Privacy Policy

To create an account we collect your email address and a name. You can optionally add a display name, home country and timezone, preferred currency, profile and cover images, a bio, travel style, interests and languages. Authentication is managed by our platform provider; we do not store your password in plaintext.

The travel content you create — Journeys, stops, routes, planned trips, itineraries, bookings, expenses, checklists and notes — is stored so you can view, edit and share it. You control each Journey’s privacy (private, link, friends or public). Public or link-shared Journeys are visible only to the people you choose to share them with, and sensitive locations can be approximated or hidden.

Travel@lasT uses your device location for features like flying the globe to your position and GPS tracking while you are actively using the app. Location collection is foreground only: tracking pauses when the app is backgrounded, closed or the screen locks. We do not collect background location. GPS samples captured during an active tracking session are stored as part of that Journey so you can later view routes, distance and statistics. You can turn location tracking off at any time in Settings.

You may import recorded activities (FIT, GPX, TCX or files from services such as Strava, Garmin or Polar). The metrics in those files — such as route, distance, elevation, heart rate, cadence, power and calories — are stored to show your activity and statistics. Imported files are processed only to extract these metrics and are not re-shared.

Photos and videos you upload are stored in private storage and accessed through time-limited, signed links. Media is never made public unless you explicitly share a Journey and enable photo sharing for it. An optional, AI-assisted memory-placement review helps position memories on the globe; you approve placement, and your corrected values always take precedence.

Journey Pal voice input uses your device’s speech-recognition capability to turn your spoken request into text. The microphone is accessed only when you tap the voice control — Travel@lasT never listens in the background. We do not save raw audio recordings. The resulting transcript text is sent to Journey Pal as a normal message; your device or browser speech service may process speech online to produce the transcript.

When you use Journey Pal (typed or voice), your message and relevant saved Journey context are sent to our AI service to generate a reply or perform an approved action. Prompts are processed to produce the response and are not stored in analytics. Usage of cost-sensitive AI actions is metered by our server-side Cost Governor; the assistant cannot grant itself entitlements, payments or quota.

On the web, digital subscriptions (Plus Monthly, Plus Annual) and one-time Trip Passes are processed by our payment provider, Paystack. Payment card details are handled by Paystack — we do not store full card numbers. We retain a subscription record, product, billing period and status to manage your entitlement. On Android, where required, digital purchases are processed by Google Play’s billing system and verified by our backend before entitlement is granted. Your paid entitlement is recognised across web and mobile — you do not need to purchase twice.

We use privacy-safe, aggregate analytics to understand feature use and improve the product — for example counts of registrations, Journeys created, Journey Pal actions and share events. Commercial analytics available to administrators are aggregate only; raw prompts and private Journey content are not exposed in analytics views.

We use limited device and browser information — such as online/offline state, approximate locale for currency display, and screen size — to adapt the experience. We do not use advertising identifiers and do not show advertising.

Travel@lasT relies on: our application platform (authentication, database, file storage and AI); Google Maps, Earth and Places (globe, maps, geocoding and place discovery); Paystack and Google Play (payments); a currency-rate service (Frankfurter/ECB); your browser’s speech service (voice input); and optional services you connect yourself, such as Google Calendar, Google Drive or Gmail. Each processor handles data under its own terms to provide the feature you requested.

Data is transmitted over encrypted connections. Access to your records is governed by per-record permissions so other users can only see content you have shared with them. We retain your data for as long as your account is active. When you delete your account, your data is removed through a secured deletion process with a verification and finalisation step.

You can edit your profile, adjust privacy and sharing per Journey, turn location tracking and notifications on or off, and disconnect optional integrations at any time in Settings. You can delete your account and its data from Settings → Account → Delete account (or the same page on the web at travel-last.com/account). Deletion is irreversible after a short grace period and uses the same secured engine on every platform.

Travel@lasT is not directed at children and is not intended for users under the age required to create an account in their region. We do not knowingly collect personal information from children.

We may update this policy as features change; the effective date above reflects the current version. If you have questions about this policy or your data, contact us through the Contact page or your in-app support channel.