Privacy Policy

1. Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use Xplorr's apps, including Xplorr and Xpo, our websites, and related services (the "Service"). This Policy applies to users globally unless superseded by jurisdiction-specific notices.

2. Information We Collect

Account & Profile: name, username, avatar, interests, private-account setting, age confirmation, referral code, and onboarding state. Your email and sign-in identity, from email sign-up or from Apple or Google sign-in. If you sign up with email, your password, which Supabase Auth stores only as a salted hash. Xpo professional/organizer profile details you choose to add, such as bio. We don't ask for your personal phone number, birthday, or home address. If you create an Xpo organizer profile, you can choose to add a support email, phone number, and business address, which may be shown publicly.

Photos & Media: camera and photo library for posts, and expense receipts. Posts and avatars are stored in public media storage. Expense receipts are stored in private storage.

Messages: direct messages and group messages are stored on our servers (Supabase). They are visible to the people in the conversation, and we may review them when needed for safety, moderation, or legal reasons (for example, if a message is reported). Messages are text only today; photo messages aren't available yet. Messages are not end-to-end encrypted.

Location: Xplorr uses your location only while you're using the app; we don't collect location in the background. If you allow it, we use foreground (while-using) location to tag posts. Posts are visible according to that post's visibility. Saving a post to your bucket list copies that post's location. Your live location is not stored on our servers. Photo location metadata may be read when you attach media. A post's location comes from your device's GPS, from the photo's location data (EXIF), or from a place you search for. We store its coordinates and address (including city), and send the coordinates to Google to look up the address. When you open the app, it may compare your current location with your saved places on your device and show a local notification if one is nearby. Your location isn't sent to our servers for this. When you use Nearby in Discover, your current coordinates are sent to our servers for that search and aren't stored.

Other Content: trips and itineraries, expenses, follows, likes, comments, reports, blocks, your push token and a device identifier (iOS identifier for vendor or Android ID), and ticket orders.

Analytics (app only): PostHog collects usage events in the mobile app and identifies signed-in users by user id, username, and name. PostHog also receives device and app info (app version, OS, device model), app lifecycle and screen-view events, and approximate location derived from your IP address. Session replay is off in production by default. If session replay is enabled, it masks inputs and images.

Crash Reporting (app only): Sentry collects error and performance data, with no user identity attached.

Website: xplorr.live does not use an analytics SDK. Our hosting provider keeps standard request logs. Our website loads fonts from Google Fonts, so Google receives your IP address when you visit.

Trip Details: destination, dates, and preferences you enter so we can generate a trip.

Hermes: text you enter in Hermes trip planning and Hermes chat, and the photo you choose for caption suggestions.

Payments: if you make a purchase, payment is handled by Stripe. We do not store your full card number.

Cookies & Similar Technologies (web): cookies or similar technologies needed for sign-in and functionality.

3. How We Use Information

• Provide, maintain, and improve the Service and its features, including maps, QR code features, and safety tools.
• Generate trip itineraries from the destination, dates, and preferences you enter, and provide Hermes chat and caption suggestions.
• Deliver direct messages and group messages, and power social features such as follows, comments, likes, and discovery.
• Communicate with you about updates, security, and support. We don't send marketing emails today; if we start, you'll be able to opt out.
• Monitor and enforce safety, security, legal compliance, and anti-fraud measures.
• Measure performance in the mobile app, run product analytics there, and diagnose crashes.

4. Legal Bases (GDPR)

Where the GDPR applies, we rely on: (i) contract, to provide the Service, messaging, and itineraries; (ii) legitimate interests, for security, analytics, and product improvement; (iii) consent, for example for precise location and, if we send them, marketing emails; and (iv) legal obligation.

5. Sharing of Information

Service Providers: we use these providers to run the Service: Supabase; Netlify; Railway (Hermes); OpenAI, for Hermes trip planning, Hermes chat, and caption suggestions; Google, for Places, Maps, Geocoding, Sign-In, and Google Fonts; Apple, for Sign in with Apple and Maps; Stripe, for payments, Google Pay, and Connect payouts; Expo and EAS, for push notifications via APNs and FCM and for app updates; Sentry; PostHog; and Ticketmaster, for events data. Booking.com affiliate links are used only when enabled.

AI Providers: When you use Hermes trip planning, Hermes chat, or caption suggestions, the text you enter, relevant trip and place details, and (for caption suggestions) the selected photo are sent to OpenAI through its API to generate a response. We do not send your password, payment information, or direct messages for this purpose.

Saving places from links and screenshots. When you save a place by sharing a link, caption, or screenshot, Xplorr sends that content to our service providers, OpenAI (to read the text and image) and Google (to identify the place), only to find the place you meant. Screenshots are processed in memory and are not stored by Xplorr. OpenAI may keep this content for up to 30 days for abuse monitoring and, under its API terms, does not use it to train its models. We keep the place you confirm and a copy of the link with its query string removed.

Places, Maps & Events Data: to show places, maps, and events, we send search terms and locations to Google, Apple Maps, and Ticketmaster.

Other Users: content you share publicly or with followers is visible to others as configured. Direct messages and group messages are visible to the people in the conversation. Location in content may be re-shared by others.

Travel Partners: when Booking.com affiliate links are enabled, and you follow one, Booking.com processes your information under its own policy.

No Sale: we do not sell your personal information.

Legal & Safety: to comply with law, enforce our terms, protect rights, property, and safety, or in connection with a merger, acquisition, or asset sale.

6. Your Choices & Rights

Delete Your Account: you can delete your account in the app from Profile, then the settings gear, then Account, then Delete Account, or on the web at the delete account page. You can also email JRogers@xplorr.live from the address on the account with the subject "Delete my Xplorr account". We delete email requests within 30 days. Section 7 describes what is deleted, what is kept, and how long backups may last.

Access & Correction: request access to, or correction of, your personal data, subject to legal exceptions.

Marketing Opt-Out: We don't send marketing emails today; if we start, you'll be able to opt out. You can adjust notification settings in the app.

Location Controls: turn device location permissions on or off. Xplorr uses your location only while you're using the app; we don't collect location in the background. Photo location metadata may be read when you attach media, and you can remove it before uploading if you wish.

QR Codes & Discoverability: avoid including scannable codes if you don't want to disclose precise locations. Deleting posts removes codes from your profile, though copies may persist with others who already have them.

GDPR & Other Rights: where applicable, you may object to or restrict processing, request portability, and withdraw consent. Contact JRogers@xplorr.live to exercise your rights. We may verify your identity first.

7. Data Retention

We keep information as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. See our Delete your account page for steps and details.

When you delete your account, we immediately and permanently delete the following, with no undo: your profile (name, username, avatar, and interests), your email and sign-in identity, posts and their photos, saves and bucket list, trips and itineraries, expenses and receipts, comments, likes, follows, blocks, messages you sent, reactions and read receipts, notifications and push tokens, reports, events you created, organizer and professional profiles, ticket orders, referral codes, meeting requests, connections, event RSVPs, and your payout account link (Stripe keeps the account itself).

We keep messages other people sent in shared conversations (you appear as "Deleted user"); conversations you started, without your name; other people's notifications remain without your name, and message notifications can still show a short preview of a message you sent; and referral counts, without linking them to you. Other people's trips, posts, and expense reports that linked to your post or event stay, without the link.

Deletion does not cover payment records held by Stripe, which Stripe keeps under its legal retention; analytics and crash data already sent to PostHog and Sentry; or requests already sent to OpenAI through Hermes (trip details, Hermes chat messages, and caption-suggestion photos), subject to OpenAI API retention. Deletion also does not cover sign-in security logs that include your email and account ID, which we keep for up to 90 days for security and fraud prevention, or server logs (including a record of your deletion request), which we keep until they expire. Deleted data may persist in rolling encrypted backups until they expire, within 30 days.

8. Children's Privacy

Xplorr is not directed to children under 13 (or older if required by local law), and we ask users to confirm their age when they sign up. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

9. International Data Transfers

We may transfer, store, and process information in countries outside your own, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

10. Security

We use appropriate technical and organizational measures to protect personal data. No system is perfectly secure, so please keep your credentials safe.

11. Third-Party Sites & Services

The Service may link to or integrate with third-party apps and websites. Their privacy policies govern their practices, so please review them.

12. Changes to this Policy

We may update this Policy. We will post changes with an updated effective date and, if changes materially affect your rights, give additional notice as required by law.

13. Contact Us

Questions or requests: JRogers@xplorr.live

Postal: Xplorr, Inc., 7901 4th St N, Ste 300, St. Petersburg, FL 33702