Vespucci

Privacy

Last updated: 27 August 2026

This policy covers the Vespucci mobile app and this website. It is written to be read, not to be survivable in court. The controller is Leonardo Rignanese, an individual based in Italy, reachable at vespucci@leorigna.com.

What is stored about you

• Your email address, and a bcrypt hash of your password if you signed up with one. A hash is not reversible: nobody here can read your password, including us.
• An identifier from Google or Apple if you signed in that way. Not your Google or Apple password — we never see it.
• The countries you mark, and for each one whether you have been, want to go, or are going, plus how long you stayed.
• Optional profile details you type: a display name, a traveller type, interests.
• Purchase state: whether you have paid, until when, and a customer id from the payment processor. Card numbers never reach us.
• A Telegram chat id, only if you deliberately link Telegram.

Analytics: what deliberately is not collected

The app records which screens are opened and which actions happen — “a country was added”, “the paywall was shown”. There is a rule written into the source, at the top of the file every event must pass through, that these events may never carry your email address, your name, any token, your user id, which countries you marked, which country you tapped, your passport nationality, or any text you typed.

So the analytics can say that somebody added a country. They cannot say who, and they cannot say which country. That is a design constraint, not a promise of good behaviour.

Who else sees anything

• Google / Apple — only if you use their sign-in.
• The app stores — they handle purchases and tell us only whether an entitlement is active.
• Sentry — crash and error reports. Local variables are switched off in our configuration, specifically so that a crash inside a sign-in cannot carry a password into a third party.
• Resend — sends the sign-in emails.
• ip‑api.com — your IP address is used once, at the moment a price is shown, to work out which country you are in so the price can suit it. The country is kept; the lookup is not stored against your account.

Your data is not sold, and it is not handed to advertisers.

Where it lives

On servers in Germany, run by Hetzner. If you are outside the EU your data is therefore stored inside it.

How long it is kept

Until you delete your account. Then it goes — the account row and the countries with it.

Deleting everything

In the app: Settings → Delete account. It is immediate and it is not a support ticket. If you would rather ask a human, write to vespucci@leorigna.com.

Your rights

Under the GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Write to the address above. You also have the right to complain to your national data protection authority; in Italy that is the Garante per la protezione dei dati personali.

Children

Vespucci is not aimed at children under 13 and we do not knowingly keep data about them.

Changes

If this policy changes in a way that matters, the date at the top changes and the app will say so before the change takes effect.