your account at any time through Settings > Account > Delete Account. This will permanently remove:

• Your profile and account information
• All itineraries you created
• Your saved itineraries and follows

5.3 Data Portability

You can request a copy of your data by contacting us.

6. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending you a notification (for material changes)

9. California Privacy Rights

If you are a California resident, you have additional rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell your information)
• Right to non-discrimination

10. GDPR Rights (EU Users)

If you are in the European Union, you have rights under GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object